last executing test programs: 2.619030759s ago: executing program 0 (id=3695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.57855883s ago: executing program 0 (id=3696): r0 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100767469004d00028008000400ac1e000108000400e0"], 0x58}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)={0x248, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@generic="ba2acad8872ac90e6d9015b09e3c51af5f3bbc5524f469a8d0f23e499e6f8680afa3fbf61eceb6eda28e464c0e2d799a8636ba371fa9443913fd04b35e3d4ed3eaeb83d96e850eb775abd62c5d1745cef875ed205fd1d598fee2835219b9c3702a369b6ec961cc4066f9dfc3e6b3e90c5e0e5a1472c3b8a5d868e7dad28481625802e63ac40fef3b30a4b9e00db73bee6b967d942ff87cf4241b41bf1d1c9c7496f7661dcabb8f45128e0e6c4a19", @nested={0x10e, 0xa, 0x0, 0x1, [@generic="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", @nested={0x4, 0xb1}, @typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}]}, @generic="aab5da7393198d3c061b1a8888a29f7c38c3942208670d3e2c31f9a3139d3f052c21cadf5773ff3caf10dbfd291921ac9f80bd9c01ae5422fa41dc946c99110561a050dd1a74a4d7521aef5417d83c0ab8542f9729b0891b7ac51375b219cea9d3b61f9d4a1b043fdf72e90a51d4be635835a706898021ffab16"]}, 0x248}, {&(0x7f0000000980)={0x210, 0x19, 0x400, 0x70bd25, 0x25dfdbfe, "", [@typed={0x3e, 0xb8, 0x0, 0x0, @binary="b94659ef91b7789bd5d806c899884853ec20ef1626d06eaa88ac6a2b8a9aa2a902942ec4e9e328466bbf0fb339a79b011a45e1bd931941cfdc45"}, @nested={0x4a, 0xca, 0x0, 0x1, [@generic="ba3f66ee2d24b27d10388fec1b1a902cc4d74a6e0df71cede2e29f7db2f19409047491ec3642d24d66aa8981d19191b55c9ba4a2ec2d2e4a6dff1e4643fc", @nested={0x4, 0x122}, @nested={0x4, 0x6b}]}, @generic="6ae3504a732a9028f46f3c4631c8d6d39b393ee85ecd674a366230af4af60fc11d8099395ab2806f899049b887248c9346bfaddd807189b098d4199d2db860710df7975b65cb9abf026a1c8f0c9fb2f94096b7456af4a1b46622d2962ebb977cc939916eba09aa5aa3bc84e09c25ae42a12712d35b25deeedb65946f6988a43972add6ac7055a5f52c6142", @typed={0x4, 0x55}, @generic="4f35f358a1bfec8fa401b3a944e6d7e7d90a1f7131d8855428449a0c97b5103b0dc6e434ee6d5708caa47fe044a8f228cff8f117ebde12e1216f8fb5a117e19ddb0d7b0464e7721d3f3d11bf61575f97732497ce0f641801242a88ee0803c20fa01dbf47fd785a64f2596a1eba4a0eddf3e79d31181ec974ce41a34a756e32b589e4d49a90d025fdee168e352107de87b86cdaaadee8cb5a7efb6a424c2be452746a4244c1862828f77cba6a5d2a611243e907d04c9ff23b0947b312a96353232d9f7d8857d3da461212869c5471498b2841b911a3c9ffbe09cae1acb0b1507dcbc007a5"]}, 0x210}], 0x2, 0x0, 0x0, 0x54}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005680)=""/213, 0xd5, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 2.577872519s ago: executing program 0 (id=3697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x84, r4, 0x5, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x1a8, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @void, @val={0x25, 0x3, {0x0, 0x34, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}}, @val={0x76, 0x6, {0x9, 0x2, 0xff7f, 0xe9}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x84}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x40000) 2.414239952s ago: executing program 4 (id=3703): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000900000008000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000040), &(0x7f0000000280)=""/21}, 0x20) 2.413394892s ago: executing program 4 (id=3704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) r3 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r5}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = eventfd2(0x0, 0x0) read$eventfd(r9, &(0x7f0000000040), 0x8) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) mknod$loop(0x0, 0x2, 0x1) write$tun(r4, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 2.230606294s ago: executing program 3 (id=3709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfeffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = creat(0x0, 0x8) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000100)={[{@lazytime}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r7 = memfd_create(&(0x7f0000000280)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x9fQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\xc4\xeep\x00\x02\x00\x00\x00\xa2k\x86\xbd\xa62nR\xebOc3\xac\x8a\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\xe9\xe0\xe2\xb3*\x17j\xda\xfb&\x83\x8cG\a\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb2\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8#X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e', 0x5) ftruncate(r7, 0x400000) lseek(r7, 0x0, 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r9}, &(0x7f00000011c0), &(0x7f0000001200)='%-010d \x00'}, 0x20) shmdt(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 2.024270447s ago: executing program 3 (id=3710): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.878009508s ago: executing program 3 (id=3712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x1a0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x85, "00000000000000000000ffff00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040400) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.807995829s ago: executing program 3 (id=3714): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000b4ae7338186a83cfded2ba4899a5dd7414", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000ce739da224ed3ee9d510a52e80caccacfdae22ab684748b3ff61af58cf53d69b000000000055586fbe413f5f76958341f43d9da186773f481838e0", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.65084722s ago: executing program 0 (id=3716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="25e83a637602dbdd2ab8610da87d2e562cd6bedd13ddaaa21bc887b85ea53d0a950eb895b62a614c4b105dfd577b26ee9d9884c6dd6e1183386ff70f59f7f47581d7d0a38f7a0e83dab2f8832ff4bb1b919bc688d21fc3e7ecc86a6ba68449b6470812ec76f65ca1aaeae2b232a119614a3aad8217aae162f62cff9491d84de3ec4824433dc12276e21b020a91f768771ede95e619504c433a45abaa56a96e86f9557fd374fbcf87a79af5", 0xab}, {&(0x7f0000000440)="6c2b3308780d705842496527f736cb18b94de44253bf51b7e6df739e4a42a65d3d231dea5de683e7dbe9543a3acd10672c1f2b718038895408fac5912be15aee544f698e76afaaf8bdf27cef0e31cc44f87ddac5a564a7cdf0c37c81a0032f0d0d1715d33c5cc3ee909e92e249007c8c7f2b401d1f228c0a335fff03dfbfc0a4f85850d7f57b54efe8d35a69894f9b735d786a2325879b422e7d6a8ffdba44128250ad6854291d98", 0xa8}], 0x2, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000000500)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000540)="7ec55b5020ab6674ea93b6efc516fc", 0xf}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="ae1d02e19bd9314f738cf36a36de3850ee4a4bbfed39a991e3f633902c9eef56f1c3917a7d38a03a59d502a212d53e884f8587c8da55ded20b4b9606ba68985cc4f6a981c696f4dc45bc3692622991b22cddb75fce7a05d1cfa9585fe9656be7ceed3fc1da5da67a553cddcd", 0x6c}, {&(0x7f0000000700)="d4b00c78dd2e60c3b577cfce52e6b824021637ad7136897bf190a510338c9de1367e97a0d1954d8b2a3acbc0daf924bfaa20f674145d480299a9807cb5f3a1b2109e572e151893c6", 0x48}], 0x4, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x38, 0x0, 0x7, {[@generic={0x86, 0x9, "ab2daa87c8b9e8"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xa9, [@multicast2, @remote, @multicast2, @private=0xa010102]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x60, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x85, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @private=0xa010100, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0xad, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5e1}, {@multicast2, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000940)="dbd8ccafce8dc07db5dc06092a819196", 0x10}, {&(0x7f0000000980)="6c431ce40725e2bdecf7b959f70f731fd704fe3e2fbd6d9f97966668b798450bd5859937f814cde700b8ccfe9e06a304adaa2e93c1f309cf", 0x38}, {&(0x7f00000009c0)="55dc5c2f52a2a696a5f336f0a4a5d2dc868a415ebcabdd9d940afdd3b6f56e6e7b68d09c591cb34e8af346ef622b62be272354fff0c8f61209f4305d10c4250aaf28afe0b468b7eeb6e1288c1745d1436fd1de9ea92fac8bc9261e930c6f210eb05ca66e4af41fcdb855b697e4ed3a78f91bebf9b319f177ac8abb94060154cbe5aca85a6f10c7482d85d6f93fe3acc56c30b7944b0afe5a06fb53fd35309804c307bea029fc88e8dd80ca9a7391623a4ae6254eacbd6af1f70b4f073210b498777a468d45c1cddd079f840b98c9284b166143826b9c6a6441c5ac93e337b902af8312047626", 0xe6}, {&(0x7f0000000ac0)="17840cabfaa585c83bc8cabe8e0a9075367304dfa3f7f0278a0d3997c83bb1be3c84097a7d", 0x25}, {&(0x7f0000000e00)="a5450462bed67c1fcd6b5f2b297be21560ea9ad473b8d2941b32569a8bbfbeffb45b4eb137e104171b54e7dbb022fc9e8fde3fc95c06caf59d44ac73b90a5a209dafc22c626a1004ffa74a96b9f05d842f181c1bfe0d89f1618f3c7676a431d7da40f9bfe1e321e3bab31e2fe462b3e3bcc3efd268383227be730258ded63039614ec2b90a792be2d7697a37890319c3259e4f0c312aefa97d52eb90a8a4c424be56c4df8fcca150d39ef312a60bc3a28b22e9f4ede2ce6aebf44c2940a5d103e42c6e19e4af99374f783a", 0xcb}], 0x6}}, {{&(0x7f0000000f40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f80)="3b6d98ee4d55ccf0470111099fbd2b8816d812dc21af8b5f08cbff56bc082489b9679a438d34fc0e57671dd37d71a6dbbb8345af294b22e2d4d925d40972d971f7025288d2ed30f1277698fa672436d118fc2ce93be8937d219ba432e3ec738b9a8ce9a71435eba06036", 0x6a}], 0x1, &(0x7f0000001040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x5a, [@remote]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000010c0)="779915732f6e1429aa164991a38ad638bbb3b8c87a4227571c84c67de98558e941022a71f92f0c0a6380c009cd73eba1c3477fb9bdf416c8105f5bb1b75520ca2ca1b8ff5c85f7076b83e04d1e05de8e85d503e5648f58257ffa4d7d0c8a7dab3f9b7fe02ddc1e0e49b71e73653f349c42f23d513f2a3f57006ba5ee461dd0958e01bf560747bc383362deb7073a2e2760b55c281d7f2228190e326423d782128d9c7dd6019159eb", 0xa8}, {&(0x7f0000001180)="5d4725b8aba03e19dc0a1c802fd8926105249258ec294a30718c960f875e34cc93b6ba633f62b8f52ec7464e6f30c8dfdf83a4aba9dec9ac282549d710f32191f59e6b067c812fc03c4f18dc6f9a1b766c4babd7d26062", 0x57}, {&(0x7f0000001200)="30bdc645ced1f1a3e4d4f5f728d1f6784789681185c76b8e4219b5788510be9370df6c048f3ed1d8092308ac6e659481fd2fb455fa39b16652a203bddf468c42ae56a50587d6ffe38e2f61c3ec839c203f40ab259b68430002c2a27d573e3c188b4ecb27d8d923ae45eccc6df8a5f80b0fb487898041228c2865d3ec4f236840e9a7924290134ab36adc26596e918cf8571a5b2c4509ea7aa9c6501154a23ff6876b1774434fd73626bbaf80a6812d6f39e0d1266d7c2a622dd35fdef2243d1f0e1eb5a52ed5bbcefb8030", 0xcb}], 0x3, &(0x7f0000001400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0xd}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="9833ffc319197cce5d1b5ea20f757372a4f918448c29e64b9965f89b591f598680397bde310e86f00a11425ea485391f014663d0284e1730d885d8e12ed69d8beb366cbb1f7d", 0x46}, {&(0x7f0000001540)="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", 0xfa}], 0x2, &(0x7f00000027c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xf, 0x3a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010100]}, @generic={0x86, 0x8, "cc701242fbef"}, @lsrr={0x83, 0xb, 0xfa, [@multicast2, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x27, 0x1, 0x6, [{@multicast1, 0x9}, {@remote, 0xe}, {@loopback, 0xd}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xf8}}, {{&(0x7f0000001980)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000028c0)="907d370eb5d20be88e641757bbc5bb773177287be0e58e01ce60597833afaf1d9a1e9025bd27fe4f113222fdd8a2108b6024235798f426f2a68a894261d1bda7e7493a3ea74aee46b5f95ae693443b96fa55324e20de5d91bb8a1fac3fa843218ef623cf471de293a4006025b40a9bc5de9dcc7ef5e7f0e9cc903a68848d725db021", 0x82}, {&(0x7f0000002980)="1664a685c370d4bc5fb9a7607f14785df0533ccf383ed97ca80a61ccfd9c2909bb0ed868df8b0088e0888d5cb193ab76271f40ec15c7a947f7f88448fc8700d9b6edd2d0ee82f785468c76042d0d3daef30553b14a1bdfa7908d590a3141902441e0f7a87f30cc78ff714efa53ccbe4e4e18e3be5f6ffc93a8b0736f49eb1d2636", 0x81}], 0x2, &(0x7f0000002ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xb3, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x9}, {@broadcast, 0xff}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@private=0xa010101, 0x52}]}, @ssrr={0x89, 0x23, 0xfa, [@multicast2, @rand_addr=0x64010102, @remote, @local, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xb3, 0x3, 