last executing test programs: 3.044794098s ago: executing program 0 (id=414): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = syz_io_uring_setup(0xe42, &(0x7f0000000580)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.915319348s ago: executing program 0 (id=419): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0xaf30}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={r1, 0x30, &(0x7f0000000340)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000003c0)=0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlink(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000004c0)=""/15, 0xf) 2.914960348s ago: executing program 4 (id=421): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000006a00130f0000000000000000020000000000000018000a000000218976e4fe8bd34c04ba80881a542ea9d1635d3c1ea433eb7024357826e4ea22f488068bb4b97a340f3f8166a874b666764469d6e85f6ab0850f3a9b8c486bd0d3273ec3c5df1c2e7e20fdf0efe83fb68821e8c16bdaac567c8a49603807000000000000000000000000000000a06e0674861833aadc081e98a6f9c03496c1b834d993aa21b5a461409c9ec64870a8f49f577840813fc20f04fb203b4aa97096a4ef9928985e5923e4b209de33d958c72a7e56c7c364c625e978b01a916f002b889d"], 0x20}}, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) clock_getres(0x0, 0x0) 2.865488067s ago: executing program 4 (id=423): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x0, 0x0, 0x1d2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000000180000000300000000000000060000009500000000000000b0f71e851f13c97667a8be10380963801abd2e553d876fcc8712202d0f9abbfa582d4640681da77708898f0bd585d42ad3b28f9bbe63fd24367ed48949b19f2bec15e11c97db75b7b6f338764635775494355c29ae986c451d13e8a07c74c9c172e2d6c67771f3dcd4553d"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.859866008s ago: executing program 2 (id=424): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.850326228s ago: executing program 0 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006900030500000000000000000000000000000000080001"], 0x20}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x501, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x8, 0x3, 0x1, 0xf90, 0x7f, 0xeb7, 0x2, 0x9, 0x21, 0x9, 0x7ff, 0x80000001}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000"], 0x8, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x3c, 0x400]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x800004, 0x0, "7e12ddc5a89047bf00"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.362535686s ago: executing program 1 (id=428): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xffffffffffffff16, &(0x7f0000000180)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xb, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000440)='ext4_allocate_inode\x00', r1, 0x0, 0x49c}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_setup(0x203c, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 2.134421376s ago: executing program 3 (id=429): close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c4) personality(0xc417fec07cb910d1) 2.114511176s ago: executing program 1 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1204c, 0x81, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 2.061620886s ago: executing program 3 (id=431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000940)={0x0, &(0x7f0000000900)}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) stat(0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000040)={&(0x7f0000000840)=""/155, 0x9b, 0x6b2, 0x400}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b47, &(0x7f0000000040)) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.935908765s ago: executing program 2 (id=432): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) 1.854773035s ago: executing program 1 (id=433): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x8004745a, 0x2000000c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 1.854090075s ago: executing program 4 (id=434): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 1.853467555s ago: executing program 2 (id=435): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@resgid}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@nolazytime}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f00000004c0)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x153c, &(0x7f0000000140)={0x0, 0xa497, 0x40, 0x6, 0x1000236}, &(0x7f0000003000), &(0x7f0000003040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000003080)=[@ioring_restriction_sqe_op={0x1, 0x1c}, @ioring_restriction_sqe_flags_required={0x3, 0x1f}], 0x2) mknodat$null(r0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xf}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.684867735s ago: executing program 3 (id=436): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='workqueue_execute_end\x00', r0, 0x0, 0x7}, 0xffffff8c) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x1b, 0x8a, 0x1b}, 0x2c) 1.587699025s ago: executing program 2 (id=437): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000600)='./file2\x00', 0x404, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.403633244s ago: executing program 1 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000000000000}, 0x18) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 1.322026444s ago: executing program 3 (id=439): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x400c010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) msgget(0x2, 0x208) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 791.473492ms ago: executing program 2 (id=440): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 790.949632ms ago: executing program 1 (id=450): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000000), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 528.854072ms ago: executing program 4 (id=441): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r2, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0x4a, &(0x7f0000001980)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 528.513222ms ago: executing program 4 (id=442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 513.439152ms ago: executing program 1 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x140, 0x4d) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 383.362681ms ago: executing program 0 (id=444): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000280)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) pipe(0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r1, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 317.706131ms ago: executing program 3 (id=445): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000140000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x15, &(0x7f0000000180)="b1", 0x1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) brk(0x20ffc004) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)=""/17, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x2c81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 151.888271ms ago: executing program 0 (id=446): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 151.456351ms ago: executing program 3 (id=447): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x1125c, 0x0, 0xfffffffe, 0x6, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, &(0x7f0000000100)) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 151.286051ms ago: executing program 2 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 150.6301ms ago: executing program 4 (id=449): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='attr/exec\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r5 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r5, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000003040)=""/5, 0x5}], 0x1}, 0x8001}], 0x2, 0x0, 0x0) 0s ago: executing program 0 (id=451): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f0, 0x0, 0x3, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)=""/138, 0x8a}], 0xd, 0x100, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r4, &(0x7f00000004c0)="7ee1261f850fdedda8c2e198e14a89aac0a5a5a50b81b99178598013e6424a153558cccbef3257cd688469045a681406d366d92a09f5121ba0eda093cd37e2e437c585a1b73aee909fd96ab27a6343cede480895eec4865013c5666c5d42bb6f172d79fa0074ea6be4858fa55605b3416e33408e383b06c1d95d89abd98d9cb683129c15434759e33e5460d748c5cb4a2909b61848c1c754118e4102b04f8823c6e3fb442458323cd040e51ecd2d12bbb273d87717be48cc2864aa58f57be2ec71", &(0x7f0000000200)=""/73}, 0x20) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r5 = socket(0xa, 0x2, 0x0) getsockopt$nfc_llcp(r5, 0x88, 0x64, 0x0, 0x205fffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x92}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) kernel console output (not intermixed with test programs): [ 18.227378][ T29] audit: type=1400 audit(1737168165.404:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 20.892943][ T29] audit: type=1400 audit(1737168168.064:82): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.894028][ T3282] cgroup: Unknown subsys name 'net' [ 20.916198][ T29] audit: type=1400 audit(1737168168.064:83): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.944678][ T29] audit: type=1400 audit(1737168168.104:84): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.077846][ T3282] cgroup: Unknown subsys name 'cpuset' [ 21.085455][ T3282] cgroup: Unknown subsys name 'rlimit' [ 21.212349][ T29] audit: type=1400 audit(1737168168.384:85): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.236811][ T29] audit: type=1400 audit(1737168168.384:86): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.258077][ T29] audit: type=1400 audit(1737168168.384:87): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.279113][ T29] audit: type=1400 audit(1737168168.384:88): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.300085][ T29] audit: type=1400 audit(1737168168.394:89): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.327584][ T29] audit: type=1400 audit(1737168168.394:90): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.357965][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.367033][ T29] audit: type=1400 audit(1737168168.534:91): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.385544][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.463376][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 