last executing test programs: 35.710378386s ago: executing program 4 (id=126): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 35.644620868s ago: executing program 4 (id=127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.349571123s ago: executing program 4 (id=133): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, 0xffffffffffffffff, 0x26}, 0x10) creat(&(0x7f0000000180)='./file0\x00', 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) close(r1) 35.319203624s ago: executing program 4 (id=134): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 34.979979221s ago: executing program 4 (id=138): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 34.47055885s ago: executing program 4 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xb}, 0x18) 34.442486321s ago: executing program 32 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xb}, 0x18) 2.304887695s ago: executing program 1 (id=727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.928070843s ago: executing program 1 (id=732): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.899150833s ago: executing program 1 (id=733): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.744115146s ago: executing program 1 (id=737): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) 1.55867173s ago: executing program 2 (id=747): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 1.53839298s ago: executing program 2 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x8, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x800, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0x1ff8000, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x2, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4, 0x20}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.443495842s ago: executing program 2 (id=752): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 1.395454403s ago: executing program 2 (id=755): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4640, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x2, @perf_config_ext={0x2000000000}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 1.259248176s ago: executing program 0 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 1.05154166s ago: executing program 5 (id=763): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r4, r1, 0x4, r2}, 0x10) 1.02063887s ago: executing program 5 (id=764): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x9, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001380)="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", 0x57b, 0x1, &(0x7f0000000400)={0xa, 0x4e23, 0x9, @remote, 0x5}, 0x1c) 1.003318191s ago: executing program 5 (id=765): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 948.089302ms ago: executing program 5 (id=766): syz_read_part_table(0x611, &(0x7f00000007c0)="$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") openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x480200, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1d2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 833.388464ms ago: executing program 1 (id=767): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x77}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x44}}, 0x400d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 794.926094ms ago: executing program 5 (id=768): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c) 705.587386ms ago: executing program 5 (id=769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 647.280867ms ago: executing program 1 (id=770): syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="13", 0x1}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000340)={r2}) close_range(r0, 0xffffffffffffffff, 0x0) 646.722977ms ago: executing program 3 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 604.090468ms ago: executing program 3 (id=772): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 603.531488ms ago: executing program 3 (id=773): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) pipe2(0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 584.316499ms ago: executing program 3 (id=774): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) 564.488549ms ago: executing program 3 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) 541.915139ms ago: executing program 2 (id=776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) fsmount(r1, 0x0, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x16, 0x0, 0xfc, 0x9}]}) 518.5255ms ago: executing program 2 (id=777): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(0x0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7fffeffd) 452.309901ms ago: executing program 0 (id=778): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x1210, &(0x7f00000021c0)="$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") r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 308.549004ms ago: executing program 0 (id=779): creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 229.539345ms ago: executing program 3 (id=780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$cgroup_devices(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563"], 0xffdd) 161.126627ms ago: executing program 0 (id=781): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000004c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 95.648248ms ago: executing program 0 (id=782): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=783): syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@abort}], [{@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x5, 0x610, &(0x7f0000000a40)="$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") setns(0xffffffffffffffff, 0x24020000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) eventfd2(0x3, 0x8549b62144b92195) semctl$IPC_RMID(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 35.240301][ T29] audit: type=1400 audit(1757007481.295:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.241423][ T3296] cgroup: Unknown subsys name 'net' [ 35.263133][ T29] audit: type=1400 audit(1757007481.295:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.290494][ T29] audit: type=1400 audit(1757007481.325:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.423292][ T3296] cgroup: Unknown subsys name 'cpuset' [ 35.429662][ T3296] cgroup: Unknown subsys name 'rlimit' [ 35.581062][ T29] audit: type=1400 audit(1757007481.635:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.604653][ T29] audit: type=1400 audit(1757007481.635:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.625137][ T29] audit: type=1400 audit(1757007481.635:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.629208][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.645610][ T29] audit: type=1400 audit(1757007481.635:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.674421][ T29] audit: type=1400 audit(1757007481.635:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.691067][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.699365][ T29] audit: type=1400 audit(1757007481.635:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.731486][ T29] audit: type=1400 audit(1757007481.715:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.831920][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 36.906431][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.913597][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.920764][ T3309] bridge_slave_0: entered allmulticast mode [ 36.927414][ T3309] bridge_slave_0: entered promiscuous mode [ 36.935247][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.942363][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.949524][ T3309] bridge_slave_1: entered allmulticast mode [ 36.956086][ T3309] bridge_slave_1: entered promiscuous mode [ 36.978740][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.997810][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.025563][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.064073][ T3309] team0: Port device team_slave_0 added [ 37.069874][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 37.089011][ T3309] team0: Port device team_slave_1 added [ 37.112741][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 37.138451][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.145678][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.152859][ T3315] bridge_slave_0: entered allmulticast mode [ 37.159247][ T3315] bridge_slave_0: entered promiscuous mode [ 37.168923][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.176011][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.202035][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.213350][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.220309][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.246415][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.259756][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.268629][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.275714][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.282977][ T3315] bridge_slave_1: entered allmulticast mode [ 37.289423][ T3315] bridge_slave_1: entered promiscuous mode [ 37.322744][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.345138][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.383527][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.390602][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.398032][ T3307] bridge_slave_0: entered allmulticast mode [ 37.404623][ T3307] bridge_slave_0: entered promiscuous mode [ 37.413576][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.420649][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.428142][ T3307] bridge_slave_1: entered allmulticast mode [ 37.434562][ T3307] bridge_slave_1: entered promiscuous mode [ 37.448285][ T3309] hsr_slave_0: entered promiscuous mode [ 37.454442][ T3309] hsr_slave_1: entered promiscuous mode [ 37.478345][ T3315] team0: Port device team_slave_0 added [ 37.484907][ T3315] team0: Port device team_slave_1 added [ 37.498465][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.505548][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.512958][ T3306] bridge_slave_0: entered allmulticast mode [ 37.519362][ T3306] bridge_slave_0: entered promiscuous mode [ 37.544614][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.551568][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.577546][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.592838][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.599977][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.608204][ T3306] bridge_slave_1: entered allmulticast mode [ 37.614572][ T3306] bridge_slave_1: entered promiscuous mode [ 