0x9, [{@broadcast, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x92}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x120}}], 0x7, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) 1.575186482s ago: executing program 3 (id=3718): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\a\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\x00\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.461558953s ago: executing program 1 (id=3720): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317"], 0xfdef) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.428723914s ago: executing program 1 (id=3722): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x743f, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.428131714s ago: executing program 2 (id=3723): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.415158973s ago: executing program 4 (id=3724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getdents64(0xffffffffffffffff, &(0x7f0000001940)=""/4096, 0x1000) 1.253794886s ago: executing program 1 (id=3725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1.252992275s ago: executing program 2 (id=3726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x84, r4, 0x5, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x1a8, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @void, @val={0x25, 0x3, {0x0, 0x34, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}}, @val={0x76, 0x6, {0x9, 0x2, 0xff7f, 0xe9}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x84}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x40000) 1.200136246s ago: executing program 1 (id=3727): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002a40)={0x0, @loopback, @loopback}, &(0x7f0000002a80)=0xc) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="25e83a637602dbdd2ab8610da87d2e562cd6bedd13ddaaa21bc887b85ea53d0a950eb895b62a614c4b105dfd577b26ee9d9884c6dd6e1183386ff70f59f7f47581d7d0a38f7a0e83dab2f8832ff4bb1b919bc688d21fc3e7ecc86a6ba68449b6470812ec76f65ca1aaeae2b232a119614a3aad8217aae162f62cff9491d84de3ec4824433dc12276e21b020a91f768771ede95e619504c433a45abaa56a96e86f9557fd374fbcf87a79af5", 0xab}, {&(0x7f0000000440)="6c2b3308780d705842496527f736cb18b94de44253bf51b7e6df739e4a42a65d3d231dea5de683e7dbe9543a3acd10672c1f2b718038895408fac5912be15aee544f698e76afaaf8bdf27cef0e31cc44f87ddac5a564a7cdf0c37c81a0032f0d0d1715d33c5cc3ee909e92e249007c8c7f2b401d1f228c0a335fff03dfbfc0a4f85850d7f57b54efe8d35a69894f9b735d786a2325879b422e7d6a8ffdba44128250ad6854291d98", 0xa8}], 0x2, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000000500)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000540)="7ec55b5020ab6674ea93b6efc516fc", 0xf}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="ae1d02e19bd9314f738cf36a36de3850ee4a4bbfed39a991e3f633902c9eef56f1c3917a7d38a03a59d502a212d53e884f8587c8da55ded20b4b9606ba68985cc4f6a981c696f4dc45bc3692622991b22cddb75fce7a05d1cfa9585fe9656be7ceed3fc1da5da67a553cddcd", 0x6c}, {&(0x7f0000000700)="d4b00c78dd2e60c3b577cfce52e6b824021637ad7136897bf190a510338c9de1367e97a0d1954d8b2a3acbc0daf924bfaa20f674145d480299a9807cb5f3a1b2109e572e151893c6", 0x48}], 0x4, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x38, 0x0, 0x7, {[@generic={0x86, 0x9, "ab2daa87c8b9e8"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xa9, [@multicast2, @remote, @multicast2, @private=0xa010102]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x60, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x85, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @private=0xa010100, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0xad, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5e1}, {@multicast2, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000940)="dbd8ccafce8dc07db5dc06092a819196", 0x10}, {&(0x7f0000000980)="6c431ce40725e2bdecf7b959f70f731fd704fe3e2fbd6d9f97966668b798450bd5859937f814cde700b8ccfe9e06a304adaa2e93c1f309cf", 0x38}, {&(0x7f00000009c0)="55dc5c2f52a2a696a5f336f0a4a5d2dc868a415ebcabdd9d940afdd3b6f56e6e7b68d09c591cb34e8af346ef622b62be272354fff0c8f61209f4305d10c4250aaf28afe0b468b7eeb6e1288c1745d1436fd1de9ea92fac8bc9261e930c6f210eb05ca66e4af41fcdb855b697e4ed3a78f91bebf9b319f177ac8abb94060154cbe5aca85a6f10c7482d85d6f93fe3acc56c30b7944b0afe5a06fb53fd35309804c307bea029fc88e8dd80ca9a7391623a4ae6254eacbd6af1f70b4f073210b498777a468d45c1cddd079f840b98c9284b166143826b9c6a6441c5ac93e337b902af8312047626", 0xe6}, {&(0x7f0000000ac0)="17840cabfaa585c83bc8cabe8e0a9075367304dfa3f7f0278a0d3997c83bb1be3c84097a7d", 0x25}, {&(0x7f0000000e00)="a5450462bed67c1fcd6b5f2b297be21560ea9ad473b8d2941b32569a8bbfbeffb45b4eb137e104171b54e7dbb022fc9e8fde3fc95c06caf59d44ac73b90a5a209dafc22c626a1004ffa74a96b9f05d842f181c1bfe0d89f1618f3c7676a431d7da40f9bfe1e321e3bab31e2fe462b3e3bcc3efd268383227be730258ded63039614ec2b90a792be2d7697a37890319c3259e4f0c312aefa97d52eb90a8a4c424be56c4df8fcca150d39ef312a60bc3a28b22e9f4ede2ce6aebf44c2940a5d103e42c6e19e4af99374f783a", 0xcb}], 0x6}}, {{&(0x7f0000000f40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f80)="3b6d98ee4d55ccf0470111099fbd2b8816d812dc21af8b5f08cbff56bc082489b9679a438d34fc0e57671dd37d71a6dbbb8345af294b22e2d4d925d40972d971f7025288d2ed30f1277698fa672436d118fc2ce93be8937d219ba432e3ec738b9a8ce9a71435eba06036", 0x6a}], 0x1, &(0x7f0000001040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x5a, [@remote]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000010c0)="779915732f6e1429aa164991a38ad638bbb3b8c87a4227571c84c67de98558e941022a71f92f0c0a6380c009cd73eba1c3477fb9bdf416c8105f5bb1b75520ca2ca1b8ff5c85f7076b83e04d1e05de8e85d503e5648f58257ffa4d7d0c8a7dab3f9b7fe02ddc1e0e49b71e73653f349c42f23d513f2a3f57006ba5ee461dd0958e01bf560747bc383362deb7073a2e2760b55c281d7f2228190e326423d782128d9c7dd6019159eb", 0xa8}, {&(0x7f0000001180)="5d4725b8aba03e19dc0a1c802fd8926105249258ec294a30718c960f875e34cc93b6ba633f62b8f52ec7464e6f30c8dfdf83a4aba9dec9ac282549d710f32191f59e6b067c812fc03c4f18dc6f9a1b766c4babd7d26062", 0x57}, {&(0x7f0000001200)="30bdc645ced1f1a3e4d4f5f728d1f6784789681185c76b8e4219b5788510be9370df6c048f3ed1d8092308ac6e659481fd2fb455fa39b16652a203bddf468c42ae56a50587d6ffe38e2f61c3ec839c203f40ab259b68430002c2a27d573e3c188b4ecb27d8d923ae45eccc6df8a5f80b0fb487898041228c2865d3ec4f236840e9a7924290134ab36adc26596e918cf8571a5b2c4509ea7aa9c6501154a23ff6876b1774434fd73626bbaf80a6812d6f39e0d1266d7c2a622dd35fdef2243d1f0e1eb5a52ed5bbcefb8030", 0xcb}], 0x3, &(0x7f0000001400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0xd}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="9833ffc319197cce5d1b5ea20f757372a4f918448c29e64b9965f89b591f598680397bde310e86f00a11425ea485391f014663d0284e1730d885d8e12ed69d8beb366cbb1f7d", 0x46}, {&(0x7f0000001540)="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", 0xfa}], 0x2, &(0x7f00000027c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xf, 0x3a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010100]}, @generic={0x86, 0x8, "cc701242fbef"}, @lsrr={0x83, 0xb, 0xfa, [@multicast2, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x27, 0x1, 0x6, [{@multicast1, 0x9}, {@remote, 0xe}, {@loopback, 0xd}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xf8}}, {{&(0x7f0000001980)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000028c0)="907d370eb5d20be88e641757bbc5bb773177287be0e58e01ce60597833afaf1d9a1e9025bd27fe4f113222fdd8a2108b6024235798f426f2a68a894261d1bda7e7493a3ea74aee46b5f95ae693443b96fa55324e20de5d91bb8a1fac3fa843218ef623cf471de293a4006025b40a9bc5de9dcc7ef5e7f0e9cc903a68848d725db021", 0x82}, {&(0x7f0000002980)="1664a685c370d4bc5fb9a7607f14785df0533ccf383ed97ca80a61ccfd9c2909bb0ed868df8b0088e0888d5cb193ab76271f40ec15c7a947f7f88448fc8700d9b6edd2d0ee82f785468c76042d0d3daef30553b14a1bdfa7908d590a3141902441e0f7a87f30cc78ff714efa53ccbe4e4e18e3be5f6ffc93a8b0736f49eb1d2636", 0x81}], 0x2, &(0x7f0000002ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xb3, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x9}, {@broadcast, 0xff}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@private=0xa010101, 0x52}]}, @ssrr={0x89, 0x23, 0xfa, [@multicast2, @rand_addr=0x64010102, @remote, @local, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xb3, 0x3, 0x9, [{@broadcast, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x92}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x120}}], 0x7, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) 1.133818477s ago: executing program 1 (id=3728): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\a\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\x00\xbdnC\xec', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 429.234655ms ago: executing program 3 (id=3729): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 417.787985ms ago: executing program 4 (id=3730): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x30, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x23) 411.037405ms ago: executing program 0 (id=3731): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x8}, &(0x7f0000000100)=0x8) 258.010777ms ago: executing program 0 (id=3732): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\v\x00\x00\x00!\x00\x00\x00', @ANYRES32, @ANYBLOB="ed9a9600350e0000007b5eb1defb9424a3b584e534d9c9310e00000040099ced0b72f6f1ceadc6291329ea5a5f", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) write$UHID_INPUT(r2, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) fspick(r0, &(0x7f0000000180)='./file0\x00', 0x1) sendto$inet6(r0, &(0x7f0000000200)="94630fab22e99930f85996f717b60ba3136df8f2809209f9da15e265705d3eeeaec6e83abeeec651dc2118cd35bf77fa261d93232257b6263e1fe010a61d0225d9763d5ebde27dbf86e349d2e8a440395d949e209099a83c97abdc1182334c6ba087a02b9ae55ec1a96129ea1df42431450d03f79469047e084e883c9372d16ee6b83cfc21538a0d5dcbe262392a1a8e5573dfd4d55393af59a2feaca90c9e7567705ad22c07eeec4cb4", 0xaa, 0x204c084, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x4d8, &(0x7f0000000a00)="$eJzs3c9rXNUeAPAzM83Ppq8/3uPR9sFroUL9QTP5gTRRN67URUEsuFGoMZnGmEkmZCa1iQVT3XXhQhQFceFS8B/QjV1ZBHGte+lCKlojqCCO3Htn2skkE0ebZCD384GbOfecO/O9J8P35M65N3MDkFonox+ZEAZCCF+FEA4mq+s3OJk8rN2+MhktmVCtnv8hE28Xrdc3rT9vfwhhNYTQG0J45okQXsxsjFteXpmdKBYLi7X1fGVuIV9eXjkzMzcxXZguzA+PnR0fHxsaHRnftr5ee/Pla+c+far741/euHXjrc8/i3ZroNbW2I/tlHS9KxxuqNsXQnhsJ4J1QK7Wn75O7wj/SPT+/TuEcCrO/4MhF7+bQBpUq9Xq79WeVs2rVWDPysbHwJnsYAghKWezg4PJMfx/Qn+2WCpXHrpYWpqfSo6VD4Wu7MWZYmGo9lnhUOjKROvDcfnu+kjT+mgI8THw27m+eH1wslSc2t2hDmiyvyn/f84l+Q+khI/8kF7yH9JL/kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Qyo9fe5ctFTr//8+dWl5abZ06cxUoTw7OLc0OThZWgyD06WeT9p7vWKptDD8cFi6nK8UypV8eXnlwlxpab5yYWZuYro7FLp2uD9A+w6fuP5NJoSw+khfvES6a21yFfa26mvJdwA0eDVsqAL2olynByCgY0z9QXr5jA9s8hW96/S2ali4p6h/FRbYQdlO7wDQMaePOf8HaWX+H9LL/D+k1/pjfEcDkEadmf8HOsn8P6TXQMP9fzIN9/860HDvrqEQwr9CCF/nunrq9/oC9oLsd5la7p8+eN9Ac2t35td4UqA7hPDK++ffvTxRqSwOR/U/3qmvvJfUd3di94G2xfk7Unv0hxwAUm3t9pXJ+nKn8tDOx/3+8eQihAMN+5C07KvNTfbG5yj71zLrrlXIbNO1C6tXk7OeG/ufqd3vPDnz0b+W2xD/SO0xWo7W5lL3xfdN/3vxoyffjX/zo3bjH2uI//+G+Mfv+bcC6XA9Gn+GNsv/bJzT4U7+rR9/Brbp+uj6+LdZ/Pr4l2sx/p1oM8ZLH7x+s2X8qyEc3zR+PV5vHKs5frRvp9uMf+v5Z//bqq36YfI6m8Wvi0r5ytxCvry8cmZmbmK6MF2YHx47Oz4+NjQ6Mp6P56jz9ZnqjR49+uWNrfrf3yL+Vv2P6h5os/+//e+L505uEf/+U5u//0e2iN8XQniwzfg/jXz7Qqu2KP5Ui/5nm+M3TPBFdaNtxi+/82RPm5sCALugvLwyO1EsFha3o/BH7UvFmpuiQ+htCqGgoLAbhU6PTMBOu5v0nd4TAAAAAAAAAAAAoF27cTlxp/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAX/BkAAP//5F7PBQ==") r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 257.516787ms ago: executing program 4 (id=3733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b00010069703667726500004000028006000f004800000008000100", @ANYRES32, @ANYBLOB="060010004e200000060011004e210000060002000400000014000700ff010000000000000000000000000001080003", @ANYRES32], 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sync() 206.186618ms ago: executing program 2 (id=3734): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) sendmmsg$inet(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000800)="2b12ab38a10a4472c40a1177b276ba854d484e5ddf0bfc1e774234d5de44c895bae2eec3e2f64232db110ad696db7fd1e75f145ad566043d9e186ea260a92703569622e641bda70dfe9e0c747abc38fb07418e77600f114b29f9129c166cc2a3c6d585eb5c269fd11465645b311ece92f555a86ad516d33437d778b4", 