22.495816][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 22.561509][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.569385][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.577559][ T3303] bridge_slave_0: entered allmulticast mode [ 22.584488][ T3303] bridge_slave_0: entered promiscuous mode [ 22.605305][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.616609][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.624265][ T3303] bridge_slave_1: entered allmulticast mode [ 22.631210][ T3303] bridge_slave_1: entered promiscuous mode [ 22.643087][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.650328][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.661343][ T3296] bridge_slave_0: entered allmulticast mode [ 22.668170][ T3296] bridge_slave_0: entered promiscuous mode [ 22.675042][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.682347][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.689617][ T3296] bridge_slave_1: entered allmulticast mode [ 22.698104][ T3296] bridge_slave_1: entered promiscuous mode [ 22.718204][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.743583][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.761356][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.785428][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.802013][ T3303] team0: Port device team_slave_0 added [ 22.812217][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 22.830640][ T3303] team0: Port device team_slave_1 added [ 22.850534][ T3296] team0: Port device team_slave_0 added [ 22.877058][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.885063][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.913919][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.929780][ T3296] team0: Port device team_slave_1 added [ 22.935987][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.943192][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.970738][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.000914][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 23.014672][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 23.028156][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.035561][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.063905][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.092596][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.099719][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.126219][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.160420][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.167727][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.175000][ T3297] bridge_slave_0: entered allmulticast mode [ 23.181509][ T3297] bridge_slave_0: entered promiscuous mode [ 23.189083][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.196337][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.203742][ T3297] bridge_slave_1: entered allmulticast mode [ 23.210343][ T3297] bridge_slave_1: entered promiscuous mode [ 23.218558][ T3303] hsr_slave_0: entered promiscuous mode [ 23.224808][ T3303] hsr_slave_1: entered promiscuous mode [ 23.263407][ T3296] hsr_slave_0: entered promiscuous mode [ 23.269470][ T3296] hsr_slave_1: entered promiscuous mode [ 23.275635][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.284245][ T3296] Cannot create hsr debugfs directory [ 23.290717][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.304441][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.311792][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.318958][ T3306] bridge_slave_0: entered allmulticast mode [ 23.325976][ T3306] bridge_slave_0: entered promiscuous mode [ 23.343410][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.358738][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.366195][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.373710][ T3306] bridge_slave_1: entered allmulticast mode [ 23.380186][ T3306] bridge_slave_1: entered promiscuous mode [ 23.394750][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.402482][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.409928][ T3300] bridge_slave_0: entered allmulticast mode [ 23.416717][ T3300] bridge_slave_0: entered promiscuous mode [ 23.423641][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.431019][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.438302][ T3300] bridge_slave_1: entered allmulticast mode [ 23.444759][ T3300] bridge_slave_1: entered promiscuous mode [ 23.465284][ T3297] team0: Port device team_slave_0 added [ 23.485604][ T3297] team0: Port device team_slave_1 added [ 23.496320][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.510478][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.532870][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.546924][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.580023][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.587007][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.613365][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.630747][ T3300] team0: Port device team_slave_0 added [ 23.641137][ T3306] team0: Port device team_slave_0 added [ 23.649953][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.657040][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.685069][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.701987][ T3300] team0: Port device team_slave_1 added [ 23.709275][ T3306] team0: Port device team_slave_1 added [ 23.738934][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.746215][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.773047][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.790346][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.797620][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.824633][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.841003][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.848096][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.877354][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.893744][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.901108][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.927592][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.952982][ T3297] hsr_slave_0: entered promiscuous mode [ 23.959432][ T3297] hsr_slave_1: entered promiscuous mode [ 23.965820][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.973666][ T3297] Cannot create hsr debugfs directory [ 23.986351][ T3300] hsr_slave_0: entered promiscuous mode [ 23.992643][ T3300] hsr_slave_1: entered promiscuous mode [ 23.999098][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.007485][ T3300] Cannot create hsr debugfs directory [ 24.043074][ T3306] hsr_slave_0: entered promiscuous mode [ 24.049875][ T3306] hsr_slave_1: entered promiscuous mode [ 24.055982][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.063953][ T3306] Cannot create hsr debugfs directory [ 24.070101][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.079358][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.109338][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.135547][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.156286][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.178793][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.200918][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.210263][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.276690][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.296593][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.308403][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.331458][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.346235][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.361154][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.397264][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.407035][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.416203][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.425852][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.435825][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.445248][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.466786][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.477536][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.505176][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.519588][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.530500][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.537973][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.558335][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.565677][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.574870][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.582279][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.600265][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.611160][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.618360][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.645906][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.666515][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.683555][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.694355][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.736870][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.744516][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.760352][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.767791][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.788499][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.810785][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.825830][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.842158][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.853547][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.877946][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.887613][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.895314][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.905191][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.912321][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.934165][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.944897][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.960223][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.967655][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.976617][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.984072][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.010930][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.061040][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.084836][ T3303] veth0_vlan: entered promiscuous mode [ 25.099786][ T3303] veth1_vlan: entered promiscuous mode [ 25.135286][ T3296] veth0_vlan: entered promiscuous mode [ 25.152505][ T3303] veth0_macvtap: entered promiscuous mode [ 25.164179][ T3296] veth1_vlan: entered promiscuous mode [ 25.174547][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.183326][ T3303] veth1_macvtap: entered promiscuous mode [ 25.193701][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.213480][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.225770][ T3296] veth0_macvtap: entered promiscuous mode [ 25.238434][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.250080][ T3296] veth1_macvtap: entered promiscuous mode [ 25.261226][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.270158][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.279088][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.287927][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.326554][ T3300] veth0_vlan: entered promiscuous mode [ 25.336896][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.348598][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.360604][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.369977][ T3300] veth1_vlan: entered promiscuous mode [ 25.381428][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.403335][ T3297] veth0_vlan: entered promiscuous mode [ 25.414244][ T3300] veth0_macvtap: entered promiscuous mode [ 25.429087][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.439880][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.452292][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.469415][ T3300] veth1_macvtap: entered promiscuous mode [ 25.476737][ T3306] veth0_vlan: entered promiscuous mode [ 25.486938][ T3297] veth1_vlan: entered promiscuous mode [ 25.495086][ T3296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.504031][ T3296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.513200][ T3296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.522150][ T3296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.524098][ T3439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.540650][ T3439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.543559][ T3306] veth1_vlan: entered promiscuous mode [ 25.558606][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.570173][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.580501][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.591188][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.602000][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.615143][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.627410][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.638373][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.648899][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.661522][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.674340][ T3306] veth0_macvtap: entered promiscuous mode [ 25.681858][ T3306] veth1_macvtap: entered promiscuous mode [ 25.694210][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.704304][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.713304][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.722785][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.748343][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.759707][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.769769][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.780997][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.791724][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.803430][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.816583][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.828378][ T3297] veth0_macvtap: entered promiscuous mode [ 25.841496][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.852354][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.862849][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.873645][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.884331][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.896650][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.936723][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.949569][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.959755][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.969018][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.978025][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.004102][ T3297] veth1_macvtap: entered promiscuous mode [ 26.053905][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.065160][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.075027][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.086221][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.096763][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.107952][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.118066][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.128749][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.143486][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 26.143500][ T29] audit: type=1400 audit(1737168173.224:133): avc: denied { create } for pid=3446 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.176612][ T29] audit: type=1400 audit(1737168173.354:134): avc: denied { bind } for pid=3446 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.195887][ T29] audit: type=1400 audit(1737168173.354:135): avc: denied { setopt } for pid=3446 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.216790][ T29] audit: type=1400 audit(1737168173.354:136): avc: denied { write } for pid=3446 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.434560][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.573128][ T29] audit: type=1400 audit(1737168173.514:137): avc: denied { create } for pid=3449 comm="syz.2.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.594975][ T29] audit: type=1400 audit(1737168173.514:138): avc: denied { create } for pid=3449 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.616746][ T29] audit: type=1400 audit(1737168173.514:139): avc: denied { connect } for pid=3449 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.636435][ T29] audit: type=1400 audit(1737168173.514:140): avc: denied { bind } for pid=3449 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.640020][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.658166][ T29] audit: type=1400 audit(1737168173.524:141): avc: denied { write } for pid=3449 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.670622][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.670636][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.670650][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.670666][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.670679][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.670688][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.670701][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.684707][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.691173][ T29] audit: type=1400 audit(1737168173.594:142): avc: denied { mounton } for pid=3451 comm="syz.1.7" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.805934][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.814790][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.824245][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.833163][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.063879][ T3467] syz.1.11 (3467) used obsolete PPPIOCDETACH ioctl [ 27.200232][ T3476] syzkaller0: entered promiscuous mode [ 27.205998][ T3476] syzkaller0: entered allmulticast mode [ 27.233864][ T3482] 9Hÿ: renamed from bond0 (while UP) [ 27.245096][ T3482] 9Hÿ: entered promiscuous mode [ 27.251942][ T3482] bond_slave_0: entered promiscuous mode [ 27.258453][ T3482] bond_slave_1: entered promiscuous mode [ 27.324537][ T3486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20'. [ 27.440428][ T3494] netlink: 'syz.2.22': attribute type 27 has an invalid length. [ 27.495196][ T3499] loop4: detected capacity change from 0 to 2048 [ 27.515704][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.523469][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.534124][ T3499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.597550][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 27.610430][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 27.653274][ T3494] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.664865][ T3494] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.674735][ T3494] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.685039][ T3494] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.710162][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.718753][ T3509] loop3: detected capacity change from 0 to 128 [ 27.741664][ T3509] EXT4-fs: Ignoring removed nobh option [ 27.760596][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 27.776329][ T3500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.786295][ T3509] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.788318][ T3500] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.812645][ T3500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 27.818074][ T3509] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.915184][ T3514] netlink: 44 bytes leftover after parsing attributes in process `syz.4.27'. [ 28.003345][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.405418][ T3533] loop3: detected capacity change from 0 to 164 [ 28.420512][ T3533] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 28.527287][ T3500] syz.2.22 (3500) used greatest stack depth: 10672 bytes left [ 28.556611][ T3540] netlink: 288 bytes leftover after parsing attributes in process `syz.1.37'. [ 28.566154][ T3540] unsupported