37.621785][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.636278][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.643326][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.669341][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.691704][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.717148][ T3307] team0: Port device team_slave_0 added [ 37.723034][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.730122][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.737434][ T3311] bridge_slave_0: entered allmulticast mode [ 37.743989][ T3311] bridge_slave_0: entered promiscuous mode [ 37.759411][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.769859][ T3307] team0: Port device team_slave_1 added [ 37.775735][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.782825][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.789996][ T3311] bridge_slave_1: entered allmulticast mode [ 37.796546][ T3311] bridge_slave_1: entered promiscuous mode [ 37.810683][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.842365][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.849331][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.875415][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.893217][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.909250][ T3306] team0: Port device team_slave_0 added [ 37.917979][ T3306] team0: Port device team_slave_1 added [ 37.929708][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.936696][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.962695][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.977416][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.997089][ T3315] hsr_slave_0: entered promiscuous mode [ 38.003196][ T3315] hsr_slave_1: entered promiscuous mode [ 38.009122][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.014910][ T3315] Cannot create hsr debugfs directory [ 38.059735][ T3311] team0: Port device team_slave_0 added [ 38.067945][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.074913][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.100886][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.113925][ T3307] hsr_slave_0: entered promiscuous mode [ 38.119913][ T3307] hsr_slave_1: entered promiscuous mode [ 38.125728][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 38.131455][ T3307] Cannot create hsr debugfs directory [ 38.143412][ T3311] team0: Port device team_slave_1 added [ 38.156871][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.163943][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.189861][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.208761][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.215758][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.241825][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.274217][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.281224][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.307164][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.343987][ T3306] hsr_slave_0: entered promiscuous mode [ 38.350259][ T3306] hsr_slave_1: entered promiscuous mode [ 38.356539][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 38.362301][ T3306] Cannot create hsr debugfs directory [ 38.416976][ T3311] hsr_slave_0: entered promiscuous mode [ 38.423174][ T3311] hsr_slave_1: entered promiscuous mode [ 38.429003][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 38.434769][ T3311] Cannot create hsr debugfs directory [ 38.459771][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.477330][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.509307][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.520022][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.592282][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.602847][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.616697][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.626100][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.661008][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.676003][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.688265][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.703673][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.723123][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.739200][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.756252][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.765311][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.779470][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.796451][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.810310][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.819560][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.828802][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.838729][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.845812][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.858311][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.869355][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.876447][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.911983][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.950171][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.968916][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.983075][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.990308][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.009277][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.016404][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.032252][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.047095][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.060133][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.070584][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.093943][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.101083][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.123547][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.135799][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.142992][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.166605][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.176646][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.183811][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.207050][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.215660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.222770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.249937][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.263091][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.283392][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.290489][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.313132][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.320260][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.403199][ T3309] veth0_vlan: entered promiscuous mode [ 39.411606][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.426659][ T3309] veth1_vlan: entered promiscuous mode [ 39.438696][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.455233][ T3315] veth0_vlan: entered promiscuous mode [ 39.487755][ T3309] veth0_macvtap: entered promiscuous mode [ 39.501366][ T3315] veth1_vlan: entered promiscuous mode [ 39.517388][ T3309] veth1_macvtap: entered promiscuous mode [ 39.554286][ T3315] veth0_macvtap: entered promiscuous mode [ 39.569329][ T3315] veth1_macvtap: entered promiscuous mode [ 39.585425][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.593735][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.602885][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.619051][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.638610][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.657335][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.668711][ T3307] veth0_vlan: entered promiscuous mode [ 39.675380][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.686984][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.715631][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.730801][ T3307] veth1_vlan: entered promiscuous mode [ 39.744867][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.769438][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.785921][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.795589][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.808672][ T3307] veth0_macvtap: entered promiscuous mode [ 39.824734][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.851414][ T3307] veth1_macvtap: entered promiscuous mode [ 39.871723][ T3306] veth0_vlan: entered promiscuous mode [ 39.886464][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.902050][ T3311] veth0_vlan: entered promiscuous mode [ 39.914300][ T3306] veth1_vlan: entered promiscuous mode [ 39.922027][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.945247][ T409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.957612][ T3311] veth1_vlan: entered promiscuous mode [ 39.965226][ T3306] veth0_macvtap: entered promiscuous mode [ 39.973942][ T409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.993865][ T3306] veth1_macvtap: entered promiscuous mode [ 40.005956][ T409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.019791][ T3311] veth0_macvtap: entered promiscuous mode [ 40.031147][ T3483] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 40.062406][ T409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.072306][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.083010][ T3311] veth1_macvtap: entered promiscuous mode [ 40.111129][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.125776][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.141540][ T3483] bridge1: entered promiscuous mode [ 40.146914][ T3483] bridge1: entered allmulticast mode [ 40.201587][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.215192][ T383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.231207][ T383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.245646][ T383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.277055][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 40.277073][ T29] audit: type=1400 audit(1757007486.335:113): avc: denied { create } for pid=3493 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.283809][ T3486] syz.2.8 (3486) used greatest stack depth: 10824 bytes left [ 40.327533][ T29] audit: type=1400 audit(1757007486.385:114): avc: denied { create } for pid=3495 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.347848][ T383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.351908][ T29] audit: type=1400 audit(1757007486.385:115): avc: denied { write } for pid=3495 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.383936][ T383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.400396][ T29] audit: type=1400 audit(1757007486.445:116): avc: denied { read } for pid=3035 comm="dhcpcd" name="n25" dev="tmpfs" ino=582 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.422225][ T29] audit: type=1400 audit(1757007486.445:117): avc: denied { open } for pid=3035 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=582 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.445193][ T29] audit: type=1400 audit(1757007486.445:118): avc: denied { getattr } for pid=3035 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=582 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.473253][ T29] audit: type=1400 audit(1757007486.505:119): avc: denied { create } for pid=3500 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.492543][ T29] audit: type=1400 audit(1757007486.505:120): avc: denied { bind } for pid=3500 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.511713][ T29] audit: type=1400 audit(1757007486.505:121): avc: denied { setopt } for pid=3500 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.544483][ T29] audit: type=1400 audit(1757007486.605:122): avc: denied { setopt } for pid=3503 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.587351][ T383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634877][ T409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.644465][ T383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.840824][ T3496] Set syz1 is full, maxelem 65536 reached [ 41.316621][ T3564] loop3: detected capacity change from 0 to 512 [ 41.340591][ T3564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.353724][ T3564] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.378343][ T3564] EXT4-fs (loop3): 1 truncate cleaned up [ 41.397325][ T3564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.434524][ T3570] loop1: detected capacity change from 0 to 256 [ 41.476882][ T3570] FAT-fs (loop1): Directory bread(block 64) failed [ 41.494876][ T3575] loop2: detected capacity change from 0 to 512 [ 41.516600][ T3570] FAT-fs (loop1): Directory bread(block 65) failed [ 41.523315][ T3570] FAT-fs (loop1): Directory bread(block 66) failed [ 41.529955][ T3570] FAT-fs (loop1): Directory bread(block 67) failed [ 41.539678][ T3570] FAT-fs (loop1): Directory bread(block 68) failed [ 41.547719][ T3573] process 'syz.0.30' launched './file0' with NULL argv: empty string added [ 41.557399][ T3570] FAT-fs (loop1): Directory bread(block 69) failed [ 41.564380][ T3570] FAT-fs (loop1): Directory bread(block 70) failed [ 41.566498][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.571209][ T3570] FAT-fs (loop1): Directory bread(block 71) failed [ 41.590313][ T3570] FAT-fs (loop1): Directory bread(block 72) failed [ 41.597063][ T3570] FAT-fs (loop1): Directory bread(block 73) failed [ 41.607700][ T3575] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.691500][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.719442][ T3585] syz_tun: entered allmulticast mode [ 41.731909][ T3585] dvmrp8: entered allmulticast mode [ 41.779147][ T3585] syz_tun: left allmulticast mode [ 41.791070][ T3585] dvmrp8: left allmulticast mode [ 42.031842][ T3605] loop1: detected capacity change from 0 to 512 [ 42.095072][ T3605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.152669][ T3605] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.191913][ T3612] pim6reg1: entered promiscuous mode [ 42.197520][ T3612] pim6reg1: entered allmulticast mode [ 42.206893][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.255860][ C1] hrtimer: interrupt took 27485 ns [ 42.393042][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.429067][ T3625] tls_set_device_offload: netdev not found [ 42.658903][ T3644] bridge_slave_0: left allmulticast mode [ 42.664758][ T3644] bridge_slave_0: left promiscuous mode [ 42.670551][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.718959][ T3644] bridge_slave_1: left allmulticast mode [ 42.724721][ T3644] bridge_slave_1: left promiscuous mode [ 42.730438][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.769878][ T3644] bond0: (slave bond_slave_0): Releasing backup interface [ 42.781090][ T3644] bond0: (slave bond_slave_1): Releasing backup interface [ 42.798921][ T3644] team0: Port device team_slave_0 removed [ 42.811843][ T3644] team0: Port device team_slave_1 removed [ 42.826146][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.833966][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.885649][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.893148][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.055674][ T3674] loop0: detected capacity change from 0 to 512 [ 43.067319][ T3674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.095550][ T3674] EXT4-fs (loop0): 1 orphan inode deleted [ 43.101367][ T3674] EXT4-fs (loop0): 1 truncate cleaned up [ 43.112720][ T3674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.126954][ T3677] loop1: detected capacity change from 0 to 512 [ 43.137753][ T3677] EXT4-fs: Ignoring removed nobh option [ 43.147497][ T3677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.170291][ T3674] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.62: iget: bad extra_isize 46 (inode size 256) [ 43.183110][ T3677] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.63: iget: bad i_size value: 38620345925642 [ 43.200110][ T3677] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.63: couldn't read orphan inode 15 (err -117) [ 43.212655][ T3674] EXT4-fs (loop0): Remounting filesystem read-only [ 43.226055][ T3677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.239420][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.383782][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.482616][ T3694] loop2: detected capacity change from 0 to 1024 [ 43.489335][ T3694] ======================================================= [ 43.489335][ T3694] WARNING: The mand mount option has been deprecated and [ 43.489335][ T3694] and is ignored by this kernel. Remove the mand [ 43.489335][ T3694] option from the mount to silence this warning. [ 43.489335][ T3694] ======================================================= [ 43.572690][ T3694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.592402][ T3692] syz.1.69 (3692) used greatest stack depth: 10176 bytes left [ 43.624130][ T3694] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.70: Allocating blocks 449-513 which overlap fs metadata [ 43.650015][ T3694] EXT4-fs (loop2): pa ffff88810722a070: logic 48, phys. 177, len 21 [ 43.658114][ T3694] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 43.704323][ T3703] capability: warning: `syz.1.73' uses deprecated v2 capabilities in a way that may be insecure [ 43.729055][ T3703] tipc: Started in network mode [ 43.734014][ T3703] tipc: Node identity ac14140f, cluster identity 4711 [ 43.743971][ T3703] tipc: New replicast peer: 255.255.255.83 [ 43.749897][ T3703] tipc: Enabled bearer , priority 10 [ 43.765881][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.817461][ T3708] Zero length message leads to an empty skb [ 43.834197][ T3689] Set syz1 is full, maxelem 65536 reached [ 43.902191][ T3714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.911266][ T3714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.149403][ T3726] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.165913][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 44.271082][ T3730] netlink: 'syz.0.85': attribute type 7 has an invalid length. [ 44.278969][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 44.330059][ T3733] syz.1.87 (3733) used greatest stack depth: 10072 bytes left [ 44.553686][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 44.564975][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 44.613658][ T3755] loop1: detected capacity change from 0 to 164 [ 44.630236][ T3759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 44.648167][ T3759] bridge_slave_1: left allmulticast mode [ 44.654015][ T3759] bridge_slave_1: left promiscuous mode [ 44.656116][ T3755] wÞ¡ÿ: attempt to access beyond end of device [ 44.656116][ T3755] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.659812][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.676115][ T3755] wÞ¡ÿ: attempt to access beyond end of device [ 44.676115][ T3755] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.694560][ T3759] bridge_slave_0: left allmulticast mode [ 44.700319][ T3759] bridge_slave_0: left promiscuous mode [ 44.706146][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.862456][ T3774] loop0: detected capacity change from 0 to 512 [ 44.872253][ T3391] tipc: Node number set to 2886997007 [ 44.885935][ T3774] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 44.970323][ T3776] loop3: detected capacity change from 0 to 128 [ 45.328575][ T3802] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 45.358618][ T3802] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 45.376566][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 45.385885][ T3789] loop0: detected capacity change from 0 to 1024 [ 45.402387][ T3789] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 45.571018][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 45.605176][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 45.624292][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 45.624309][ T29] audit: type=1326 audit(1757007491.685:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.687960][ T29] audit: type=1326 audit(1757007491.685:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.711408][ T29] audit: type=1326 audit(1757007491.715:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.734831][ T29] audit: type=1326 audit(1757007491.715:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.758290][ T29] audit: type=1326 audit(1757007491.715:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.781799][ T29] audit: type=1326 audit(1757007491.715:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.805247][ T29] audit: type=1326 audit(1757007491.715:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.828989][ T29] audit: type=1326 audit(1757007491.715:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.852278][ T29] audit: type=1326 audit(1757007491.725:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.875895][ T29] audit: type=1326 audit(1757007491.725:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 45.904630][ T3823] IPv4: Oversized IP packet from 127.202.26.0 [ 45.908960][ T3826] loop3: detected capacity change from 0 to 1024 [ 45.942606][ T3826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.977873][ T3826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.008288][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 46.069001][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 46.104622][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.365668][ T3858] loop4: detected capacity change from 0 to 512 [ 46.383861][ T3858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.399907][ T3858] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.492264][ T3858] loop4: detected capacity change from 512 to 0 [ 46.500058][ C1] I/O error, dev loop4, sector 92 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 46.510048][ C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 46.519679][ T3856] EXT4-fs error (device loop4): ext4_wait_block_bitmap:584: comm syz.4.134: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 46.534151][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 46.543688][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 46.553180][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.561924][ T3856] EXT4-fs (loop4): I/O error while writing superblock [ 46.568876][ T3856] EXT4-fs error (device loop4): ext4_discard_preallocations:5672: comm syz.4.134: Error -5 reading block bitmap for 0 [ 46.574348][ T3866] tipc: Started in network mode [ 46.583431][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 46.586274][ T3866] tipc: Node identity ac14140f, cluster identity 4711 [ 46.595658][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 46.595702][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.606415][ T3866] tipc: New replicast peer: 255.255.255.254 [ 46.613493][ T3856] EXT4-fs (loop4): I/O error while writing superblock [ 46.620332][ T3866] tipc: Enabled bearer , priority 10 [ 46.647185][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 46.657366][ C0] I/O error, dev loop4, sector 140 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 46.667083][ C0] I/O error, dev loop4, sector 136 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 46.676773][ T3306] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 34: comm syz-executor: unable to read itable block [ 46.690488][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 46.700024][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.716693][ T3306] EXT4-fs (loop4): I/O error while writing superblock [ 46.723598][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 46.733354][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.741708][ T3306] EXT4-fs (loop4): I/O error while writing superblock [ 46.748558][ T3306] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 46.768180][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.776796][ T3306] EXT4-fs (loop4): I/O error while writing superblock [ 46.800440][ T3870] loop0: detected capacity change from 0 to 2048 [ 46.802203][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #20: block 35: comm kworker/u8:0: unable to read itable block [ 46.831171][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.839746][ T12] EXT4-fs (loop4): I/O error while writing superblock [ 46.841930][ T3870] EXT4-fs (loop0): failed to initialize system zone (-117) [ 46.854336][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 34: comm kworker/u8:0: unable to read itable block [ 46.856015][ T3870] EXT4-fs (loop0): mount failed [ 46.874745][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.883075][ T12] EXT4-fs (loop4): I/O error while writing superblock [ 46.904131][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.937650][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 46.946393][ T3306] EXT4-fs (loop4): I/O error while writing superblock [ 46.966500][ C0] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 47.153401][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.235881][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.407465][ T3896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.464359][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.610082][ T3896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.622169][ T3391] tipc: Node number set to 2886997007 [ 47.642426][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.668769][ T3918] loop1: detected capacity change from 0 to 128 [ 47.686576][ T3918] vfat: Unknown parameter '' [ 47.758905][ T3896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.955304][ T37] bridge_slave_1: left allmulticast mode [ 47.961017][ T37] bridge_slave_1: left promiscuous mode [ 47.966919][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.997030][ T37] bridge_slave_0: left allmulticast mode [ 48.002841][ T37] bridge_slave_0: left promiscuous mode [ 48.008562][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.186382][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.197648][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.227940][ T37] bond0 (unregistering): Released all slaves [ 48.266597][ T3896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.317939][ T37] hsr_slave_0: left promiscuous mode [ 48.328125][ T37] hsr_slave_1: left promiscuous mode [ 48.344091][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.351691][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.379631][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.387242][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.429251][ T37] veth1_macvtap: left promiscuous mode [ 48.452635][ T37] veth0_macvtap: left promiscuous mode [ 48.458264][ T37] veth1_vlan: left promiscuous mode [ 48.472210][ T37] veth0_vlan: left promiscuous mode [ 48.633502][ T37] team0 (unregistering): Port device team_slave_1 removed [ 48.661239][ T37] team0 (unregistering): Port device team_slave_0 removed [ 48.770914][ T3976] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.802402][ T3976] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.850246][ T3976] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.866543][ T3976] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918208][ T3900] chnl_net:caif_netlink_parms(): no params data found [ 49.026507][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.033708][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.042970][ T3900] bridge_slave_0: entered allmulticast mode [ 49.049434][ T3900] bridge_slave_0: entered promiscuous mode [ 49.247012][ T4019] __nla_validate_parse: 3 callbacks suppressed [ 49.247032][ T4019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 49.645863][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.652996][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.714319][ T3900] bridge_slave_1: entered allmulticast mode [ 49.766178][ T3900] bridge_slave_1: entered promiscuous mode [ 49.784768][ T4031] ALSA: seq fatal error: cannot create timer (-19) [ 49.829232][ T3900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.860277][ T3900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.912421][ T4036] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 50.288228][ T4036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.316580][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 50.366477][ T4040] bond1: (slave batadv1): making interface the new active one [ 50.388388][ T4040] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 50.398121][ T3900] team0: Port device team_slave_0 added [ 50.411065][ T3900] team0: Port device team_slave_1 added [ 50.466632][ T3900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.473823][ T3900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.499815][ T3900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.531948][ T3900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.538973][ T3900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.565024][ T3900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.702468][ T3900] hsr_slave_0: entered promiscuous mode [ 50.713376][ T3900] hsr_slave_1: entered promiscuous mode [ 50.728094][ T3900] debugfs: 'hsr0' already exists in 'hsr' [ 50.733963][ T3900] Cannot create hsr debugfs directory [ 50.752384][ T4049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.900173][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 50.900188][ T29] audit: type=1326 audit(1757007496.955:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 50.935381][ T3900] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.968983][ T3900] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.998612][ T3900] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.007694][ T29] audit: type=1326 audit(1757007496.985:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.031008][ T29] audit: type=1326 audit(1757007496.985:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.054276][ T29] audit: type=1326 audit(1757007496.985:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.077553][ T29] audit: type=1326 audit(1757007496.985:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.100793][ T29] audit: type=1326 audit(1757007496.995:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.124024][ T29] audit: type=1326 audit(1757007497.005:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.136159][ T4064] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 51.147364][ T29] audit: type=1326 audit(1757007497.005:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.178266][ T29] audit: type=1326 audit(1757007497.015:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.201594][ T29] audit: type=1326 audit(1757007497.015:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9b9cebe9 code=0x7ffc0000 [ 51.234492][ T3900] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.356754][ T4072] loop2: detected capacity change from 0 to 128 [ 51.495124][ T4072] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.708760][ T4072] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.069029][ T3900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.125745][ T3900] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.194410][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.201546][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.265845][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.273001][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.347433][ T4092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 52.458340][ T4098] loop1: detected capacity change from 0 to 512 [ 52.474451][ T3900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.523026][ T4098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.535827][ T4098] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.551961][ T4098] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.193: corrupted inode contents [ 52.565835][ T4098] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.193: mark_inode_dirty error [ 52.577743][ T4098] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.193: corrupted inode contents [ 52.712275][ T4098] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.193: mark_inode_dirty error [ 52.734062][ T4107] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 52.771766][ T4107] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.193: corrupted inode contents [ 52.792667][ T4107] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.193: mark_inode_dirty error [ 52.813713][ T4107] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.193: corrupted inode contents [ 52.835722][ T4106] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.193: corrupted inode contents [ 52.864609][ T4106] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.193: mark_inode_dirty error [ 52.884450][ T4106] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 52.887468][ T3900] veth0_vlan: entered promiscuous mode [ 52.905418][ T3900] veth1_vlan: entered promiscuous mode [ 52.933488][ T3900] veth0_macvtap: entered promiscuous mode [ 52.944355][ T3900] veth1_macvtap: entered promiscuous mode [ 52.951873][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.959960][ T3900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.972015][ T3900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.982352][ T3976] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.999408][ T3976] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.020496][ T3976] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.029972][ T3976] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.251942][ T4138] ref_ctr increment failed for inode: 0x140 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811b9c3980 [ 53.294459][ T4138] ref_ctr increment failed for inode: 0x140 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811b9c3980 [ 53.334848][ T4137] uprobe: syz.1.201:4137 failed to unregister, leaking uprobe [ 53.412899][ T4137] uprobe: syz.1.201:4137 failed to unregister, leaking uprobe [ 53.663268][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.031291][ T4150] mmap: syz.3.206 (4150) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.497151][ T4156] loop2: detected capacity change from 0 to 512 [ 54.524354][ T4156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.554047][ T4156] EXT4-fs (loop2): 1 truncate cleaned up [ 54.561872][ T4160] loop5: detected capacity change from 0 to 512 [ 54.572620][ T4156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.598784][ T4160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.633188][ T4160] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.650420][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 54.680051][ T4160] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.210: corrupted inode contents [ 54.713733][ T4160] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.210: mark_inode_dirty error [ 54.737960][ T4160] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.210: corrupted inode contents [ 54.757234][ T4160] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.210: mark_inode_dirty error [ 54.789792][ T4160] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.210: mark inode dirty (error -117) [ 54.802622][ T4174] loop3: detected capacity change from 0 to 1024 [ 54.837628][ T4160] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 54.865022][ T4174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.882476][ T4174] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.906495][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.989245][ T4185] loop5: detected capacity change from 0 to 512 [ 55.050001][ T4185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.099284][ T4174] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 55.106695][ T4185] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.320537][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.364437][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.431638][ T4208] tipc: Started in network mode [ 55.436727][ T4208] tipc: Node identity ac14140f, cluster identity 4711 [ 55.486208][ T4208] tipc: New replicast peer: 255.255.255.255 [ 55.492540][ T4208] tipc: Enabled bearer , priority 10 [ 55.502051][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.572791][ T4219] syz.3.232 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.628896][ T4227] loop2: detected capacity change from 0 to 1024 [ 55.663743][ T4227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.741082][ T4227] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.235: Allocating blocks 385-513 which overlap fs metadata [ 55.765974][ T4227] EXT4-fs (loop2): pa ffff88810722a0e0: logic 16, phys. 129, len 24 [ 55.774299][ T4227] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 55.784610][ T2959] IPVS: starting estimator thread 0... [ 55.873509][ T4242] IPVS: using max 2400 ests per chain, 120000 per kthread [ 55.883701][ T4254] loop0: detected capacity change from 0 to 512 [ 55.886232][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.902796][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 55.902812][ T29] audit: type=1400 audit(1757007501.965:992): avc: denied { associate } for pid=4251 comm="syz.3.244" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 55.955006][ T4254] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.011799][ T4254] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.243: bg 0: block 248: padding at end of block bitmap is not set [ 56.028722][ T29] audit: type=1400 audit(1757007501.995:993): avc: denied { connect } for pid=4255 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.048150][ T29] audit: type=1400 audit(1757007502.055:994): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.068205][ T29] audit: type=1400 audit(1757007502.065:995): avc: denied { search } for pid=4262 comm="syz.3.248" name="/" dev="configfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.090494][ T29] audit: type=1400 audit(1757007502.065:996): avc: denied { search } for pid=4262 comm="syz.3.248" name="/" dev="configfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.112735][ T29] audit: type=1400 audit(1757007502.065:997): avc: denied { read open } for pid=4262 comm="syz.3.248" path="/" dev="configfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.149424][ T4254] Quota error (device loop0): write_blk: dquota write failed [ 56.157028][ T4254] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 56.167012][ T4254] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.243: Failed to acquire dquot type 1 [ 56.220592][ T4267] wireguard0: entered promiscuous mode [ 56.226221][ T4267] wireguard0: entered allmulticast mode [ 56.236883][ T4254] EXT4-fs (loop0): 1 truncate cleaned up [ 56.250387][ T4254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.286442][ T29] audit: type=1326 audit(1757007502.345:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 56.288804][ T4254] netlink: 'syz.0.243': attribute type 13 has an invalid length. [ 56.309945][ T29] audit: type=1326 audit(1757007502.345:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 56.437542][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.444967][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.479688][ T4274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 56.502667][ T3408] tipc: Node number set to 2886997007 [ 56.535011][ T4254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.546852][ T4254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.639611][ T4271] netlink: 'syz.5.251': attribute type 30 has an invalid length. [ 56.656885][ T3965] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.676665][ T3965] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.737995][ T3965] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.793539][ T4284] loop1: detected capacity change from 0 to 128 [ 56.800063][ T3965] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.829720][ T4284] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.884487][ T4254] syz.0.243 (4254) used greatest stack depth: 9280 bytes left [ 56.895606][ T4294] netlink: 332 bytes leftover after parsing attributes in process `syz.2.256'. [ 56.917265][ T4294] netlink: 'syz.2.256': attribute type 9 has an invalid length. [ 56.924970][ T4294] netlink: 108 bytes leftover after parsing attributes in process `syz.2.256'. [ 56.934088][ T4294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.256'. [ 56.952383][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.961784][ T4284] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.055099][ T4304] loop0: detected capacity change from 0 to 1024 [ 57.061966][ T4304] EXT4-fs: Ignoring removed orlov option [ 57.072031][ T3975] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.119322][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.357612][ T4331] loop2: detected capacity change from 0 to 2048 [ 57.364524][ T4331] EXT4-fs: Ignoring removed orlov option [ 57.586258][ T4331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.684801][ T4381] netlink: 96 bytes leftover after parsing attributes in process `syz.3.265'. [ 57.694179][ T4381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.265'. [ 57.717329][ T4386] netlink: 'syz.5.267': attribute type 10 has an invalid length. [ 57.725146][ T4386] netlink: 40 bytes leftover after parsing attributes in process `syz.5.267'. [ 57.737149][ T4386] batman_adv: batadv0: Adding interface: macvlan0 [ 57.743731][ T4386] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.770246][ T4386] batman_adv: batadv0: Interface activated: macvlan0 [ 57.869550][ T4391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'. [ 57.882451][ T4391] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 57.915870][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.981799][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.145898][ T4415] netlink: 'syz.2.278': attribute type 12 has an invalid length. [ 58.196049][ T4417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.280'. [ 58.405197][ T4432] netlink: 'syz.5.286': attribute type 13 has an invalid length. [ 58.424302][ T4432] gretap0: refused to change device tx_queue_len [ 58.431418][ T4432] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.569331][ T4447] Driver unsupported XDP return value 0 on prog (id 253) dev N/A, expect packet loss! [ 58.798732][ T4482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4482 comm=syz.3.309 [ 58.811220][ T4482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4482 comm=syz.3.309 [ 58.948180][ T4497] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 58.966725][ T4497] dummy0: entered promiscuous mode [ 59.095711][ T4511] hsr_slave_0: left promiscuous mode [ 59.107420][ T4511] hsr_slave_1: left promiscuous mode [ 59.291119][ T4522] vlan2: entered allmulticast mode [ 59.296503][ T4522] dummy0: entered allmulticast mode [ 59.850888][ T4559] __nla_validate_parse: 5 callbacks suppressed [ 59.850908][ T4559] netlink: 7 bytes leftover after parsing attributes in process `syz.3.344'. [ 59.910575][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 60.448968][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 60.665564][ T4603] netlink: 96 bytes leftover after parsing attributes in process `syz.1.364'. [ 60.764589][ T4608] wg2: entered promiscuous mode [ 60.769512][ T4608] wg2: entered allmulticast mode [ 60.989858][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 60.989874][ T29] audit: type=1400 audit(1757007507.045:1241): avc: denied { watch } for pid=4626 comm="syz.5.375" path="/24" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.029273][ T4629] vhci_hcd: invalid port number 255 [ 61.034543][ T4629] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 61.051669][ T29] audit: type=1400 audit(1757007507.075:1242): avc: denied { append } for pid=4626 comm="syz.5.375" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.266342][ T4643] veth3: entered promiscuous mode [ 61.485837][ T4656] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 61.487327][ T29] audit: type=1400 audit(1757007507.545:1243): avc: denied { execute } for pid=4640 comm="syz.5.380" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 61.521488][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 61.558888][ T4656] bond1: (slave veth3): Enslaving as an active interface with a down link [ 61.589023][ T4656] bond1: entered promiscuous mode [ 61.594227][ T4656] bond1: entered allmulticast mode [ 61.651315][ T4656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.663879][ T4660] loop3: detected capacity change from 0 to 512 [ 61.687472][ T4660] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 61.804418][ T29] audit: type=1400 audit(1757007507.865:1244): avc: denied { unmount } for pid=4665 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.871009][ T29] audit: type=1326 audit(1757007507.915:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.5.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb977eeebe9 code=0x7ffc0000 [ 61.894417][ T29] audit: type=1326 audit(1757007507.915:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.5.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb977eeebe9 code=0x7ffc0000 [ 61.919682][ T29] audit: type=1326 audit(1757007507.915:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.5.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb977eeebe9 code=0x7ffc0000 [ 61.943036][ T29] audit: type=1326 audit(1757007507.915:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.5.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb977eeebe9 code=0x7ffc0000 [ 61.966440][ T29] audit: type=1326 audit(1757007507.925:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.5.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb977eeebe9 code=0x7ffc0000 [ 61.989693][ T29] audit: type=1326 audit(1757007507.925:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.5.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb977eeebe9 code=0x7ffc0000 [ 62.135952][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 62.240041][ T4684] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.304010][ T4684] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.383788][ T4684] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.438152][ T4687] loop3: detected capacity change from 0 to 512 [ 62.446198][ T4684] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.478532][ T4687] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.488467][ T4687] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 62.527053][ T4611] syz.0.368 (4611) used greatest stack depth: 7000 bytes left [ 62.580053][ T4687] netlink: zone id is out of range [ 62.586291][ T4687] netlink: zone id is out of range [ 62.603131][ T4687] netlink: zone id is out of range [ 62.607381][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.608272][ T4687] netlink: zone id is out of range [ 62.608288][ T4687] netlink: zone id is out of range [ 62.630039][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.650061][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.667297][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.706572][ T4695] loop2: detected capacity change from 0 to 512 [ 62.717035][ T4695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.753309][ T4695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 62.767174][ T4695] System zones: 0-2, 18-18, 34-34 [ 62.772982][ T4687] netlink: zone id is out of range [ 62.778221][ T4687] netlink: zone id is out of range [ 62.783769][ T4687] netlink: zone id is out of range [ 62.789053][ T4687] netlink: zone id is out of range [ 62.875440][ T4695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.890135][ T4695] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.925168][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.115171][ T4716] tipc: Started in network mode [ 63.120233][ T4716] tipc: Node identity 8a4542d73697, cluster identity 4711 [ 63.127586][ T4716] tipc: Enabled bearer , priority 0 [ 63.132686][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 63.144503][ T4713] tipc: Resetting bearer [ 63.168216][ T4726] blk_print_req_error: 17 callbacks suppressed [ 63.168233][ T4726] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.183562][ T4713] tipc: Disabling bearer [ 63.184128][ T4726] FAT-fs (loop3): unable to read boot sector [ 63.194974][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 63.211609][ T4728] team0 (unregistering): Port device team_slave_0 removed [ 63.222419][ T4728] team0 (unregistering): Port device team_slave_1 removed [ 63.298562][ T4735] loop3: detected capacity change from 0 to 512 [ 63.306978][ T4735] EXT4-fs: Ignoring removed nobh option [ 63.314990][ T4735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.426095][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.437637][ T4744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.505631][ T4744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.566259][ T4744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.615125][ T4763] syz.2.433 uses obsolete (PF_INET,SOCK_PACKET) [ 63.624943][ T4744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.638984][ T4745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.425'. [ 63.674872][ T3960] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.689453][ T3960] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.698123][ T3960] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.706674][ T3960] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.204799][ T4784] loop0: detected capacity change from 0 to 1024 [ 64.213128][ T4784] ext4: Unknown parameter 'appraise_type' [ 64.251887][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 64.439523][ T4794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.489386][ T4794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.584613][ T4794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.671984][ T4794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.777673][ T3960] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.789402][ T3960] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.802290][ T3960] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.820840][ T3960] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.846542][ T4797] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4797 comm=syz.5.448 [ 64.973831][ T4815] pim6reg1: entered promiscuous mode [ 64.979179][ T4815] pim6reg1: entered allmulticast mode [ 65.075491][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 65.084959][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 65.268621][ T4829] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.303787][ T4829] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.353954][ T4829] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.413784][ T4829] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.867989][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 65.978482][ T4840] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.045430][ T4840] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.105690][ T4840] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.155137][ T4840] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.208682][ T3948] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.220750][ T3948] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.232571][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.243250][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.287457][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.465'. [ 66.328043][ T4847] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 66.344823][ T4847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.359049][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 66.371967][ T4847] bond2 (unregistering): Released all slaves [ 66.612852][ T4859] loop2: detected capacity change from 0 to 512 [ 66.620682][ T4859] EXT4-fs: quotafile must be on filesystem root [ 66.687313][ T4858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.471'. [ 66.696382][ T4858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.471'. [ 66.706916][ T4858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.471'. [ 66.725814][ T4858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.471'. [ 66.734837][ T4858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.471'. [ 66.765429][ T4866] loop0: detected capacity change from 0 to 128 [ 66.851132][ T4871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4871 comm=syz.2.476 [ 66.912022][ T4879] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 66.949750][ T4881] loop2: detected capacity change from 0 to 512 [ 66.965896][ T4881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.981451][ T4881] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.996338][ T4881] EXT4-fs (loop2): 1 truncate cleaned up [ 67.011879][ T4881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.028269][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 67.028285][ T29] audit: type=1400 audit(1757007513.085:1313): avc: denied { watch } for pid=4886 comm="syz.5.483" path="/49/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.067847][ T29] audit: type=1400 audit(1757007513.085:1314): avc: denied { execute_no_trans } for pid=4886 comm="syz.5.483" path="/49/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.091308][ T29] audit: type=1400 audit(1757007513.095:1315): avc: denied { setattr } for pid=4880 comm="syz.2.481" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.119804][ T4880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.175058][ T29] audit: type=1326 audit(1757007513.225:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 67.198606][ T29] audit: type=1326 audit(1757007513.225:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 67.222144][ T29] audit: type=1326 audit(1757007513.225:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 67.245531][ T29] audit: type=1326 audit(1757007513.225:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 67.268892][ T29] audit: type=1326 audit(1757007513.225:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 67.292597][ T29] audit: type=1326 audit(1757007513.235:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 67.316123][ T29] audit: type=1326 audit(1757007513.235:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10817aebe9 code=0x7ffc0000 [ 67.366997][ T4907] netlink: 'syz.5.493': attribute type 4 has an invalid length. [ 67.378976][ T4907] netlink: 'syz.5.493': attribute type 4 has an invalid length. [ 67.429963][ T4911] loop5: detected capacity change from 0 to 512 [ 67.456065][ T4911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.475718][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.491202][ T4911] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 67.499575][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.507872][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.516422][ T4911] System zones: 0-2, 18-18, 34-34 [ 67.521920][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.524825][ T4911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.545828][ T4911] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.596007][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.029693][ T4953] loop1: detected capacity change from 0 to 1024 [ 68.037414][ T4953] EXT4-fs: Ignoring removed orlov option [ 68.056731][ T4953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.094243][ T4956] loop5: detected capacity change from 0 to 128 [ 68.511734][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.597044][ T4970] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 68.686174][ T4976] loop1: detected capacity change from 0 to 512 [ 68.723447][ T4976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.784748][ T4976] EXT4-fs (loop1): 1 truncate cleaned up [ 68.791672][ T4976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.985697][ T4976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.359508][ T5027] loop3: detected capacity change from 0 to 512 [ 69.398659][ T5027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.454283][ T5027] EXT4-fs (loop3): 1 truncate cleaned up [ 69.498835][ T5027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.519742][ T5040] loop5: detected capacity change from 0 to 1024 [ 69.552591][ T5040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.573612][ T5027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.601597][ T5040] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.540: Allocating blocks 449-513 which overlap fs metadata [ 69.628984][ T5039] EXT4-fs (loop5): pa ffff88810732d2a0: logic 48, phys. 177, len 21 [ 69.637143][ T5039] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 69.659249][ T5051] pim6reg: tun_chr_ioctl cmd 35108 [ 69.690931][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.277197][ T5141] __nla_validate_parse: 5 callbacks suppressed [ 70.277277][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 70.717115][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5179 comm=syz.1.570 [ 70.748090][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 71.036634][ T5203] tipc: New replicast peer: 255.255.255.255 [ 71.042857][ T5203] tipc: Enabled bearer , priority 10 [ 71.092329][ T5207] syz_tun: entered allmulticast mode [ 71.168003][ T5211] loop1: detected capacity change from 0 to 2048 [ 71.181166][ T5211] EXT4-fs: Ignoring removed orlov option [ 71.206103][ T5211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.467147][ T5236] loop2: detected capacity change from 0 to 1024 [ 71.485288][ T5236] EXT4-fs: Ignoring removed orlov option [ 71.501522][ T5236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.530313][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.847337][ T5246] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 71.853907][ T5246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.861467][ T5246] vhci_hcd vhci_hcd.0: Device attached [ 71.886283][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.956256][ T5246] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 71.962819][ T5246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.970402][ T5246] vhci_hcd vhci_hcd.0: Device attached [ 71.986279][ T5264] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 71.992844][ T5264] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.000463][ T5264] vhci_hcd vhci_hcd.0: Device attached [ 72.052167][ T2959] vhci_hcd: vhci_device speed not set [ 72.057297][ T5259] vhci_hcd: connection closed [ 72.057663][ T5265] vhci_hcd: connection closed [ 72.062417][ T5247] vhci_hcd: connection closed [ 72.068011][ T409] vhci_hcd: stop threads [ 72.070937][ T5262] SELinux: failed to load policy [ 72.072717][ T409] vhci_hcd: release socket [ 72.072734][ T409] vhci_hcd: disconnect device [ 72.072761][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 72.072773][ T29] audit: type=1400 audit(1757007518.125:1538): avc: denied { load_policy } for pid=5261 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.117996][ T409] vhci_hcd: stop threads [ 72.122272][ T409] vhci_hcd: release socket [ 72.126757][ T409] vhci_hcd: disconnect device [ 72.131587][ T409] vhci_hcd: stop threads [ 72.135880][ T409] vhci_hcd: release socket [ 72.140409][ T409] vhci_hcd: disconnect device [ 72.145319][ T2959] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 72.152860][ T2959] usb 11-1: enqueue for inactive port 0 [ 72.158482][ T2959] usb 11-1: enqueue for inactive port 0 [ 72.164166][ T2959] usb 11-1: enqueue for inactive port 0 [ 72.172142][ T3394] tipc: Node number set to 3167896279 [ 72.232205][ T2959] vhci_hcd: vhci_device speed not set [ 72.280058][ T5278] loop3: detected capacity change from 0 to 2048 [ 72.297243][ T5278] EXT4-fs: Ignoring removed orlov option [ 72.335242][ T5278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.556540][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.247990][ T29] audit: type=1326 audit(1757007519.305:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.334698][ T29] audit: type=1326 audit(1757007519.315:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.358174][ T29] audit: type=1326 audit(1757007519.315:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.366653][ T5400] tipc: New replicast peer: 255.255.255.255 [ 73.381663][ T29] audit: type=1326 audit(1757007519.315:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.388055][ T5400] tipc: Enabled bearer , priority 10 [ 73.411090][ T29] audit: type=1326 audit(1757007519.315:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.440585][ T29] audit: type=1400 audit(1757007519.315:1544): avc: denied { mount } for pid=5378 comm="syz.1.610" name="/" dev="hugetlbfs" ino=11802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 73.463494][ T29] audit: type=1326 audit(1757007519.315:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.486842][ T29] audit: type=1326 audit(1757007519.315:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.510274][ T29] audit: type=1326 audit(1757007519.315:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.1.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1523cbebe9 code=0x7ffc0000 [ 73.545003][ T5393] loop3: detected capacity change from 0 to 8192 [ 73.595915][ T5393] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 73.603906][ T5393] FAT-fs (loop3): Filesystem has been set read-only [ 73.706750][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 73.713550][ T5410] loop5: detected capacity change from 0 to 2048 [ 73.723512][ T5410] EXT4-fs: Ignoring removed orlov option [ 73.736211][ T5415] netlink: 'syz.0.619': attribute type 83 has an invalid length. [ 73.746085][ T5410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.974401][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.021349][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 74.044503][ T5437] netlink: 'syz.5.628': attribute type 12 has an invalid length. [ 74.052368][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 74.077088][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.086472][ T5437] netlink: 'syz.5.628': attribute type 12 has an invalid length. [ 74.094315][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 74.103549][ T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.111927][ T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.158837][ T5439] syzkaller0: entered promiscuous mode [ 74.164386][ T5439] syzkaller0: entered allmulticast mode [ 74.172080][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.180520][ T5442] veth0: entered promiscuous mode [ 74.188689][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'. [ 74.655361][ T5471] bridge: RTM_NEWNEIGH with invalid ether address [ 74.763581][ T5476] loop3: detected capacity change from 0 to 128 [ 74.770115][ T5476] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 74.788182][ T5477] loop0: detected capacity change from 0 to 1024 [ 74.802488][ T5477] EXT4-fs: Ignoring removed orlov option [ 74.810699][ T5476] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.644'. [ 74.821649][ T5477] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 74.838787][ T5477] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.882447][ T5479] loop3: detected capacity change from 0 to 2048 [ 74.889121][ T5477] EXT4-fs (loop0): invalid journal inode [ 74.895018][ T5477] EXT4-fs (loop0): can't get journal size [ 74.914304][ T3484] loop3: p1 < > p4 [ 74.914809][ T5477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.962755][ T3484] loop3: p4 size 8388608 extends beyond EOD, truncated [ 75.008215][ T5479] loop3: p1 < > p4 [ 75.013899][ T5479] loop3: p4 size 8388608 extends beyond EOD, truncated [ 75.103421][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.138081][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.157405][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 75.168414][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 75.170100][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.005140][ T5509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 76.334207][ T5521] loop3: detected