0x7c}, {&(0x7f0000000a00)="c95109fdfb7504768c1404449b5a5599", 0x10}, {&(0x7f0000001040)="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", 0x4bd}], 0x3}}], 0x2, 0x4000040) 173.264978ms ago: executing program 2 (id=3735): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 114.256369ms ago: executing program 1 (id=3736): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x743f, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 49.33062ms ago: executing program 2 (id=3737): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 48.40624ms ago: executing program 4 (id=3738): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 2 (id=3739): syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x40000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) lseek(0xffffffffffffffff, 0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r2, 0x7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) kernel console output (not intermixed with test programs): etected [ 145.492435][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.518874][ T7550] loop4: detected capacity change from 0 to 1024 [ 145.527087][ T7550] EXT4-fs: inline encryption not supported [ 145.533254][ T7550] ext4: Unknown parameter 'nouser_xattr' [ 145.668795][ T7559] Illegal XDP return value 54575616 on prog (id 799) dev N/A, expect packet loss! [ 145.674667][ T7561] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.913751][ T7577] loop1: detected capacity change from 0 to 512 [ 145.920872][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 145.920888][ T29] audit: type=1326 audit(1748222600.120:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b4dee969 code=0x7ffc0000 [ 145.950560][ T29] audit: type=1326 audit(1748222600.120:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b4dee969 code=0x7ffc0000 [ 145.951759][ T7577] EXT4-fs: Ignoring removed bh option [ 145.974051][ T29] audit: type=1400 audit(1748222600.150:7318): avc: denied { sys_module } for pid=7572 comm="syz.1.1337" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 145.979467][ T7577] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.000583][ T29] audit: type=1400 audit(1748222600.150:7319): avc: denied { mounton } for pid=7572 comm="syz.1.1337" path="/277/bus" dev="tmpfs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.030034][ T7538] loop3: detected capacity change from 0 to 512 [ 146.036400][ T7580] loop2: detected capacity change from 0 to 256 [ 146.038586][ T29] audit: type=1400 audit(1748222600.200:7320): avc: denied { write } for pid=7535 comm="syz.3.1324" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.064272][ T29] audit: type=1400 audit(1748222600.200:7321): avc: denied { name_connect } for pid=7535 comm="syz.3.1324" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.099995][ T7580] FAT-fs (loop2): Directory bread(block 64) failed [ 146.106592][ T7580] FAT-fs (loop2): Directory bread(block 65) failed [ 146.113173][ T7580] FAT-fs (loop2): Directory bread(block 66) failed [ 146.119779][ T7580] FAT-fs (loop2): Directory bread(block 67) failed [ 146.126400][ T7580] FAT-fs (loop2): Directory bread(block 68) failed [ 146.132976][ T7580] FAT-fs (loop2): Directory bread(block 69) failed [ 146.133380][ T7538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.139500][ T7580] FAT-fs (loop2): Directory bread(block 70) failed [ 146.139520][ T7580] FAT-fs (loop2): Directory bread(block 71) failed [ 146.139544][ T7580] FAT-fs (loop2): Directory bread(block 72) failed [ 146.156154][ T29] audit: type=1326 audit(1748222600.240:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10b4dee969 code=0x7ffc0000 [ 146.161339][ T7580] FAT-fs (loop2): Directory bread(block 73) failed [ 146.172185][ T7577] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 146.191105][ T29] audit: type=1400 audit(1748222600.260:7323): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=1489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.203880][ T7582] hub 9-0:1.0: USB hub found [ 146.207373][ T29] audit: type=1326 audit(1748222600.280:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b4dee969 code=0x7ffc0000 [ 146.233554][ T7582] hub 9-0:1.0: 8 ports detected [ 146.234600][ T29] audit: type=1326 audit(1748222600.280:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b4dee969 code=0x7ffc0000 [ 146.286695][ T7582] loop0: detected capacity change from 0 to 1024 [ 146.292525][ T7577] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.295785][ T7538] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 146.301561][ T7577] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.317736][ T7582] EXT4-fs: inline encryption not supported [ 146.327804][ T7582] ext4: Unknown parameter 'nouser_xattr' [ 146.334018][ T7538] EXT4-fs (loop3): mount failed [ 146.363933][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 146.364306][ T7577] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1337: Failed to acquire dquot type 1 [ 146.384859][ T7577] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1337: Invalid block bitmap block 0 in block_group 0 [ 146.406271][ T7577] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1337: Invalid block bitmap block 0 in block_group 0 [ 146.420141][ T7577] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1337: Invalid block bitmap block 0 in block_group 0 [ 146.435779][ T7577] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1337: Failed to acquire dquot type 1 [ 146.447672][ T7577] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1337: Failed to acquire dquot type 1 [ 146.461143][ T7577] EXT4-fs (loop1): 1 orphan inode deleted [ 146.479259][ T7577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.531812][ T7573] EXT4-fs (loop1): shut down requested (1) [ 146.569821][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.632760][ T7597] hub 9-0:1.0: USB hub found [ 146.684876][ T7597] hub 9-0:1.0: 8 ports detected [ 146.696098][ T7600] loop1: detected capacity change from 0 to 1024 [ 146.718933][ T7595] loop3: detected capacity change from 0 to 8192 [ 146.719210][ T7600] EXT4-fs: inline encryption not supported [ 146.731477][ T7600] ext4: Unknown parameter 'nouser_xattr' [ 146.786524][ T7603] loop2: detected capacity change from 0 to 128 [ 146.856572][ T7607] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 146.864571][ T7607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1347'. [ 146.892329][ T3760] loop3: p1 p2 p3 p4 [ 146.898354][ T3760] loop3: p1 start 51379968 is beyond EOD, truncated [ 146.905122][ T3760] loop3: p2 start 4293394690 is beyond EOD, truncated [ 146.912004][ T3760] loop3: p3 size 100663552 extends beyond EOD, truncated [ 146.927784][ T7610] bio_check_eod: 8 callbacks suppressed [ 146.927801][ T7610] syz.2.1345: attempt to access beyond end of device [ 146.927801][ T7610] loop2: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 146.946922][ T7610] buffer_io_error: 2 callbacks suppressed [ 146.946937][ T7610] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 146.963588][ T7607] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 147.015947][ T7615] loop4: detected capacity change from 0 to 256 [ 147.029689][ T7612] syzkaller0: entered promiscuous mode [ 147.035208][ T7612] syzkaller0: entered allmulticast mode [ 147.139799][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.139799][ T7610] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 147.153262][ T7610] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 147.172368][ T3760] loop3: p4 size 50331648 extends beyond EOD, truncated [ 147.198242][ T7615] FAT-fs (loop4): Directory bread(block 64) failed [ 147.204831][ T7615] FAT-fs (loop4): Directory bread(block 65) failed [ 147.211455][ T7615] FAT-fs (loop4): Directory bread(block 66) failed [ 147.218014][ T7615] FAT-fs (loop4): Directory bread(block 67) failed [ 147.224621][ T7615] FAT-fs (loop4): Directory bread(block 68) failed [ 147.231276][ T7615] FAT-fs (loop4): Directory bread(block 69) failed [ 147.237887][ T7615] FAT-fs (loop4): Directory bread(block 70) failed [ 147.244489][ T7615] FAT-fs (loop4): Directory bread(block 71) failed [ 147.251063][ T7615] FAT-fs (loop4): Directory bread(block 72) failed [ 147.257590][ T7615] FAT-fs (loop4): Directory bread(block 73) failed [ 147.373612][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.373612][ T7610] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 147.387119][ T7610] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 147.397954][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.397954][ T7610] loop2: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 147.410824][ T7595] loop3: p1 p2 p3 p4 [ 147.411448][ T7610] Buffer I/O error on dev loop2, logical block 134, lost async page write [ 147.415421][ T7595] loop3: p1 start 51379968 is beyond EOD, truncated [ 147.425720][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.425720][ T7610] loop2: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 147.430770][ T7595] loop3: p2 start 4293394690 is beyond EOD, truncated [ 147.430792][ T7595] loop3: p3 size 100663552 extends beyond EOD, truncated [ 147.458385][ T7610] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 147.468732][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.468732][ T7610] loop2: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 147.468887][ T7595] loop3: p4 size 50331648 extends beyond EOD, [ 147.482160][ T7610] Buffer I/O error on dev loop2, logical block 136, lost async page write [ 147.484041][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.484041][ T7610] loop2: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 147.488519][ T7595] truncated [ 147.516184][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.516184][ T7610] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 147.529734][ T7610] syz.2.1345: attempt to access beyond end of device [ 147.529734][ T7610] loop2: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 147.709227][ T6750] udevd[6750]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 147.711159][ T3760] udevd[3760]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 147.749282][ T7632] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1357'. [ 147.779486][ T7639] hub 9-0:1.0: USB hub found [ 147.786253][ T7639] hub 9-0:1.0: 8 ports detected [ 147.788168][ T7640] loop4: detected capacity change from 0 to 512 [ 147.801518][ T7641] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1357'. [ 147.807323][ T7625] syzkaller0: entered promiscuous mode [ 147.815941][ T7625] syzkaller0: entered allmulticast mode [ 147.818862][ T7640] EXT4-fs: Ignoring removed bh option [ 147.825360][ T3760] udevd[3760]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 147.826957][ T7640] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.841902][ T7639] loop2: detected capacity change from 0 to 1024 [ 147.850841][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 147.879279][ T7639] EXT4-fs: inline encryption not supported [ 147.885201][ T7639] ext4: Unknown parameter 'nouser_xattr' [ 147.897930][ T7632] 0ªX¹¦D: entered promiscuous mode [ 147.903250][ T7632] 0ªX¹¦D: left allmulticast mode [ 147.908660][ T7640] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 147.913854][ T7641] 1ªX¹¦D: renamed from 30ªX¹¦D [ 147.943328][ T7640] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 147.958446][ T7640] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.971567][ T7640] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1355: Failed to acquire dquot type 1 [ 147.985412][ T7640] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1355: Invalid block bitmap block 0 in block_group 0 [ 147.999583][ T7640] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1355: Invalid block bitmap block 0 in block_group 0 [ 148.014507][ T7640] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1355: Invalid block bitmap block 0 in block_group 0 [ 148.028683][ T7640] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1355: Failed to acquire dquot type 1 [ 148.041774][ T7640] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1355: Failed to acquire dquot type 1 [ 148.060585][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1357'. [ 148.069831][ T7640] EXT4-fs (loop4): 1 orphan inode deleted [ 148.077383][ T7640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.134815][ T7641] 1ªX¹¦D: left promiscuous mode [ 148.139753][ T7641] 1ªX¹¦D: entered allmulticast mode [ 148.149103][ T7641] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 148.202829][ T7630] EXT4-fs (loop4): shut down requested (1) [ 148.301333][ T7652] syzkaller0: entered promiscuous mode [ 148.306870][ T7652] syzkaller0: entered allmulticast mode [ 148.600879][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.659201][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 148.739108][ T7670] loop0: detected capacity change from 0 to 1024 [ 148.747355][ T7670] EXT4-fs: Ignoring removed orlov option [ 148.778967][ T7670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.798375][ T7670] EXT4-fs: Ignoring removed orlov option [ 148.829718][ T7670] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 148.839423][ T7670] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 148.865274][ T7670] EXT4-fs (loop0): can't enable nombcache during remount [ 148.919547][ T7680] loop1: detected capacity change from 0 to 128 [ 148.929844][ T7678] hub 9-0:1.0: USB hub found [ 148.938234][ T7678] hub 9-0:1.0: 8 ports detected [ 148.950812][ T7680] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.973455][ T7678] loop2: detected capacity change from 0 to 1024 [ 148.982196][ T7678] EXT4-fs: inline encryption not supported [ 148.987560][ T7684] syzkaller0: entered promiscuous mode [ 148.988123][ T7678] ext4: Unknown parameter 'nouser_xattr' [ 148.993497][ T7684] syzkaller0: entered allmulticast mode [ 149.006087][ T7680] ext4 filesystem being mounted at /284/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.134999][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.165835][ T7691] loop1: detected capacity change from 0 to 128 [ 149.192860][ T7691] syz.1.1375: attempt to access beyond end of device [ 149.192860][ T7691] loop1: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 149.206381][ T7691] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 149.214980][ T7688] syzkaller0: entered promiscuous mode [ 149.218265][ T7691] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 149.220520][ T7688] syzkaller0: entered allmulticast mode [ 149.229248][ T7691] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 149.272188][ T7691] Buffer I/O error on dev loop1, logical block 134, lost async page write [ 149.670388][ T7713] hub 9-0:1.0: USB hub found [ 149.671368][ T7713] hub 9-0:1.0: 8 ports detected [ 149.781128][ T7713] loop3: detected capacity change from 0 to 1024 [ 149.788680][ T7713] EXT4-fs: inline encryption not supported [ 149.788713][ T7713] ext4: Unknown parameter 'nouser_xattr' [ 150.016197][ T7692] loop4: detected capacity change from 0 to 512 [ 150.070860][ T7721] FAULT_INJECTION: forcing a failure. [ 150.070860][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.070902][ T7721] CPU: 1 UID: 0 PID: 7721 Comm: syz.2.1387 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 150.071075][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.071092][ T7721] Call Trace: [ 150.071099][ T7721] [ 150.071115][ T7721] __dump_stack+0x1d/0x30 [ 150.071142][ T7721] dump_stack_lvl+0xe8/0x140 [ 150.071169][ T7721] dump_stack+0x15/0x1b [ 150.071194][ T7721] should_fail_ex+0x265/0x280 [ 150.071250][ T7721] should_fail+0xb/0x20 [ 150.071328][ T7721] should_fail_usercopy+0x1a/0x20 [ 150.071356][ T7721] _copy_from_user+0x1c/0xb0 [ 150.071385][ T7721] __sys_bpf+0x178/0x790 [ 150.071479][ T7721] __x64_sys_bpf+0x41/0x50 [ 150.071583][ T7721] x64_sys_call+0x2478/0x2fb0 [ 150.071605][ T7721] do_syscall_64+0xd0/0x1a0 [ 150.071643][ T7721] ? clear_bhb_loop+0x40/0x90 [ 150.071664][ T7721] ? clear_bhb_loop+0x40/0x90 [ 150.071710][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.071736][ T7721] RIP: 0033:0x7fb54c30e969 [ 150.071754][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.071776][ T7721] RSP: 002b:00007fb54a977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.071794][ T7721] RAX: ffffffffffffffda RBX: 00007fb54c535fa0 RCX: 00007fb54c30e969 [ 150.071860][ T7721] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 150.071872][ T7721] RBP: 00007fb54a977090 R08: 0000000000000000 R09: 0000000000000000 [ 150.071884][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.071895][ T7721] R13: 0000000000000000 R14: 00007fb54c535fa0 R15: 00007ffc0b1dc2f8 [ 150.071919][ T7721] [ 150.103351][ T7719] netlink: 'syz.3.1386': attribute type 21 has an invalid length. [ 150.103592][ T7719] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1386'. [ 150.103957][ T7719] netlink: 'syz.3.1386': attribute type 4 has an invalid length. [ 150.104050][ T7719] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1386'. [ 150.377583][ T7728] openvswitch: netlink: Message has 6 unknown bytes. [ 150.530920][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.577864][ T7692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.689737][ T7692] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 150.689803][ T7692] EXT4-fs (loop4): mount failed [ 150.726014][ T7739] syzkaller0: entered promiscuous mode [ 150.726037][ T7739] syzkaller0: entered allmulticast mode [ 151.003937][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 151.003992][ T29] audit: type=1400 audit(1748222605.200:7640): avc: denied { create } for pid=7747 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.011489][ T29] audit: type=1400 audit(1748222605.200:7641): avc: denied { setopt } for pid=7747 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.105504][ T7755] loop2: detected capacity change from 0 to 512 [ 151.115212][ T7755] EXT4-fs: Ignoring removed bh option [ 151.115336][ T7755] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.125483][ T7755] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 151.126028][ T7755] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.126168][ T7755] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.126467][ T7755] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 151.126494][ T7755] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 151.126580][ T7755] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1400: Failed to acquire dquot type 1 [ 151.130382][ T7755] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1400: Invalid block bitmap block 0 in block_group 0 [ 151.131254][ T7755] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1400: Invalid block bitmap block 0 in block_group 0 [ 151.133154][ T7755] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1400: Invalid block bitmap block 0 in block_group 0 [ 151.133332][ T7755] Quota error (device loop2): write_blk: dquota write failed [ 151.133352][ T7755] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 151.133374][ T7755] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1400: Failed to acquire dquot type 1 [ 151.133703][ T7755] Quota error (device loop2): write_blk: dquota write failed [ 151.133763][ T7755] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 151.133783][ T7755] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1400: Failed to acquire dquot type 1 [ 151.133962][ T7755] EXT4-fs (loop2): 1 orphan inode deleted [ 151.416482][ T29] audit: type=1400 audit(1748222605.610:7642): avc: denied { setattr } for pid=7757 comm="syz.3.1401" name="tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 151.488038][ T29] audit: type=1400 audit(1748222605.670:7643): avc: denied { create } for pid=7757 comm="syz.3.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.506046][ T7758] pim6reg1: entered promiscuous mode [ 151.506089][ T7758] pim6reg1: entered allmulticast mode [ 151.552379][ T7755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.605664][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 151.737171][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.752910][ T7765] loop0: detected capacity change from 0 to 512 [ 151.761763][ T7764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7764 comm=syz.1.1403 [ 151.779834][ T7765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.799112][ T7765] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 151.799275][ T7765] EXT4-fs (loop0): mount failed [ 151.802035][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 151.916100][ T7778] loop1: detected capacity change from 0 to 512 [ 151.923942][ T7778] EXT4-fs: Ignoring removed bh option [ 151.929571][ T7778] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.991880][ T7778] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 151.992753][ T7778] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 151.992832][ T7778] EXT4-fs (loop1): orphan cleanup on readonly fs [ 151.993364][ T7778] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1406: Failed to acquire dquot type 1 [ 151.993676][ T7778] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1406: Invalid block bitmap block 0 in block_group 0 [ 152.020207][ T7778] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1406: Invalid block bitmap block 0 in block_group 0 [ 152.020802][ T7778] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1406: Invalid block bitmap block 0 in block_group 0 [ 152.020973][ T7778] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1406: Failed to acquire dquot type 1 [ 152.021368][ T7778] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1406: Failed to acquire dquot type 1 [ 152.024548][ T7778] EXT4-fs (loop1): 1 orphan inode deleted [ 152.027995][ T7778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.096446][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.482169][ T7801] loop2: detected capacity change from 0 to 128 [ 152.490747][ T7801] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.490978][ T7801] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.575633][ T7775] loop3: detected capacity change from 0 to 512 [ 152.591911][ T7775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.629354][ T7808] futex_wake_op: wg1 tries to shift op by -1; fix this program [ 152.650531][ T7808] loop1: detected capacity change from 0 to 128 [ 152.655921][ T7810] dummy0: entered allmulticast mode [ 152.656040][ T7810] dummy0: left allmulticast mode [ 152.658846][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.659128][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.665093][ T7808] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.672277][ T7808] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.682931][ T7808] smc: net device bond0 applied user defined pnetid SYZ2 [ 152.727520][ T7782] loop4: detected capacity change from 0 to 512 [ 152.736290][ T7808] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 152.748292][ T7782] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.748780][ T7813] smc: net device bond0 erased user defined pnetid SYZ2 [ 152.757871][ T7775] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 152.765400][ T7813] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 152.780376][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.795734][ T7775] EXT4-fs (loop3): mount failed [ 152.824224][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 152.834112][ T7782] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 152.859503][ T7782] EXT4-fs (loop4): mount failed [ 152.874376][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 153.026208][ T7821] loop4: detected capacity change from 0 to 512 [ 153.032968][ T7821] EXT4-fs: Ignoring removed bh option [ 153.038443][ T7821] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.084775][ T7821] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 153.126853][ T7821] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 