nlmsg_type 40 [ 28.587570][ T3542] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.665961][ T3546] loop1: detected capacity change from 0 to 1024 [ 28.690358][ T3546] ======================================================= [ 28.690358][ T3546] WARNING: The mand mount option has been deprecated and [ 28.690358][ T3546] and is ignored by this kernel. Remove the mand [ 28.690358][ T3546] option from the mount to silence this warning. [ 28.690358][ T3546] ======================================================= [ 28.730321][ T3546] EXT4-fs: Ignoring removed i_version option [ 28.736784][ T3546] EXT4-fs: Ignoring removed bh option [ 28.764793][ T3555] loop2: detected capacity change from 0 to 1024 [ 28.777697][ T3546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.791525][ T3555] EXT4-fs: Ignoring removed nobh option [ 28.820249][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.847130][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 28.854855][ T3555] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.032078][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.082636][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.156339][ T3575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 29.162758][ T3572] loop4: detected capacity change from 0 to 2048 [ 29.189467][ T3575] bridge0: entered promiscuous mode [ 29.203512][ T3575] macsec1: entered promiscuous mode [ 29.217269][ T3572] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 29.227233][ T3572] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 29.242772][ T3575] bridge0: left promiscuous mode [ 29.262904][ T3572] EXT4-fs (loop4): failed to initialize system zone (-117) [ 29.272952][ T3572] EXT4-fs (loop4): mount failed [ 29.395863][ T3587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 29.498194][ T3595] syz.1.55[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.498250][ T3595] syz.1.55[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.517547][ T3595] syz.1.55[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.791906][ T3604] netlink: 96 bytes leftover after parsing attributes in process `syz.3.58'. [ 29.955940][ T3612] syzkaller0: entered allmulticast mode [ 29.975867][ T3612] syzkaller0 (unregistering): left allmulticast mode [ 30.110582][ T3618] bond_slave_1: mtu less than device minimum [ 30.139179][ T3622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 30.229410][ T3626] loop3: detected capacity change from 0 to 4096 [ 30.249122][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.343330][ T3634] loop4: detected capacity change from 0 to 128 [ 30.369412][ T3636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.387954][ T3634] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.418781][ T3634] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.606166][ T3641] ref_ctr increment failed for inode: 0x86 offset: 0x1 ref_ctr_offset: 0x82 of mm: 0xffff88811c43a4c0 [ 30.640456][ T3640] uprobe: syz.0.74:3640 failed to unregister, leaking uprobe [ 30.662519][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.219574][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.388763][ T3657] capability: warning: `syz.4.81' uses deprecated v2 capabilities in a way that may be insecure [ 31.405353][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 31.405365][ T29] audit: type=1400 audit(1737168178.584:411): avc: denied { setopt } for pid=3656 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.483281][ T29] audit: type=1326 audit(1737168178.654:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.519288][ T3669] pimreg: entered allmulticast mode [ 31.527937][ T29] audit: type=1400 audit(1737168178.654:413): avc: denied { getopt } for pid=3660 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.547654][ T29] audit: type=1326 audit(1737168178.684:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.547717][ T29] audit: type=1326 audit(1737168178.684:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.547738][ T29] audit: type=1326 audit(1737168178.684:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.547756][ T29] audit: type=1326 audit(1737168178.684:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.547844][ T29] audit: type=1326 audit(1737168178.684:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.547866][ T29] audit: type=1326 audit(1737168178.684:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.547888][ T29] audit: type=1326 audit(1737168178.684:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcac2f45d29 code=0x7ffc0000 [ 31.595153][ T3633] syz.2.70 (3633) used greatest stack depth: 6360 bytes left [ 31.994579][ T3676] loop2: detected capacity change from 0 to 8192 [ 32.044554][ T3685] sch_fq: defrate 0 ignored. [ 32.255800][ T3672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 32.263555][ T3696] netlink: zone id is out of range [ 32.273775][ T3696] netlink: zone id is out of range [ 32.279145][ T3696] netlink: set zone limit has 4 unknown bytes [ 32.581799][ T3713] loop1: detected capacity change from 0 to 512 [ 32.618593][ T3715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.104'. [ 32.643577][ T3713] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.103: Invalid inode bitmap blk 4 in block_group 0 [ 32.660295][ T3713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.710282][ T3707] IPv6: Can't replace route, no match found [ 32.751231][ C1] hrtimer: interrupt took 36409 ns [ 32.759345][ T3718] loop2: detected capacity change from 0 to 256 [ 32.809806][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.884879][ T3726] bond_slave_1: entered promiscuous mode [ 32.891939][ T3726] bond_slave_1: left promiscuous mode [ 32.901765][ T3729] Illegal XDP return value 2817652552 on prog (id 102) dev N/A, expect packet loss! [ 33.048495][ T3748] loop4: detected capacity change from 0 to 164 [ 33.115279][ T3752] syz.4.117: attempt to access beyond end of device [ 33.115279][ T3752] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 33.150471][ T3752] syz.4.117: attempt to access beyond end of device [ 33.150471][ T3752] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.173354][ T3752] syz.4.117: attempt to access beyond end of device [ 33.173354][ T3752] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.189019][ T3752] syz.4.117: attempt to access beyond end of device [ 33.189019][ T3752] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.203090][ T3752] syz.4.117: attempt to access beyond end of device [ 33.203090][ T3752] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.224459][ T3752] syz.4.117: attempt to access beyond end of device [ 33.224459][ T3752] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.267106][ T3752] syz.4.117: attempt to access beyond end of device [ 33.267106][ T3752] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.337366][ T3759] netlink: 3 bytes leftover after parsing attributes in process `syz.1.121'. [ 33.377204][ T3759] 0ªX¹¦À: renamed from caif0 [ 33.399725][ T3759] 0ªX¹¦À: entered allmulticast mode [ 33.405076][ T3759] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 33.460141][ T3767] loop3: detected capacity change from 0 to 256 [ 33.513915][ T3771] loop1: detected capacity change from 0 to 512 [ 33.521161][ T3771] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.534273][ T3771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.559120][ T3771] EXT4-fs (loop1): 1 truncate cleaned up [ 33.569822][ T3773] loop3: detected capacity change from 0 to 256 [ 33.574439][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.576781][ T3773] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.634850][ T3773] FAT-fs (loop3): Directory bread(block 64) failed [ 33.641749][ T3773] FAT-fs (loop3): Directory bread(block 65) failed [ 33.665438][ T3773] FAT-fs (loop3): Directory bread(block 66) failed [ 33.680648][ T3782] tmpfs: Unsupported parameter 'huge' [ 33.696809][ T3781] loop2: detected capacity change from 0 to 4096 [ 33.697841][ T3773] FAT-fs (loop3): Directory bread(block 67) failed [ 33.740744][ T3773] FAT-fs (loop3): Directory bread(block 68) failed [ 33.776808][ T3773] FAT-fs (loop3): Directory bread(block 69) failed [ 33.794981][ T3773] FAT-fs (loop3): Directory bread(block 70) failed [ 33.798737][ T3781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.811881][ T3773] FAT-fs (loop3): Directory bread(block 71) failed [ 33.844064][ T3773] FAT-fs (loop3): Directory bread(block 72) failed [ 33.850847][ T3773] FAT-fs (loop3): Directory bread(block 73) failed [ 33.930216][ T3792] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.133'. [ 33.966939][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.978507][ T3773] netlink: 'syz.3.126': attribute type 4 has an invalid length. [ 34.129183][ T3797] syzkaller0: entered promiscuous mode [ 34.134809][ T3797] syzkaller0: entered allmulticast mode [ 34.627771][ T3873] loop4: detected capacity change from 0 to 512 [ 34.634534][ T3873] EXT4-fs: Ignoring removed i_version option [ 34.763823][ T3873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.790194][ T3873] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.803427][ T3873] EXT4-fs (loop4): 1 truncate cleaned up [ 34.810165][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.151013][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.175822][ T3886] loop2: detected capacity change from 0 to 4096 [ 35.196638][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.301137][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.342943][ T3895] syzkaller0: entered promiscuous mode [ 35.348503][ T3895] syzkaller0: entered allmulticast mode [ 35.708305][ T3904] syzkaller0: entered promiscuous mode [ 35.713824][ T3904] syzkaller0: entered allmulticast mode [ 36.025700][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.162254][ T3922] loop3: detected capacity change from 0 to 512 [ 36.169176][ T3922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.177317][ T3924] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.192344][ T3922] EXT4-fs (loop3): 1 truncate cleaned up [ 36.198728][ T3922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.323562][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 