capacity change from 0 to 1024 [ 76.347772][ T5521] EXT4-fs: Ignoring removed orlov option [ 76.365826][ T5521] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 76.388719][ T5522] loop2: detected capacity change from 0 to 2048 [ 76.406927][ T5521] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 76.488855][ T5521] EXT4-fs (loop3): invalid journal inode [ 76.513807][ T5521] EXT4-fs (loop3): can't get journal size [ 76.524340][ T5497] loop2: p1 < > p4 [ 76.528788][ T5497] loop2: p4 size 8388608 extends beyond EOD, truncated [ 76.532053][ T5521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.559330][ T5522] loop2: p1 < > p4 [ 76.568126][ T5522] loop2: p4 size 8388608 extends beyond EOD, truncated [ 76.682043][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.705452][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.715133][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.859062][ T5545] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 76.905653][ T5545] bond2: entered promiscuous mode [ 76.910799][ T5545] bond2: entered allmulticast mode [ 76.916238][ T5545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.931460][ T5545] ip6gretap1: entered promiscuous mode [ 76.937081][ T5545] ip6gretap1: entered allmulticast mode [ 76.943357][ T5545] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 77.012291][ T409] net_ratelimit: 73 callbacks suppressed [ 77.012306][ T409] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.035847][ T5553] netlink: 9 bytes leftover after parsing attributes in process `syz.2.674'. [ 77.084046][ T5553] 0·: renamed from hsr0 (while UP) [ 77.140541][ T5553] 0·: entered allmulticast mode [ 77.145594][ T5553] hsr_slave_0: entered allmulticast mode [ 77.151395][ T5553] hsr_slave_1: entered allmulticast mode [ 77.162126][ T5553] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 77.180897][ T5555] loop3: detected capacity change from 0 to 164 [ 77.192829][ T409] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.255799][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 77.255816][ T29] audit: type=1400 audit(1757007523.315:1605): avc: denied { mount } for pid=5554 comm="syz.3.676" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 77.382053][ T29] audit: type=1400 audit(1757007523.395:1606): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 77.424950][ T5569] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.440469][ T5569] FAT-fs (loop5): unable to read boot sector [ 77.442153][ T29] audit: type=1400 audit(1757007523.495:1607): avc: denied { create } for pid=5565 comm="syz.5.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.465869][ T29] audit: type=1400 audit(1757007523.495:1608): avc: denied { write } for pid=5565 comm="syz.5.681" path="socket:[12107]" dev="sockfs" ino=12107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.508226][ T29] audit: type=1400 audit(1757007523.505:1609): avc: denied { ioctl } for pid=5565 comm="syz.5.681" path="socket:[12107]" dev="sockfs" ino=12107 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.583265][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 77.608751][ T29] audit: type=1400 audit(1757007523.665:1610): avc: denied { getattr } for pid=5580 comm="syz.1.687" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.650915][ T29] audit: type=1400 audit(1757007523.685:1611): avc: denied { kexec_image_load } for pid=5576 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 77.868473][ T5597] netlink: 5 bytes leftover after parsing attributes in process `syz.1.694'. [ 77.901536][ T5597] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 77.943973][ T5597] 0ªî{X¹¦: entered allmulticast mode [ 77.952348][ T5597] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 78.159440][ T29] audit: type=1400 audit(1757007524.215:1612): avc: denied { watch_reads } for pid=5604 comm="syz.1.697" path="/173/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.224321][ T5607] loop2: detected capacity change from 0 to 164 [ 78.397298][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'. [ 78.540644][ T5620] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 78.560889][ T5620] bond2: entered promiscuous mode [ 78.566135][ T5620] bond2: entered allmulticast mode [ 78.571617][ T5620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.595174][ T5618] netlink: 9 bytes leftover after parsing attributes in process `syz.1.703'. [ 78.633465][ T5620] ip6gretap1: entered promiscuous mode [ 78.639128][ T5620] ip6gretap1: entered allmulticast mode [ 78.646897][ T5620] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 78.662371][ T409] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.742935][ T29] audit: type=1400 audit(1757007524.775:1613): avc: denied { write } for pid=5625 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.782276][ T409] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.820311][ T29] audit: type=1400 audit(1757007524.875:1614): avc: granted { setsecparam } for pid=5632 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 78.944069][ T5649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'. [ 79.186209][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.199007][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.317916][ T409] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.337691][ T409] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.490040][ T5690] netlink: 72 bytes leftover after parsing attributes in process `syz.3.729'. [ 79.559331][ T5687] syzkaller0: entered promiscuous mode [ 79.565039][ T5687] syzkaller0: entered allmulticast mode [ 79.623659][ T409] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.632063][ T409] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.798400][ T5704] loop2: detected capacity change from 0 to 1024 [ 79.813220][ T5704] ext4: Unknown parameter 'uid<00000000000000000000' [ 79.909074][ T5710] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 79.916967][ T5710] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.736'. [ 80.055557][ T5725] netlink: 96 bytes leftover after parsing attributes in process `syz.2.745'. [ 80.142088][ T5734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5734 comm=syz.0.749 [ 80.311088][ T5754] tipc: New replicast peer: 255.255.255.83 [ 80.317166][ T5754] tipc: Enabled bearer , priority 10 [ 80.469331][ T5765] ref_ctr increment failed for inode: 0x224 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104514500 [ 80.481203][ T5764] uprobe: syz.5.762:5764 failed to unregister, leaking uprobe [ 80.715393][ T5773] loop5: detected capacity change from 0 to 2048 [ 80.773707][ T5773] loop5: p1 < > p4 [ 80.778817][ T5773] loop5: p4 size 8388608 extends beyond EOD, truncated [ 80.871582][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 80.876304][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 81.133418][ T5797] loop2: detected capacity change from 0 to 512 [ 81.142399][ T5797] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.153824][ T5797] EXT4-fs (loop2): 1 truncate cleaned up [ 81.160085][ T5797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.286571][ T5803] loop0: detected capacity change from 0 to 8192 [ 81.451238][ T5808] syzkaller0: entered promiscuous mode [ 81.456796][ T5808] syzkaller0: entered allmulticast mode [ 81.661176][ T5804] ================================================================== [ 81.669283][ T5804] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 81.676423][ T5804] [ 81.678753][ T5804] write to 0xffff88811953e9a4 of 4 bytes by task 5797 on cpu 1: [ 81.686387][ T5804] xas_set_mark+0x12b/0x140 [ 81.690914][ T5804] __folio_start_writeback+0x1dd/0x440 [ 81.696389][ T5804] ext4_bio_write_folio+0x5ad/0x9f0 [ 81.701605][ T5804] mpage_process_page_bufs+0x4a1/0x620 [ 81.707075][ T5804] mpage_prepare_extent_to_map+0x786/0xc00 [ 81.712897][ T5804] ext4_do_writepages+0xa05/0x2750 [ 81.718031][ T5804] ext4_writepages+0x176/0x300 [ 81.722808][ T5804] do_writepages+0x1c6/0x310 [ 81.727405][ T5804] filemap_write_and_wait_range+0x144/0x340 [ 81.733318][ T5804] filemap_invalidate_pages+0xa4/0x1a0 [ 81.738783][ T5804] kiocb_invalidate_pages+0x6e/0x80 [ 81.743985][ T5804] __iomap_dio_rw+0x5d4/0x1250 [ 81.748757][ T5804] iomap_dio_rw+0x40/0x90 [ 81.753091][ T5804] ext4_file_write_iter+0xad9/0xf00 [ 81.758312][ T5804] iter_file_splice_write+0x666/0xa60 [ 81.763688][ T5804] direct_splice_actor+0x156/0x2a0 [ 81.768817][ T5804] splice_direct_to_actor+0x312/0x680 [ 81.774214][ T5804] do_splice_direct+0xda/0x150 [ 81.778997][ T5804] do_sendfile+0x380/0x650 [ 81.783446][ T5804] __x64_sys_sendfile64+0x105/0x150 [ 81.788669][ T5804] x64_sys_call+0x2bb0/0x2ff0 [ 81.793362][ T5804] do_syscall_64+0xd2/0x200 [ 81.797883][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.803793][ T5804] [ 81.806142][ T5804] read to 0xffff88811953e9a4 of 4 bytes by task 5804 on cpu 0: [ 81.813702][ T5804] xas_find_marked+0x5dc/0x620 [ 81.818495][ T5804] find_get_entry+0x5d/0x380 [ 81.823089][ T5804] filemap_get_folios_tag+0x92/0x210 [ 81.828376][ T5804] mpage_prepare_extent_to_map+0x320/0xc00 [ 81.834210][ T5804] ext4_do_writepages+0x708/0x2750 [ 81.839430][ T5804] ext4_writepages+0x176/0x300 [ 81.844205][ T5804] do_writepages+0x1c6/0x310 [ 81.848823][ T5804] file_write_and_wait_range+0x156/0x2c0 [ 81.854471][ T5804] generic_buffers_fsync_noflush+0x45/0x120 [ 81.860375][ T5804] ext4_sync_file+0x1ab/0x690 [ 81.865056][ T5804] vfs_fsync_range+0x10a/0x130 [ 81.869825][ T5804] ext4_buffered_write_iter+0x34f/0x3c0 [ 81.875390][ T5804] ext4_file_write_iter+0xdbf/0xf00 [ 81.880607][ T5804] iter_file_splice_write+0x666/0xa60 [ 81.885986][ T5804] direct_splice_actor+0x156/0x2a0 [ 81.891102][ T5804] splice_direct_to_actor+0x312/0x680 [ 81.896477][ T5804] do_splice_direct+0xda/0x150 [ 81.901249][ T5804] do_sendfile+0x380/0x650 [ 81.905680][ T5804] __x64_sys_sendfile64+0x105/0x150 [ 81.910889][ T5804] x64_sys_call+0x2bb0/0x2ff0 [ 81.915589][ T5804] do_syscall_64+0xd2/0x200 [ 81.920107][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.926004][ T5804] [ 81.928326][ T5804] value changed: 0x0a000021 -> 0x04000021 [ 81.934039][ T5804] [ 81.936361][ T5804] Reported by Kernel Concurrency Sanitizer on: [ 81.942522][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: syz.2.777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.952159][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.962224][ T5804] ================================================================== [ 81.990951][ T5814] loop0: detected capacity change from 0 to 1024 [ 81.997920][ T5814] ext4: Unknown parameter 'uid<00000000000000000000' [ 82.108824][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.