153.154808][ T7821] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.163211][ T7821] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1419: Failed to acquire dquot type 1 [ 153.204476][ T7821] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1419: Invalid block bitmap block 0 in block_group 0 [ 153.258005][ T7821] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1419: Invalid block bitmap block 0 in block_group 0 [ 153.274086][ T7821] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1419: Invalid block bitmap block 0 in block_group 0 [ 153.288716][ T7821] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1419: Failed to acquire dquot type 1 [ 153.321612][ T7821] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1419: Failed to acquire dquot type 1 [ 153.336333][ T7821] EXT4-fs (loop4): 1 orphan inode deleted [ 153.346775][ T7816] loop2: detected capacity change from 0 to 512 [ 153.359088][ T7821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.384226][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.384528][ T7816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.439343][ T7816] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 153.455814][ T7831] hub 9-0:1.0: USB hub found [ 153.471596][ T7831] hub 9-0:1.0: 8 ports detected [ 153.481046][ T7816] EXT4-fs (loop2): mount failed [ 153.490710][ T7831] loop4: detected capacity change from 0 to 1024 [ 153.498152][ T7831] EXT4-fs: inline encryption not supported [ 153.504119][ T7831] ext4: Unknown parameter 'nouser_xattr' [ 153.533411][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 153.567749][ T4012] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.625054][ T7843] loop3: detected capacity change from 0 to 512 [ 153.625087][ T7845] loop1: detected capacity change from 0 to 128 [ 153.648538][ T7845] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.680848][ T7845] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.687795][ T7843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.709476][ T7843] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.764664][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.896199][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.969965][ T7863] hub 9-0:1.0: USB hub found [ 153.985959][ T7863] hub 9-0:1.0: 8 ports detected [ 154.035060][ T7866] loop2: detected capacity change from 0 to 1024 [ 154.061919][ T7866] EXT4-fs: inline encryption not supported [ 154.067886][ T7866] ext4: Unknown parameter 'nouser_xattr' [ 154.174337][ T7869] netlink: 'syz.3.1435': attribute type 21 has an invalid length. [ 154.182227][ T7869] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1435'. [ 154.276048][ T7869] netlink: 'syz.3.1435': attribute type 4 has an invalid length. [ 154.283933][ T7869] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1435'. [ 154.525595][ T7850] loop4: detected capacity change from 0 to 512 [ 154.553031][ T7876] loop3: detected capacity change from 0 to 128 [ 154.573612][ T7850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.704665][ T7876] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.717268][ T7850] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 154.717761][ T7876] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.733412][ T7850] EXT4-fs (loop4): mount failed [ 154.825035][ T7883] loop2: detected capacity change from 0 to 256 [ 154.844781][ T7883] FAT-fs (loop2): Directory bread(block 64) failed [ 154.851378][ T7883] FAT-fs (loop2): Directory bread(block 65) failed [ 154.857952][ T7883] FAT-fs (loop2): Directory bread(block 66) failed [ 154.864566][ T7883] FAT-fs (loop2): Directory bread(block 67) failed [ 154.871149][ T7883] FAT-fs (loop2): Directory bread(block 68) failed [ 154.877711][ T7883] FAT-fs (loop2): Directory bread(block 69) failed [ 154.884445][ T7883] FAT-fs (loop2): Directory bread(block 70) failed [ 154.891061][ T7883] FAT-fs (loop2): Directory bread(block 71) failed [ 154.897650][ T7883] FAT-fs (loop2): Directory bread(block 72) failed [ 154.904187][ T7883] FAT-fs (loop2): Directory bread(block 73) failed [ 154.965749][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'. [ 155.072013][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.316944][ T7897] syzkaller0: entered promiscuous mode [ 155.322495][ T7897] syzkaller0: entered allmulticast mode [ 155.424733][ T7903] hub 9-0:1.0: USB hub found [ 155.483043][ T7903] hub 9-0:1.0: 8 ports detected [ 155.493502][ T7904] loop4: detected capacity change from 0 to 1024 [ 155.514762][ T7904] EXT4-fs: inline encryption not supported [ 155.520783][ T7904] ext4: Unknown parameter 'nouser_xattr' [ 155.615555][ T7892] loop1: detected capacity change from 0 to 512 [ 155.625176][ T7914] loop2: detected capacity change from 0 to 128 [ 155.641975][ T7892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.657455][ T7914] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.659874][ T7911] syzkaller0: entered promiscuous mode [ 155.675224][ T7911] syzkaller0: entered allmulticast mode [ 155.696338][ T7914] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.713790][ T7892] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 155.718282][ T7923] loop0: detected capacity change from 0 to 512 [ 155.736132][ T7892] EXT4-fs (loop1): mount failed [ 155.737304][ T7920] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 155.756818][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'. [ 155.779972][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.815318][ T7923] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.988163][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.113723][ T7939] loop1: detected capacity change from 0 to 256 [ 156.664307][ T7939] FAT-fs (loop1): Directory bread(block 64) failed [ 156.671126][ T7939] FAT-fs (loop1): Directory bread(block 65) failed [ 156.677679][ T7939] FAT-fs (loop1): Directory bread(block 66) failed [ 156.684232][ T7939] FAT-fs (loop1): Directory bread(block 67) failed [ 156.690797][ T7939] FAT-fs (loop1): Directory bread(block 68) failed [ 156.697328][ T7939] FAT-fs (loop1): Directory bread(block 69) failed [ 156.703901][ T7939] FAT-fs (loop1): Directory bread(block 70) failed [ 156.710456][ T7939] FAT-fs (loop1): Directory bread(block 71) failed [ 156.717035][ T7939] FAT-fs (loop1): Directory bread(block 72) failed [ 156.723588][ T7939] FAT-fs (loop1): Directory bread(block 73) failed [ 156.790960][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.828209][ T7945] FAULT_INJECTION: forcing a failure. [ 156.828209][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.841552][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.0.1460 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 156.841618][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.841662][ T7945] Call Trace: [ 156.841670][ T7945] [ 156.841679][ T7945] __dump_stack+0x1d/0x30 [ 156.841705][ T7945] dump_stack_lvl+0xe8/0x140 [ 156.841731][ T7945] dump_stack+0x15/0x1b [ 156.841786][ T7945] should_fail_ex+0x265/0x280 [ 156.841878][ T7945] should_fail+0xb/0x20 [ 156.841939][ T7945] should_fail_usercopy+0x1a/0x20 [ 156.841958][ T7945] _copy_to_user+0x20/0xa0 [ 156.841980][ T7945] simple_read_from_buffer+0xb5/0x130 [ 156.842013][ T7945] proc_fail_nth_read+0x100/0x140 [ 156.842111][ T7945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.842211][ T7945] vfs_read+0x19d/0x6f0 [ 156.842280][ T7945] ? __rcu_read_unlock+0x4f/0x70 [ 156.842351][ T7945] ? __fget_files+0x184/0x1c0 [ 156.842387][ T7945] ksys_read+0xda/0x1a0 [ 156.842437][ T7945] __x64_sys_read+0x40/0x50 [ 156.842472][ T7945] x64_sys_call+0x2d77/0x2fb0 [ 156.842521][ T7945] do_syscall_64+0xd0/0x1a0 [ 156.842546][ T7945] ? clear_bhb_loop+0x40/0x90 [ 156.842581][ T7945] ? clear_bhb_loop+0x40/0x90 [ 156.842603][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.842665][ T7945] RIP: 0033:0x7facc395d37c [ 156.842684][ T7945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.842707][ T7945] RSP: 002b:00007facc1fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.842770][ T7945] RAX: ffffffffffffffda RBX: 00007facc3b85fa0 RCX: 00007facc395d37c [ 156.842787][ T7945] RDX: 000000000000000f RSI: 00007facc1fc70a0 RDI: 0000000000000004 [ 156.842799][ T7945] RBP: 00007facc1fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.842859][ T7945] R10: 0000000000000065 R11: 0000000000000246 R12: 0000000000000001 [ 156.842875][ T7945] R13: 0000000000000000 R14: 00007facc3b85fa0 R15: 00007ffc43d4ff28 [ 156.842899][ T7945] [ 157.100108][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 157.100138][ T29] audit: type=1400 audit(1748222611.000:7930): avc: denied { create } for pid=7942 comm="syz.0.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.127509][ T29] audit: type=1400 audit(1748222611.010:7931): avc: denied { write } for pid=7942 comm="syz.0.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.147752][ T29] audit: type=1400 audit(1748222611.010:7932): avc: denied { read } for pid=7942 comm="syz.0.1459" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.201166][ T7941] netlink: 'syz.2.1458': attribute type 21 has an invalid length. [ 157.209435][ T7941] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1458'. [ 157.263966][ T7941] netlink: 'syz.2.1458': attribute type 4 has an invalid length. [ 157.271886][ T7941] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1458'. [ 157.292960][ T7955] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1461'. [ 157.326459][ T7955] 1ªX¹¦D: entered promiscuous mode [ 157.331812][ T7955] 1ªX¹¦D: left allmulticast mode [ 157.395663][ T29] audit: type=1400 audit(1748222611.390:7933): avc: denied { associate } for pid=7947 comm="syz.4.1462" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.416797][ T29] audit: type=1400 audit(1748222611.480:7934): avc: denied { nlmsg_write } for pid=7951 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.437477][ T29] audit: type=1400 audit(1748222611.480:7935): avc: denied { create } for pid=7951 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.458234][ T29] audit: type=1400 audit(1748222611.580:7936): avc: denied { sys_module } for pid=7957 comm="syz.0.1465" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 157.482678][ T7963] loop0: detected capacity change from 0 to 512 [ 157.489333][ T7963] EXT4-fs: Ignoring removed bh option [ 157.494828][ T7963] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.551707][ T7959] syzkaller0: entered promiscuous mode [ 157.557266][ T7959] syzkaller0: entered allmulticast mode [ 157.585866][ T7963] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 157.615986][ T7961] 0ªX¹¦D: renamed from 31ªX¹¦D [ 157.638438][ T7963] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 157.663362][ T7963] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.673006][ T7961] 0ªX¹¦D: left promiscuous mode [ 157.677912][ T7961] 0ªX¹¦D: entered allmulticast mode [ 157.690878][ T7963] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 157.700602][ T7963] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 157.757964][ T7963] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1465: Failed to acquire dquot type 1 [ 157.776740][ T7961] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 157.854301][ T7963] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1465: Invalid block bitmap block 0 in block_group 0 [ 157.906904][ T29] audit: type=1400 audit(1748222612.090:7937): avc: denied { ioctl } for pid=7976 comm="syz.2.1471" path="socket:[19785]" dev="sockfs" ino=19785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.933527][ T7955] __nla_validate_parse: 1 callbacks suppressed [ 157.933603][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 157.937236][ T7963] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1465: Invalid block bitmap block 0 in block_group 0 [ 157.966538][ T7981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7981 comm=syz.4.1470 [ 157.995630][ T7963] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1465: Invalid block bitmap block 0 in block_group 