36.341506][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 36.414919][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 36.414933][ T29] audit: type=1326 audit(1737168183.584:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.444421][ T29] audit: type=1326 audit(1737168183.584:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.487026][ T3936] hsr_slave_1 (unregistering): left promiscuous mode [ 36.507994][ T29] audit: type=1326 audit(1737168183.684:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.591582][ T29] audit: type=1326 audit(1737168183.764:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.643153][ T29] audit: type=1326 audit(1737168183.764:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.666728][ T29] audit: type=1326 audit(1737168183.794:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.690277][ T29] audit: type=1326 audit(1737168183.794:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.713701][ T29] audit: type=1326 audit(1737168183.794:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3937 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 36.737262][ T29] audit: type=1326 audit(1737168183.794:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 36.760504][ T29] audit: type=1326 audit(1737168183.794:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 36.902152][ T3950] loop1: detected capacity change from 0 to 4096 [ 36.959804][ T3955] loop4: detected capacity change from 0 to 512 [ 36.966288][ T3955] EXT4-fs: Ignoring removed oldalloc option [ 36.978779][ T3950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.023885][ T3955] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.170: Parent and EA inode have the same ino 15 [ 37.060024][ T3955] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.170: Parent and EA inode have the same ino 15 [ 37.095050][ T3955] EXT4-fs (loop4): 1 orphan inode deleted [ 37.111248][ T3955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.196240][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.231246][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.450354][ T3921] syz.3.158 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 37.461295][ T3921] CPU: 1 UID: 0 PID: 3921 Comm: syz.3.158 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 37.472125][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.482218][ T3921] Call Trace: [ 37.485694][ T3921] [ 37.488714][ T3921] dump_stack_lvl+0xf2/0x150 [ 37.493880][ T3921] dump_stack+0x15/0x1a [ 37.498095][ T3921] dump_header+0x83/0x2d0 [ 37.502505][ T3921] oom_kill_process+0x341/0x4c0 [ 37.507454][ T3921] out_of_memory+0x9af/0xbe0 [ 37.512039][ T3921] ? css_next_descendant_pre+0x11c/0x140 [ 37.517760][ T3921] mem_cgroup_out_of_memory+0x13e/0x190 [ 37.523324][ T3921] try_charge_memcg+0x508/0x7f0 [ 37.528274][ T3921] charge_memcg+0x50/0xc0 [ 37.532596][ T3921] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 37.538587][ T3921] __read_swap_cache_async+0x236/0x480 [ 37.544175][ T3921] swap_cluster_readahead+0x279/0x3f0 [ 37.549561][ T3921] swapin_readahead+0xe4/0x6f0 [ 37.554387][ T3921] ? __rcu_read_unlock+0x34/0x70 [ 37.559412][ T3921] ? swap_cache_get_folio+0x77/0x210 [ 37.564833][ T3921] do_swap_page+0x31b/0x2550 [ 37.569551][ T3921] ? try_to_wake_up+0x260/0x570 [ 37.574910][ T3921] ? __rcu_read_lock+0x36/0x50 [ 37.579746][ T3921] ? __pfx_default_wake_function+0x10/0x10 [ 37.585587][ T3921] handle_mm_fault+0x8e4/0x2ac0 [ 37.590542][ T3921] exc_page_fault+0x3b9/0x650 [ 37.595231][ T3921] asm_exc_page_fault+0x26/0x30 [ 37.600096][ T3921] RIP: 0033:0x7fc98493fb6c [ 37.604507][ T3921] Code: 30 48 89 fb 4c 39 e2 0f 82 c3 01 00 00 48 29 d0 44 8b 7f 28 48 39 f0 72 25 81 7b 28 fe ff ff 7f 0f 87 c9 01 00 00 48 83 c4 18 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 84 00 00 00 00 00 4c 8b [ 37.624315][ T3921] RSP: 002b:00007ffe4d23a4b8 EFLAGS: 00010206 [ 37.630414][ T3921] RAX: 00000000005dd950 RBX: 00007fc985795720 RCX: 0000000000000000 [ 37.638370][ T3921] RDX: 0000001b31a20220 RSI: 0000000000000008 RDI: 00007fc985795720 [ 37.646527][ T3921] RBP: 000000000000049a R08: 00007fc9838eb0b0 R09: 00007fc984c52000 [ 37.654732][ T3921] R10: 00007fc9838eb008 R11: 000000000000000d R12: 0000001b31a20218 [ 37.662872][ T3921] R13: 00007fc984c661f8 R14: 0000000000000001 R15: 0000000000022490 [ 37.673967][ T3921] [ 37.677202][ T3921] memory: usage 307200kB, limit 307200kB, failcnt 298 [ 37.684191][ T3921] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 37.692288][ T3921] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0 [ 37.699650][ T3921] Memory cgroup stats for /syz3: [ 37.701355][ T3921] cache 151552 [ 37.709837][ T3921] rss 0 [ 37.712688][ T3921] shmem 0 [ 37.715727][ T3921] mapped_file 147456 [ 37.719719][ T3921] dirty 147456 [ 37.723162][ T3921] writeback 0 [ 37.726480][ T3921] workingset_refault_anon 96 [ 37.731092][ T3921] workingset_refault_file 30 [ 37.735814][ T3921] swap 462848 [ 37.739156][ T3921] swapcached 0 [ 37.742592][ T3921] pgpgin 11158 [ 37.745981][ T3921] pgpgout 11121 [ 37.749472][ T3921] pgfault 13158 [ 37.753465][ T3921] pgmajfault 49 [ 37.756944][ T3921] inactive_anon 0 [ 37.760613][ T3921] active_anon 0 [ 37.764450][ T3921] inactive_file 151552 [ 37.768903][ T3921] active_file 0 [ 37.772378][ T3921] unevictable 0 [ 37.775959][ T3921] hierarchical_memory_limit 314572800 [ 37.781545][ T3921] hierarchical_memsw_limit 9223372036854771712 [ 37.787913][ T3921] total_cache 151552 [ 37.791841][ T3921] total_rss 0 [ 37.795294][ T3921] total_shmem 0 [ 37.798977][ T3921] total_mapped_file 147456 [ 37.803602][ T3921] total_dirty 147456 [ 37.807661][ T3921] total_writeback 0 [ 37.811465][ T3921] total_workingset_refault_anon 96 [ 37.816876][ T3921] total_workingset_refault_file 30 [ 37.822063][ T3921] total_swap 462848 [ 37.825872][ T3921] total_swapcached 0 [ 37.829782][ T3921] total_pgpgin 11158 [ 37.833739][ T3921] total_pgpgout 11121 [ 37.837775][ T3921] total_pgfault 13158 [ 37.841883][ T3921] total_pgmajfault 49 [ 37.845871][ T3921] total_inactive_anon 0 [ 37.850142][ T3921] total_active_anon 0 [ 37.854154][ T3921] total_inactive_file 151552 [ 37.856344][ T3982] loop4: detected capacity change from 0 to 2048 [ 37.858819][ T3921] total_active_file 0 [ 37.858829][ T3921] total_unevictable 0 [ 37.858836][ T3921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 37.869716][ T3982] EXT4-fs: Ignoring removed nobh option [ 37.873296][ T3921] ,cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.158,pid=3921,uid=0 [ 37.896467][ T3921] Memory cgroup out of memory: Killed process 3921 (syz.3.158) total-vm:95696kB, anon-rss:916kB, file-rss:22652kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 37.918694][ T3982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.960212][ T3988] netlink: 'syz.0.181': attribute type 7 has an invalid length. [ 37.968039][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 37.976391][ T3982] EXT4-fs (loop4): shut down requested (0) [ 37.994075][ T3982] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 38.004576][ T3982] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 38.018392][ T3982] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 38.133352][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.478172][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.569042][ T4012] loop1: detected capacity change from 0 to 512 [ 38.600066][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.652534][ T4012] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.409835][ T4023] bond_slave_1: mtu less than device minimum [ 39.410010][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.631722][ T4037] syzkaller0: entered promiscuous mode [ 39.637345][ T4037] syzkaller0: entered allmulticast mode [ 39.649159][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 39.888655][ T4049] loop1: detected capacity change from 0 to 512 [ 39.896100][ T4049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.915799][ T4048] bridge0: entered promiscuous mode [ 39.922475][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 39.933331][ T4048] bridge_slave_1: left allmulticast mode [ 39.939001][ T4048] bridge_slave_1: left promiscuous mode [ 39.944683][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.953171][ T4049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.965970][ T4049] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.976370][ T4048] bridge_slave_0: left allmulticast mode [ 39.979515][ T4049] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.982949][ T4048] bridge_slave_0: left promiscuous mode [ 39.997216][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.030671][ T4048] bridge0 (unregistering): left promiscuous mode [ 40.061195][ T4054] loop1: detected capacity change from 0 to 1024 [ 40.068014][ T4054] EXT4-fs: Ignoring removed i_version option [ 40.074142][ T4054] EXT4-fs: Ignoring removed bh option [ 40.112695][ T4054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.176519][ T4060] syz.3.206[4060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.176578][ T4060] syz.3.206[4060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.189042][ T4060] syz.3.206[4060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.301544][ T4069] vlan2: entered promiscuous mode [ 40.318001][ T4069] vlan2: entered allmulticast mode [ 40.323119][ T4069] hsr_slave_1: entered allmulticast mode [ 40.343759][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.365008][ T4072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 40.410306][ T4069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 40.437088][ T4069] hsr_slave_1 (unregistering): left allmulticast mode [ 40.458434][ T4069] hsr_slave_1 (unregistering): left promiscuous mode [ 40.652749][ T4086] loop4: detected capacity change from 0 to 128 [ 40.668149][ T4086] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.670578][ T4084] loop2: detected capacity change from 0 to 512 [ 40.702583][ T4086] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.767480][ T4084] EXT4-fs: inline encryption not supported [ 40.813340][ T4084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.841003][ T4084] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.859553][ T4078] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.908373][ T4084] Zero length message leads to an empty skb [ 40.930727][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 41.027525][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.049005][ T4093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.093570][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 41.130712][ T4093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.190594][ T4093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.271219][ T4093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.306913][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 41.329015][ T4093] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.350206][ T4093] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.374953][ T4093] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.387833][ T4093] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.445480][ T29] kauditd_printk_skb: 2226 callbacks suppressed [ 41.445494][ T29] audit: type=1400 audit(1737168188.614:2938): avc: denied { nlmsg_read } for pid=4108 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.472323][ T4110] netlink: 104 bytes leftover after parsing attributes in process `syz.1.225'. [ 41.509800][ T29] audit: type=1326 audit(1737168188.674:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.533300][ T29] audit: type=1326 audit(1737168188.674:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.585130][ T29] audit: type=1400 audit(1737168188.754:2941): avc: denied { setopt } for pid=4106 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.585319][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 41.641866][ T29] audit: type=1326 audit(1737168188.814:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.665308][ T29] audit: type=1326 audit(1737168188.814:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.688778][ T29] audit: type=1326 audit(1737168188.814:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.712386][ T29] audit: type=1326 audit(1737168188.814:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.735811][ T29] audit: type=1326 audit(1737168188.814:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.740692][ T4121] loop2: detected capacity change from 0 to 2048 [ 41.759121][ T29] audit: type=1326 audit(1737168188.814:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4097 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc984a75d29 code=0x7ffc0000 [ 41.800569][ T4121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.822808][ T4125] loop4: detected capacity change from 0 to 4096 [ 41.832689][ T4125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.136299][ T4125] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.086561][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.356447][ T4154] syz.4.238[4154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.356565][ T4154] syz.4.238[4154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.381790][ T4154] syz.4.238[4154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.405407][ T4154] loop4: detected capacity change from 0 to 2048 [ 43.424525][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.457831][ T4154] loop4: p1 < > p4 [ 43.467144][ T4154] loop4: p4 size 8388608 extends beyond EOD, truncated [ 43.500744][ T4156] tipc: Started in network mode [ 43.505818][ T4156] tipc: Node identity 7, cluster identity 4711 [ 43.512137][ T4156] tipc: Node number set to 7 [ 43.528683][ T4156] tipc: Cannot configure node identity twice [ 43.637189][ T4161] ipvlan2: entered promiscuous mode [ 43.647806][ T4161] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 43.676383][ T4161] team0: Device ipvlan2 is already an upper device of the team interface [ 44.052878][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 44.176371][ T4176] loop4: detected capacity change from 0 to 8192 [ 44.204733][ T4181] loop2: detected capacity change from 0 to 512 [ 44.217443][ T4176] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.299361][ T4181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.358867][ T4181] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.482291][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.555110][ T4188] bond_slave_1: mtu less than device minimum [ 44.698391][ T4195] syz.3.252[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.698459][ T4195] syz.3.252[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.789992][ T4195] syz.3.252[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.803087][ T4200] loop3: detected capacity change from 0 to 2048 [ 44.888436][ T4200] loop3: p1 < > p4 [ 44.918931][ T4200] loop3: p4 size 8388608 extends beyond EOD, truncated [ 45.008319][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 45.014168][ T4212] : renamed from bond0 (while UP) [ 45.240575][ T4223] loop4: detected capacity change from 0 to 512 [ 45.248926][ T4220] loop2: detected capacity change from 0 to 128 [ 45.255566][ T4220] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.296244][ T4220] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.310170][ T4223] EXT4-fs (loop4): 1 orphan inode deleted [ 45.322660][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.335664][ T3801] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:10: Failed to release dquot type 1 [ 45.362426][ T4226] loop3: detected capacity change from 0 to 1024 [ 45.373019][ T4226] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.478741][ T4226] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.259: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 45.500303][ T4226] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.259: couldn't read orphan inode 11 (err -117) [ 45.513840][ T4226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.536281][ T4226] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.259: Invalid block bitmap block 0 in block_group 0 [ 45.551832][ T4226] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.259: Failed to acquire dquot type 0 [ 45.590512][ T4223] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.724669][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 46.222279][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.285595][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.394651][ T4240] vlan2: entered promiscuous mode [ 46.399804][ T4240] vlan2: entered allmulticast mode [ 46.404939][ T4240] hsr_slave_1: entered allmulticast mode [ 46.479083][ T4243] team0: entered promiscuous mode [ 46.484165][ T4243] team_slave_0: entered promiscuous mode [ 46.489954][ T4243] team_slave_1: entered promiscuous mode [ 46.517120][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 46.517141][ T29] audit: type=1400 audit(1737168193.644:2973): avc: denied { ioctl } for pid=4241 comm="syz.0.268" path="socket:[5918]" dev="sockfs" ino=5918 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.553323][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 46.562705][ T4244] syzkaller0: entered allmulticast mode [ 46.584060][ T4244] syzkaller0 (unregistering): left allmulticast mode [ 46.670104][ T4245] hsr_slave_1 (unregistering): left allmulticast mode [ 46.683465][ T4245] hsr_slave_1 (unregistering): left promiscuous mode [ 46.692979][ T4241] team0: left promiscuous mode [ 46.697925][ T4241] team_slave_0: left promiscuous mode [ 46.703391][ T4241] team_slave_1: left promiscuous mode [ 46.788924][ T29] audit: type=1400 audit(1737168193.954:2974): avc: denied { create } for pid=4251 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.850109][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.863258][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.871338][ T29] audit: type=1400 audit(1737168194.014:2975): avc: denied { write } for pid=4249 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.896399][ T4257] loop2: detected capacity change from 0 to 512 [ 46.917138][ T29] audit: type=1326 audit(1737168194.054:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cf65d29 code=0x7ffc0000 [ 46.940604][ T29] audit: type=1326 audit(1737168194.054:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cf65d29 code=0x7ffc0000 [ 46.964022][ T29] audit: type=1326 audit(1737168194.054:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab3cf65d29 code=0x7ffc0000 [ 46.987937][ T29] audit: type=1326 audit(1737168194.054:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cf65d29 code=0x7ffc0000 [ 46.990242][ T4257] EXT4-fs: Invalid want_extra_isize 3 [ 47.011238][ T29] audit: type=1326 audit(1737168194.054:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fab3cf65d29 code=0x7ffc0000 [ 47.039858][ T29] audit: type=1326 audit(1737168194.064:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cf65d29 code=0x7ffc0000 [ 47.063169][ T29] audit: type=1326 audit(1737168194.064:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3cf65d29 code=0x7ffc0000 [ 47.089839][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.098552][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.365039][ T4273] bridge: RTM_NEWNEIGH with invalid ether address [ 47.985864][ T4260] x_tables: duplicate underflow at hook 1 [ 48.020679][ T4292] netlink: 'syz.3.283': attribute type 4 has an invalid length. [ 48.078035][ T4288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 48.086918][ T4288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 48.123091][ T4293] netlink: 'syz.3.283': attribute type 4 has an invalid length. [ 48.166817][ T4288] team0: entered promiscuous mode [ 48.171112][ T4297] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 48.172034][ T4288] team_slave_0: entered promiscuous mode [ 48.185336][ T4288] team_slave_1: entered promiscuous mode [ 48.194628][ T4288] team0: left promiscuous mode [ 48.199604][ T4288] team_slave_0: left promiscuous mode [ 48.205102][ T4288] team_slave_1: left promiscuous mode [ 48.211157][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 48.240579][ T4299] vlan2: entered allmulticast mode [ 48.246203][ T4299] team0: entered allmulticast mode [ 48.251428][ T4299] team_slave_0: entered allmulticast mode [ 48.257318][ T4299] team_slave_1: entered allmulticast mode [ 48.263740][ T4299] team0: left allmulticast mode [ 48.268728][ T4299] team_slave_0: left allmulticast mode [ 48.274209][ T4299] team_slave_1: left allmulticast mode [ 48.289141][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 48.291251][ T4301] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 48.306865][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 48.326474][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 48.335181][ T4297] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 48.443445][ T4316] loop3: detected capacity change from 0 to 512 [ 48.480402][ T4316] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.292: corrupted in-inode xattr: invalid ea_ino [ 48.496125][ T4316] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.292: couldn't read orphan inode 15 (err -117) [ 48.509109][ T4316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.527641][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.630381][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 48.753460][ T4352] program syz.2.