0 [ 158.018970][ T7963] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1465: Failed to acquire dquot type 1 [ 158.036928][ T7963] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1465: Failed to acquire dquot type 1 [ 158.064759][ T7963] EXT4-fs (loop0): 1 orphan inode deleted [ 158.077019][ T7963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.134583][ T7958] EXT4-fs (loop0): shut down requested (1) [ 158.142711][ T7994] batadv_slave_0: entered promiscuous mode [ 158.183737][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.193593][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 158.329169][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1479'. [ 158.340061][ T8018] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6), value rounded to 0 ms [ 158.362667][ T8018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.644048][ T8041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1492'. [ 158.709852][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 158.710015][ T8049] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1495'. [ 158.819464][ T8060] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1501'. [ 158.875762][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 158.890551][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1506'. [ 158.921806][ T8074] syzkaller1: entered promiscuous mode [ 158.927391][ T8074] syzkaller1: entered allmulticast mode [ 158.964649][ T8079] netlink: 'syz.3.1510': attribute type 13 has an invalid length. [ 158.992106][ T8079] lo: entered promiscuous mode [ 158.996921][ T8079] lo: entered allmulticast mode [ 159.010074][ T8079] tunl0: entered promiscuous mode [ 159.015382][ T8079] tunl0: entered allmulticast mode [ 159.027361][ T8079] gre0: entered promiscuous mode [ 159.032639][ T8079] gre0: entered allmulticast mode [ 159.042695][ T8079] 0ªX¹¦D: entered promiscuous mode [ 159.049762][ T8079] 0ªX¹¦D: refused to change device tx_queue_len [ 159.056229][ T8079] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 159.145220][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 159.209677][ T8106] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 159.274002][ T8118] netlink: 'syz.0.1528': attribute type 29 has an invalid length. [ 159.298699][ T8118] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 159.389941][ T8135] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001 [ 159.483249][ T8147] Unsupported ieee802154 address type: 0 [ 160.053293][ T8207] vlan2: entered promiscuous mode [ 160.058456][ T8207] bond0: entered promiscuous mode [ 160.456548][ T8247] tipc: Enabled bearer , priority 10 [ 160.506684][ T8251] dvmrp8: entered allmulticast mode [ 160.759515][ T8289] bridge0: entered promiscuous mode [ 160.766521][ T8289] macvtap1: entered promiscuous mode [ 160.772014][ T8289] macvtap1: entered allmulticast mode [ 160.777465][ T8289] bridge0: entered allmulticast mode [ 160.823757][ T8295] bridge0: left allmulticast mode [ 160.829022][ T8295] bridge0: left promiscuous mode [ 161.570222][ T10] tipc: Node number set to 2343339278 [ 162.137774][ T8513] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.603575][ T8584] 8021q: VLANs not supported on vcan0 [ 163.052262][ T8661] __nla_validate_parse: 9 callbacks suppressed [ 163.052277][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1774'. [ 163.336421][ T8712] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 163.396388][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 163.396405][ T29] audit: type=1400 audit(1748222617.590:8015): avc: denied { getopt } for pid=8718 comm="syz.4.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.546302][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1812'. [ 163.692562][ T8759] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 163.733096][ T29] audit: type=1400 audit(1748222617.930:8016): avc: denied { setopt } for pid=8761 comm="syz.2.1820" lport=48573 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.831487][ T29] audit: type=1400 audit(1748222618.030:8017): avc: denied { name_bind } for pid=8777 comm="syz.4.1829" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 164.000893][ T8799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 164.247001][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1849'. [ 164.415661][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1861'. [ 164.444066][ T8862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.616699][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1875'. [ 164.666924][ T8891] 8021q: VLANs not supported on vcan0 [ 164.764574][ T29] audit: type=1400 audit(1748222618.960:8018): avc: denied { ioctl } for pid=8894 comm="syz.2.1877" path="socket:[22492]" dev="sockfs" ino=22492 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.821360][ T8914] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 164.864970][ T8922] 8021q: VLANs not supported on vcan0 [ 164.908571][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1894'. [ 164.993465][ T8943] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 165.092534][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 165.182980][ T29] audit: type=1400 audit(1748222619.380:8019): avc: denied { ioctl } for pid=8974 comm="syz.1.1914" path="socket:[23627]" dev="sockfs" ino=23627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.228366][ T29] audit: type=1400 audit(1748222619.410:8020): avc: denied { setopt } for pid=8974 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.255610][ T8981] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 165.278074][ T8982] 8021q: VLANs not supported on vcan0 [ 165.365472][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 165.529542][ T9011] 8021q: VLANs not supported on vcan0 [ 165.628557][ T9022] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1934'. [ 165.776074][ T9039] 8021q: VLANs not supported on vcan0 [ 166.197063][ T9082] batadv_slave_0: entered promiscuous mode [ 167.025413][ T9142] netlink: 'syz.3.1988': attribute type 5 has an invalid length. [ 167.288411][ T9178] batadv_slave_0: entered promiscuous mode [ 167.452310][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 167.473757][ T29] audit: type=1400 audit(1748222621.670:8021): avc: denied { create } for pid=9197 comm="syz.0.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 167.593142][ T9219] 8021q: VLANs not supported on vcan0 [ 168.077637][ T9287] __nla_validate_parse: 4 callbacks suppressed [ 168.077656][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2051'. [ 168.101924][ T9289] veth0_to_bond: entered allmulticast mode [ 168.142081][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 168.186092][ T29] audit: type=1400 audit(1748222622.380:8022): avc: denied { create } for pid=9302 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.242160][ T29] audit: type=1400 audit(1748222622.400:8023): avc: denied { bind } for pid=9302 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.294952][ T9309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2062'. [ 168.301602][ T29] audit: type=1400 audit(1748222622.460:8024): avc: denied { write } for pid=9302 comm="syz.0.2058" path="socket:[24849]" dev="sockfs" ino=24849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.482118][ T9325] netlink: 'syz.4.2067': attribute type 5 has an invalid length. [ 168.535863][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 168.612393][ T9335] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 168.716293][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'. [ 168.734069][ T9346] syz_tun: entered promiscuous mode [ 168.739498][ T9346] macvtap2: entered promiscuous mode [ 168.745008][ T9346] macvtap2: entered allmulticast mode [ 168.750668][ T9346] syz_tun: entered allmulticast mode [ 168.771457][ T9346] syz_tun: left allmulticast mode [ 168.776588][ T9346] syz_tun: left promiscuous mode [ 168.861607][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 168.887305][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2084'. [ 169.090876][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2087'. [ 169.099917][ T9368] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 169.181409][ T9376] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 169.233515][ T9382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2094'. [ 169.258304][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 169.374682][ T9398] 8021q: VLANs not supported on vcan0 [ 169.915749][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 169.915767][ T29] audit: type=1400 audit(1748222624.110:8027): avc: denied { create } for pid=9483 comm="syz.2.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.421320][ T9529] batadv_slave_0: entered promiscuous mode [ 170.896740][ T29] audit: type=1400 audit(1748222625.090:8028): avc: denied { connect } for pid=9548 comm="syz.2.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.180380][ T29] audit: type=1400 audit(1748222625.370:8029): avc: denied { create } for pid=9578 comm="syz.4.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.201346][ T29] audit: type=1400 audit(1748222625.380:8030): avc: denied { ioctl } for pid=9578 comm="syz.4.2182" path="socket:[25960]" dev="sockfs" ino=25960 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.311043][ T9592] 8021q: VLANs not supported on vcan0 [ 171.437607][ T29] audit: type=1400 audit(1748222625.630:8031): avc: denied { read } for pid=9595 comm="syz.3.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.549116][ T9619] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 171.723033][ T9645] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 171.731246][ T9647] veth0_to_bond: entered allmulticast mode [ 171.924488][ T29] audit: type=1400 audit(1748222626.120:8032): avc: denied { ioctl } for pid=9672 comm="syz.2.2223" path="socket:[25479]" dev="sockfs" ino=25479 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 171.953702][ T29] audit: type=1400 audit(1748222626.150:8033): avc: denied { write } for pid=9672 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 171.973706][ T29] audit: type=1400 audit(1748222626.150:8034): avc: denied { read } for pid=9672 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 172.024005][ T9680] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 172.354495][ T9715] 8021q: VLANs not supported on vcan0 [ 172.453562][ T9725] veth0_to_bond: entered allmulticast mode [ 172.474309][ T29] audit: type=1400 audit(1748222626.670:8035): avc: denied { getopt } for pid=9726 comm="syz.2.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.504646][ T9729] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 172.575380][ T9739] 8021q: VLANs not supported on vcan0 [ 173.092688][ T9820] __nla_validate_parse: 31 callbacks suppressed [ 173.092708][ T9820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2294'. [ 173.108039][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2294'. [ 173.182420][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2299'. [ 173.431617][ T29] audit: type=1400 audit(1748222627.630:8036): avc: denied { listen } for pid=9863 comm="syz.2.2314" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.551157][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2320'. [ 173.653126][ T9895] batadv_slave_0: entered promiscuous mode [ 174.009048][ T9934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2355'. [ 174.018096][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 174.059444][ T9938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2357'. [ 174.068538][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 174.263067][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 174.652357][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2375'. [ 174.672685][T10001] netlink: 'syz.0.2374': attribute type 11 has an invalid length. [ 174.789616][T10015] netlink: 'syz.0.2381': attribute type 5 has an invalid length. [ 175.129882][T10065] netlink: 'syz.4.2405': attribute type 5 has an invalid length. [ 175.175081][T10073] vlan2: entered promiscuous mode [ 175.180271][T10073] bond0: entered promiscuous mode [ 175.445472][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 175.445496][ T29] audit: type=1400 audit(1748222629.640:8040): avc: denied { bind } for pid=10102 comm="syz.1.