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.867097][ T4369] loop4: detected capacity change from 0 to 1024 [ 48.891533][ T4369] ext4: Bad value for 'barrier' [ 49.288650][ T4393] loop4: detected capacity change from 0 to 512 [ 49.354354][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.398522][ T4393] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.457826][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.510557][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.557272][ T4407] syz.3.317[4407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.557313][ T4407] syz.3.317[4407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.568851][ T4407] syz.3.317[4407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.646498][ T4412] loop3: detected capacity change from 0 to 1024 [ 49.665528][ T4412] EXT4-fs: Ignoring removed nobh option [ 49.676134][ T4414] loop2: detected capacity change from 0 to 512 [ 49.684036][ T4414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.696444][ T4412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.711030][ T4414] EXT4-fs (loop2): 1 truncate cleaned up [ 49.717319][ T4414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.762621][ T4410] __nla_validate_parse: 2 callbacks suppressed [ 49.762636][ T4410] netlink: 84 bytes leftover after parsing attributes in process `syz.4.320'. [ 49.777910][ T4412] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.318: bg 0: block 456: padding at end of block bitmap is not set [ 49.800236][ T4423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 49.811106][ T4414] dccp_close: ABORT with 192 bytes unread [ 49.835060][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.868618][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.033443][ T4435] loop2: detected capacity change from 0 to 2048 [ 50.418126][ T4435] loop2: p1 < > p4 [ 50.436865][ T4435] loop2: p4 size 8388608 extends beyond EOD, truncated [ 50.452758][ T2999] loop2: p1 < > p4 [ 50.465758][ T2999] loop2: p4 size 8388608 extends beyond EOD, truncated [ 50.663895][ T4450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.331'. [ 50.673036][ T4450] netlink: 'syz.3.331': attribute type 7 has an invalid length. [ 50.681257][ T4450] netlink: 'syz.3.331': attribute type 8 has an invalid length. [ 50.688917][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 50.931046][ T2999] loop2: p1 < > p4 [ 50.937081][ T2999] loop2: p4 size 8388608 extends beyond EOD, truncated [ 50.966712][ T3673] udevd[3673]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.982581][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 51.002838][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 51.026225][ T4463] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 51.055099][ T4462] team0 (unregistering): Port device team_slave_0 removed [ 51.071557][ T4462] team0 (unregistering): Port device team_slave_1 removed [ 51.088442][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 51.132426][ T4468] bridge0: port 3(vlan2) entered blocking state [ 51.138818][ T4468] bridge0: port 3(vlan2) entered disabled state [ 51.145189][ T4468] vlan2: entered allmulticast mode [ 51.150369][ T4468] dummy0: entered allmulticast mode [ 51.156328][ T4468] vlan2: entered promiscuous mode [ 51.161438][ T4468] dummy0: entered promiscuous mode [ 51.167407][ T4468] bridge0: port 3(vlan2) entered blocking state [ 51.173696][ T4468] bridge0: port 3(vlan2) entered forwarding state [ 51.202679][ T4470] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=4470 comm=syz.0.339 [ 52.145193][ T4487] syz.3.345[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.145258][ T4487] syz.3.345[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.159379][ T4487] syz.3.345[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.329695][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 52.329713][ T29] audit: type=1400 audit(1737168199.494:3205): avc: denied { write } for pid=4495 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.521052][ T4499] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 52.529647][ T4499] syzkaller0: entered promiscuous mode [ 52.535219][ T4499] syzkaller0: entered allmulticast mode [ 52.615877][ T4507] block device autoloading is deprecated and will be removed. [ 52.660168][ T4498] 9pnet_fd: Insufficient options for proto=fd [ 52.759341][ T4507] syz.2.351: attempt to access beyond end of device [ 52.759341][ T4507] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.817126][ T29] audit: type=1400 audit(1737168199.964:3206): avc: denied { read } for pid=4497 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.961107][ T29] audit: type=1400 audit(1737168200.134:3207): avc: denied { search } for pid=4516 comm="syz.3.353" name="/" dev="configfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.031950][ T4519] syz.2.355[4519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.032209][ T4519] syz.2.355[4519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.263938][ T4519] syz.2.355[4519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.285432][ T4521] netlink: 'syz.3.356': attribute type 4 has an invalid length. [ 53.315085][ T29] audit: type=1400 audit(1737168200.164:3208): avc: denied { read } for pid=4516 comm="syz.3.353" name="/" dev="configfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.337312][ T29] audit: type=1400 audit(1737168200.164:3209): avc: denied { open } for pid=4516 comm="syz.3.353" path="/" dev="configfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.481007][ T4529] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 53.506544][ T29] audit: type=1400 audit(1737168200.654:3210): avc: denied { load_policy } for pid=4528 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.527114][ T4529] SELinux: failed to load policy [ 53.972002][ T4533] bond0: entered promiscuous mode [ 53.977317][ T4533] bond0: entered allmulticast mode [ 53.996148][ T4533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.057927][ T29] audit: type=1400 audit(1737168201.224:3211): avc: denied { write } for pid=4536 comm="syz.4.360" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.254266][ T4544] netlink: 'syz.0.363': attribute type 153 has an invalid length. [ 54.721159][ T4557] loop2: detected capacity change from 0 to 1024 [ 54.737542][ T29] audit: type=1400 audit(1737168201.904:3212): avc: denied { sqpoll } for pid=4553 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.756773][ T29] audit: type=1326 audit(1737168201.924:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 54.780165][ T29] audit: type=1326 audit(1737168201.924:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23fd9e5d29 code=0x7ffc0000 [ 54.804875][ T4557] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 54.946763][ T4557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.035870][ T4569] netlink: 'syz.1.373': attribute type 13 has an invalid length. [ 55.076534][ T4573] loop4: detected capacity change from 0 to 512 [ 55.103883][ T4571] loop3: detected capacity change from 0 to 2048 [ 55.113443][ T4573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.128535][ T4573] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.140003][ T4571] EXT4-fs: Ignoring removed bh option [ 55.173509][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.180897][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.190579][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.201376][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.276789][ T4569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.288306][ T4569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.329689][ T4569] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.340013][ T4569] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.349245][ T4569] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.358344][ T4569] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.400151][ T4582] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.459242][ T4582] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 672 with error 28 [ 55.471873][ T4582] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.471873][ T4582] [ 55.481587][ T4582] EXT4-fs (loop3): Total free blocks count 0 [ 55.481671][ T4582] EXT4-fs (loop3): Free/Dirty block details [ 55.481683][ T4582] EXT4-fs (loop3): free_blocks=2415919104 [ 55.499330][ T4582] EXT4-fs (loop3): dirty_blocks=688 [ 55.504531][ T4582] EXT4-fs (loop3): Block reservation details [ 55.508615][ T4589] loop1: detected capacity change from 0 to 164 [ 55.510523][ T4582] EXT4-fs (loop3): i_reserved_data_blocks=43 [ 55.570373][ T4589] syz.1.379: attempt to access beyond end of device [ 55.570373][ T4589] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.607724][ T4589] syz.1.379: attempt to access beyond end of device [ 55.607724][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.642781][ T4589] syz.1.379: attempt to access beyond end of device [ 55.642781][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.700782][ T4589] syz.1.379: attempt to access beyond end of device [ 55.700782][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.737721][ T4589] syz.1.379: attempt to access beyond end of device [ 55.737721][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.751991][ T3815] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 55.785659][ T4589] syz.1.379: attempt to access beyond end of device [ 55.785659][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.821573][ T4589] syz.1.379: attempt to access beyond end of device [ 55.821573][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.835158][ T4589] syz.1.379: attempt to access beyond end of device [ 55.835158][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.867074][ T4589] syz.1.379: attempt to access beyond end of device [ 55.867074][ T4589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.966345][ T4599] loop3: detected capacity change from 0 to 512 [ 55.989569][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.003413][ T4599] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.211524][ T4599] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.384: iget: bad i_size value: -6917529027641081756 [ 56.299622][ T4599] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.384: couldn't read orphan inode 17 (err -117) [ 56.400827][ T4599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.449769][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.478146][ T4611] team0: entered promiscuous mode [ 56.483228][ T4611] team_slave_0: entered promiscuous mode [ 56.489149][ T4611] team_slave_1: entered promiscuous mode [ 56.517535][ T4610] team0: left promiscuous mode [ 56.522431][ T4610] team_slave_0: left promiscuous mode [ 56.527947][ T4610] team_slave_1: left promiscuous mode [ 56.620999][ T4618] loop1: detected capacity change from 0 to 512 [ 56.718986][ T4618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.732589][ T3456] IPVS: starting estimator thread 0... [ 56.733032][ T4618] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.747978][ T4613] netlink: 72 bytes leftover after parsing attributes in process `syz.3.387'. [ 56.822877][ T4630] loop3: detected capacity change from 0 to 512 [ 56.841927][ T4630] EXT4-fs: Invalid want_extra_isize 3 [ 56.847103][ T4628] IPVS: using max 2832 ests per chain, 141600 per kthread [ 56.895007][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.964753][ T4644] loop2: detected capacity change from 0 to 512 [ 56.994127][ T4642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=4642 comm=syz.1.408 [ 56.999704][ T4644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.023948][ T4644] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.039906][ T4644] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.398: corrupted inode contents [ 57.040108][ T4642] pim6reg1: entered promiscuous mode [ 57.053551][ T4644] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.398: mark_inode_dirty error [ 57.057234][ T4642] pim6reg1: entered allmulticast mode [ 57.075059][ T4644] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.398: corrupted inode contents [ 57.089444][ T4644] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.398: corrupted inode contents [ 57.101947][ T4644] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.398: mark_inode_dirty error [ 57.113717][ T4644] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.398: corrupted inode contents [ 57.135964][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.189222][ T4650] loop2: detected capacity change from 0 to 512 [ 57.218839][ T4650] EXT4-fs (loop2): 1 orphan inode deleted [ 57.237509][ T3864] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:62: Failed to release dquot type 1 [ 57.257348][ T4650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.317177][ T4650] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.345546][ T4650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 57.376848][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.418419][ T4662] block device autoloading is deprecated and will be removed. [ 57.446616][ T4667] loop2: detected capacity change from 0 to 512 [ 57.460310][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 57.460324][ T29] audit: type=1326 audit(1737168204.634:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.469642][ T4667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.491004][ T29] audit: type=1326 audit(1737168204.634:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.505232][ T4667] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.526268][ T29] audit: type=1326 audit(1737168204.634:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.540935][ T4673] loop1: detected capacity change from 0 to 512 [ 57.560019][ T29] audit: type=1326 audit(1737168204.634:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.583351][ T4673] EXT4-fs: Invalid want_extra_isize 3 [ 57.589989][ T29] audit: type=1326 audit(1737168204.634:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.618999][ T29] audit: type=1326 audit(1737168204.634:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.644994][ T29] audit: type=1326 audit(1737168204.824:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.668562][ T29] audit: type=1326 audit(1737168204.824:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9170e65d29 code=0x7ffc0000 [ 57.693188][ T29] audit: type=1326 audit(1737168204.844:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab3cf65d29 code=0x0 [ 57.866315][ T4682] @ÿ: renamed from veth0_vlan [ 58.274198][ T29] audit: type=1400 audit(1737168205.444:3353): avc: denied { name_connect } for pid=4695 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 58.309835][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.405433][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 58.454057][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 58.464081][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 58.601166][ T4722] loop3: detected capacity change from 0 to 128 [ 58.655337][ T4722] bio_check_eod: 3956 callbacks suppressed [ 58.655357][ T4722] syz.3.426: attempt to access beyond end of device [ 58.655357][ T4722] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 59.317588][ T4739] loop3: detected capacity change from 0 to 164 [ 59.433961][ T4739] process '+}[@' launched '/dev/fd/6' with NULL argv: empty string added [ 59.497343][ T4739] +}[@: attempt to access beyond end of device [ 59.497343][ T4739] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 59.518335][ T4739] +}[@: attempt to access beyond end of device [ 59.518335][ T4739] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 59.543505][ T4747] loop2: detected capacity change from 0 to 1024 [ 59.563057][ T4747] EXT4-fs: Ignoring removed nobh option [ 59.643302][ T4747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.692482][ T4747] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.435: bg 0: block 456: padding at end of block bitmap is not set [ 59.906496][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.996569][ T9] IPVS: starting estimator thread 0... [ 60.012554][ T4776] loop2: detected capacity change from 0 to 512 [ 60.061716][ T4776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.097046][ T4775] IPVS: using max 2928 ests per chain, 146400 per kthread [ 60.127553][ T4776] EXT4-fs (loop2): 1 truncate cleaned up [ 60.133691][ T4776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.529686][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.987073][ T4811] netlink: 'syz.2.440': attribute type 13 has an invalid length. [ 61.060067][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 61.084246][ T4815] loop3: detected capacity change from 0 to 512 [ 61.112843][ T4815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.130759][ T4815] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.163095][ T4818] vlan0: entered promiscuous mode [ 61.168429][ T4818] vlan0: entered allmulticast mode [ 61.174312][ T4818] hsr_slave_1: entered allmulticast mode [ 61.181247][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.190462][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 61.250413][ T4818] hsr_slave_1 (unregistering): left allmulticast mode [ 61.258654][ T4822] loop3: detected capacity change from 0 to 2048 [ 61.270638][ T9] kernel write not supported for file /236/attr/exec (pid: 9 comm: kworker/0:1) [ 61.284143][ T4818] hsr_slave_1 (unregistering): left promiscuous mode [ 61.309488][ T4822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.468129][ T4822] ================================================================== [ 61.476248][ T4822] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 61.485519][ T4822] [ 61.487944][ T4822] write to 0xffff888131fd1a70 of 8 bytes by task 4831 on cpu 1: [ 61.495675][ T4822] filemap_splice_read+0x6c4/0x910 [ 61.501004][ T4822] ext4_file_splice_read+0x8f/0xb0 [ 61.506147][ T4822] splice_direct_to_actor+0x269/0x670 [ 61.511556][ T4822] do_splice_direct+0xd7/0x150 [ 61.516533][ T4822] do_sendfile+0x398/0x660 [ 61.521340][ T4822] __x64_sys_sendfile64+0x110/0x150 [ 61.527005][ T4822] x64_sys_call+0xfbd/0x2dc0 [ 61.531695][ T4822] do_syscall_64+0xc9/0x1c0 [ 61.536257][ T4822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.543303][ T4822] [ 61.545905][ T4822] write to 0xffff888131fd1a70 of 8 bytes by task 4822 on cpu 0: [ 61.553897][ T4822] filemap_splice_read+0x6c4/0x910 [ 61.559176][ T4822] ext4_file_splice_read+0x8f/0xb0 [ 61.564317][ T4822] splice_direct_to_actor+0x269/0x670 [ 61.569726][ T4822] do_splice_direct+0xd7/0x150 [ 61.574525][ T4822] do_sendfile+0x398/0x660 [ 61.579020][ T4822] __x64_sys_sendfile64+0x110/0x150 [ 61.584258][ T4822] x64_sys_call+0xfbd/0x2dc0 [ 61.589043][ T4822] do_syscall_64+0xc9/0x1c0 [ 61.593570][ T4822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.599489][ T4822] [ 61.601819][ T4822] value changed: 0x000000000000017c -> 0x000000000000017d [ 61.609636][ T4822] [ 61.611969][ T4822] Reported by Kernel Concurrency Sanitizer on: [ 61.618459][ T4822] CPU: 0 UID: 0 PID: 4822 Comm: syz.3.447 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 61.629269][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.639512][ T4822] ================================================================== [ 62.156303][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.