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.551726][T10121] netlink: 'syz.4.2434': attribute type 10 has an invalid length. [ 175.559615][T10121] team0: entered promiscuous mode [ 175.571618][T10121] bridge0: port 1(team0) entered blocking state [ 175.578037][T10121] bridge0: port 1(team0) entered disabled state [ 175.584782][T10121] team0: entered allmulticast mode [ 175.838681][T10167] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 176.013212][T10198] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 176.164211][ T29] audit: type=1400 audit(1748222630.340:8041): avc: denied { append } for pid=10219 comm="syz.2.2481" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 176.177566][T10223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.404973][T10259] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 176.647672][ T29] audit: type=1400 audit(1748222630.840:8042): avc: denied { write } for pid=10290 comm="syz.3.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.825864][T10310] vlan2: entered promiscuous mode [ 176.827627][T10311] netlink: 'syz.3.2522': attribute type 10 has an invalid length. [ 176.841962][T10311] macvlan1: entered promiscuous mode [ 176.852068][T10311] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 177.110659][T10343] syzkaller1: entered promiscuous mode [ 177.116201][T10343] syzkaller1: entered allmulticast mode [ 177.387453][T10371] bridge0: entered promiscuous mode [ 177.393342][T10371] macvtap3: entered promiscuous mode [ 177.399036][T10371] macvtap3: entered allmulticast mode [ 177.404596][T10371] bridge0: entered allmulticast mode [ 177.920861][ T29] audit: type=1400 audit(1748222632.120:8043): avc: denied { write } for pid=10422 comm="syz.4.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.947996][T10423] team0: left allmulticast mode [ 177.953227][T10423] bridge0: port 1(team0) entered disabled state [ 178.184010][ T29] audit: type=1400 audit(1748222632.380:8044): avc: denied { read } for pid=10432 comm="syz.1.2578" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.393107][T10461] __nla_validate_parse: 43 callbacks suppressed [ 178.393122][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 178.431956][ T29] audit: type=1400 audit(1748222632.630:8045): avc: denied { mounton } for pid=10466 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 178.454900][T10461] bridge0: entered promiscuous mode [ 178.479887][T10461] macvtap1: entered promiscuous mode [ 178.485503][T10461] macvtap1: entered allmulticast mode [ 178.491075][T10461] bridge0: entered allmulticast mode [ 178.498919][T10468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'. [ 178.507957][T10468] tipc: Enabling of bearer rejected, failed to enable media [ 178.526752][T10468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2593'. [ 178.589772][ T31] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.652265][ T31] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.671177][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 178.686267][T10496] vlan2: entered promiscuous mode [ 178.691505][T10496] bond0: entered promiscuous mode [ 178.711660][ T31] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.783056][ T31] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.793954][T10466] chnl_net:caif_netlink_parms(): no params data found [ 178.858492][ T29] audit: type=1400 audit(1748222633.050:8046): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 178.910003][ T29] audit: type=1400 audit(1748222633.100:8047): avc: denied { search } for pid=3045 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.920767][T10521] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2610'. [ 178.931513][ T29] audit: type=1400 audit(1748222633.100:8048): avc: denied { read } for pid=3045 comm="dhcpcd" name="n28" dev="tmpfs" ino=17775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.940541][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 178.962194][ T29] audit: type=1400 audit(1748222633.100:8049): avc: denied { open } for pid=3045 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=17775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.042283][ T31] bond0 (unregistering): Released all slaves [ 179.050275][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.057416][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.064743][T10466] bridge_slave_0: entered allmulticast mode [ 179.071193][T10466] bridge_slave_0: entered promiscuous mode [ 179.081254][T10525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.090102][ T31] tipc: Left network mode [ 179.090235][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.101814][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.110405][ T31] IPVS: stopping master sync thread 4913 ... [ 179.119193][T10466] bridge_slave_1: entered allmulticast mode [ 179.134617][T10466] bridge_slave_1: entered promiscuous mode [ 179.138094][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 179.184532][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.235631][ T31] hsr_slave_0: left promiscuous mode [ 179.259632][ T31] hsr_slave_1: left promiscuous mode [ 179.274049][ T31] veth1_macvtap: left promiscuous mode [ 179.279787][ T31] veth0_macvtap: left promiscuous mode [ 179.281933][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 179.285661][ T31] veth1_vlan: left promiscuous mode [ 179.294132][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 179.299369][ T31] veth0_vlan: left promiscuous mode [ 179.330974][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 179.506763][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.580064][T10466] team0: Port device team_slave_0 added [ 179.596195][T10466] team0: Port device team_slave_1 added [ 179.613517][T10581] macvtap2: entered promiscuous mode [ 179.619042][T10581] macvtap2: entered allmulticast mode [ 179.697040][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.704131][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.730230][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.751367][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.758540][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.784673][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.797312][T10598] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 179.805776][T10598] tipc: Enabled bearer , priority 10 [ 179.875925][T10466] hsr_slave_0: entered promiscuous mode [ 179.882790][T10466] hsr_slave_1: entered promiscuous mode [ 180.206411][T10663] vlan2: entered promiscuous mode [ 180.224858][T10466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.247202][T10466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.262644][T10466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.277758][T10466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.353495][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.384213][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.412740][ T1818] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.419876][ T1818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.472848][ T1818] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.480008][ T1818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.491093][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 180.491110][ T29] audit: type=1400 audit(1748222634.690:8063): avc: denied { egress } for pid=3389 comm="kworker/1:3" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 180.519784][ T29] audit: type=1400 audit(1748222634.690:8064): avc: denied { sendto } for pid=3389 comm="kworker/1:3" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 180.708174][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.986241][T10466] veth0_vlan: entered promiscuous mode [ 181.003444][T10466] veth1_vlan: entered promiscuous mode [ 181.047853][T10466] veth0_macvtap: entered promiscuous mode [ 181.063937][T10466] veth1_macvtap: entered promiscuous mode [ 181.077558][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.093155][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.107312][T10466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.116273][T10466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.125055][T10466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.133860][T10466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.160237][ T29] audit: type=1400 audit(1748222635.350:8065): avc: denied { mounton } for pid=10466 comm="syz-executor" path="/root/syzkaller.oA94Vc/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 181.197949][ T29] audit: type=1400 audit(1748222635.380:8066): avc: denied { mount } for pid=10466 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.220354][ T29] audit: type=1400 audit(1748222635.380:8067): avc: denied { mount } for pid=10466 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 181.242406][ T29] audit: type=1400 audit(1748222635.380:8068): avc: denied { mounton } for pid=10466 comm="syz-executor" path="/root/syzkaller.oA94Vc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 181.269497][ T29] audit: type=1400 audit(1748222635.380:8069): avc: denied { mounton } for pid=10466 comm="syz-executor" path="/root/syzkaller.oA94Vc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 181.273260][T10800] vlan2: entered promiscuous mode [ 181.297257][ T29] audit: type=1400 audit(1748222635.380:8070): avc: denied { mounton } for pid=10466 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 181.302281][T10800] bond0: entered promiscuous mode [ 181.330810][ T29] audit: type=1400 audit(1748222635.380:8071): avc: denied { mount } for pid=10466 comm="syz-executor" name="/" dev="gadgetfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 181.542674][T10831] netlink: 'syz.3.2690': attribute type 11 has an invalid length. [ 183.002912][T10951] vlan3: entered promiscuous mode [ 183.118335][T10965] netlink: 'syz.4.2743': attribute type 12 has an invalid length. [ 183.126313][T10965] netlink: 'syz.4.2743': attribute type 29 has an invalid length. [ 183.166489][T10972] netlink: 'syz.2.2748': attribute type 11 has an invalid length. [ 183.487769][T11022] __nla_validate_parse: 33 callbacks suppressed [ 183.487789][T11022] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2770'. [ 183.503243][T11022] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 183.660709][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2780'. [ 183.705184][T11052] syzkaller1: entered promiscuous mode [ 183.710858][T11052] syzkaller1: entered allmulticast mode [ 183.849141][T11074] netlink: 'syz.0.2794': attribute type 11 has an invalid length. [ 183.869460][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2792'. [ 183.965672][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2801'. [ 183.984317][T11090] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2801'. [ 184.002144][T11090] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 184.149223][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 184.205540][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.262601][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.286955][T11119] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2811'. [ 184.309570][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2813'. [ 184.322156][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.394254][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.483667][T11144] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2820'. [ 184.541020][T11095] chnl_net:caif_netlink_parms(): no params data found [ 184.552198][T11153] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2823'. [ 184.714665][ T37] dvmrp8 (unregistering): left allmulticast mode [ 184.894408][ T37] bond0 (unregistering): Released all slaves [ 184.907666][T11170] ipvlan2: entered promiscuous mode [ 184.913774][T11170] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 184.929372][ T1818] tipc: Resetting bearer [ 184.946870][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.953997][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.961339][T11095] bridge_slave_0: entered allmulticast mode [ 184.967859][T11095] bridge_slave_0: entered promiscuous mode [ 184.974510][ T37] tipc: Disabling bearer [ 184.979837][ T37] tipc: Disabling bearer [ 184.985197][ T37] tipc: Left network mode [ 184.989674][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.996877][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.004223][T11095] bridge_slave_1: entered allmulticast mode [ 185.010810][T11095] bridge_slave_1: entered promiscuous mode [ 185.017317][ T37] IPVS: stopping master sync thread 5418 ... [ 185.067712][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.087060][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.124128][ T37] hsr_slave_0: left promiscuous mode [ 185.129780][ T37] hsr_slave_1: left promiscuous mode [ 185.148898][ T37] veth1_macvtap: left promiscuous mode [ 185.154655][ T37] veth0_macvtap: left promiscuous mode [ 185.161935][ T37] veth1_vlan: left promiscuous mode [ 185.167409][ T37] veth0_vlan: left promiscuous mode [ 185.271004][T11095] team0: Port device team_slave_0 added [ 185.284447][T11095] team0: Port device team_slave_1 added [ 185.331048][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.338042][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.364160][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.377615][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.384610][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.410640][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.439085][ T29] audit: type=1400 audit(1748222639.620:8072): avc: denied { ioctl } for pid=11212 comm="syz.3.2837" path="socket:[32167]" dev="sockfs" ino=32167 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 185.442928][T11213] netlink: 'syz.3.2837': attribute type 1 has an invalid length. [ 185.506352][T11095] hsr_slave_0: entered promiscuous mode [ 185.513525][T11095] hsr_slave_1: entered promiscuous mode [ 185.519468][T11095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.527386][T11095] Cannot create hsr debugfs directory [ 185.532430][ T29] audit: type=1400 audit(1748222639.710:8073): avc: denied { create } for pid=11212 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 185.553588][ T29] audit: type=1400 audit(1748222639.710:8074): avc: denied { write } for pid=11212 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 186.035314][T11095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.066235][T11095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.096426][T11095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.112385][T11095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.197616][T11095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.223990][T11095] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.243027][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.250176][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.270882][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.277997][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.326813][T11095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.337215][T11095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.492176][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.614244][T11095] veth0_vlan: entered promiscuous mode [ 186.624084][T11095] veth1_vlan: entered promiscuous mode [ 186.642715][T11095] veth0_macvtap: entered promiscuous mode [ 186.652614][T11095] veth1_macvtap: entered promiscuous mode [ 186.687028][T11095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.706139][T11095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.727276][T11095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.736138][T11095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.745074][T11095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.753833][T11095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.120355][T11420] chnl_net:caif_netlink_parms(): no params data found [ 187.134083][ T3444] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.184793][ T3444] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.202126][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.209219][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.216818][T11420] bridge_slave_0: entered allmulticast mode [ 187.223579][T11420] bridge_slave_0: entered promiscuous mode [ 187.231273][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.238330][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.246316][T11420] bridge_slave_1: entered allmulticast mode [ 187.253194][T11420] bridge_slave_1: entered promiscuous mode [ 187.266621][ T3444] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.284554][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.294946][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.315578][T11420] team0: Port device team_slave_0 added [ 187.322429][T11420] team0: Port device team_slave_1 added [ 187.329128][ T3444] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.352704][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.359699][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.385780][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.397195][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.404188][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.430345][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.533945][T11420] hsr_slave_0: entered promiscuous mode [ 187.541172][T11420] hsr_slave_1: entered promiscuous mode [ 187.547932][T11420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.555955][T11420] Cannot create hsr debugfs directory [ 187.637751][ T3444] bridge0 (unregistering): left allmulticast mode [ 187.823809][ T3444] bond0 (unregistering): Released all slaves [ 187.903372][ T3444] tipc: Left network mode [ 187.911657][ T3444] IPVS: stopping master sync thread 5023 ... [ 188.016823][ T3444] hsr_slave_0: left promiscuous mode [ 188.022881][ T3444] hsr_slave_1: left promiscuous mode [ 188.032502][ T3444] veth1_macvtap: left promiscuous mode [ 188.038013][ T3444] veth0_macvtap: left promiscuous mode [ 188.044233][ T3444] veth1_vlan: left promiscuous mode [ 188.049584][ T3444] veth0_vlan: left promiscuous mode [ 188.412988][T11420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.432434][T11420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.448599][T11420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.480482][T11420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.583607][T11565] __nla_validate_parse: 20 callbacks suppressed [ 188.583660][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 188.585919][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.644660][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.654358][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.661474][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.691031][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.698172][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.737888][T11420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.748425][T11420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.767074][T11580] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2931'. [ 188.857100][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.859167][T11591] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2932'. [ 188.955679][T11420] veth0_vlan: entered promiscuous mode [ 188.978994][T11420] veth1_vlan: entered promiscuous mode [ 189.005855][T11420] veth0_macvtap: entered promiscuous mode [ 189.013781][T11420] veth1_macvtap: entered promiscuous mode [ 189.026549][T11420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.045312][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2935'. [ 189.054577][T11420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.066073][T11420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.074921][T11420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.083734][T11420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.092620][T11420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.208101][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 189.224307][T11624] ip6gretap0: entered promiscuous mode [ 189.230026][T11624] macvtap3: entered promiscuous mode [ 189.235443][T11624] macvtap3: entered allmulticast mode [ 189.240927][T11624] ip6gretap0: entered allmulticast mode [ 189.265511][T11626] ip6gretap0: left allmulticast mode [ 189.270957][T11626] ip6gretap0: left promiscuous mode [ 189.289847][T11628] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2938'. [ 189.308082][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2939'. [ 189.349568][T11635] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2941'. [ 189.378692][T11638] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2943'. [ 189.796823][T11646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 190.178375][T11682] nlmon0: entered promiscuous mode [ 190.183645][T11682] nlmon0: entered allmulticast mode [ 190.557247][ T4012] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.596041][ T4012] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.655960][T11706] chnl_net:caif_netlink_parms(): no params data found [ 190.695248][ T4012] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.742489][ T4012] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.791008][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.798135][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.805628][T11706] bridge_slave_0: entered allmulticast mode [ 190.812304][T11706] bridge_slave_0: entered promiscuous mode [ 190.824714][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.831946][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.839306][T11706] bridge_slave_1: entered allmulticast mode [ 190.846443][T11706] bridge_slave_1: entered promiscuous mode [ 190.881329][T11706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.891990][T11706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.972429][T11706] team0: Port device team_slave_0 added [ 190.982829][T11772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11772 comm=syz.1.2994 [ 190.985067][T11706] team0: Port device team_slave_1 added [ 191.232210][ T4012] bond0 (unregistering): left promiscuous mode [ 191.238779][ T4012] bond0 (unregistering): Released all slaves [ 191.247226][ T4012] bond1 (unregistering): Released all slaves [ 191.255856][T11706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.262937][T11706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.288932][T11706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.301637][T11706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.308652][T11706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.334751][T11706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.372617][ T4012] tipc: Disabling bearer [ 191.377869][ T4012] tipc: Left network mode [ 191.386922][ T4012] IPVS: stopping master sync thread 4957 ... [ 191.415553][T11706] hsr_slave_0: entered promiscuous mode [ 191.437703][T11706] hsr_slave_1: entered promiscuous mode [ 191.467801][T11706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.476625][T11706] Cannot create hsr debugfs directory [ 191.498330][ T4012] batadv_slave_1: left promiscuous mode [ 191.517155][ T4012] hsr_slave_0: left promiscuous mode [ 191.522159][T11830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11830 comm=syz.2.3008 [ 191.535022][ T4012] hsr_slave_1: left promiscuous mode [ 191.554563][ T4012] veth1_macvtap: left promiscuous mode [ 191.574535][ T4012] veth0_macvtap: left promiscuous mode [ 191.580353][ T4012] veth1_vlan: left promiscuous mode [ 191.589464][ T4012] veth0_vlan: left promiscuous mode [ 191.674721][ T29] audit: type=1400 audit(1748222645.870:8075): avc: denied { accept } for pid=11846 comm="syz.1.3013" lport=57036 faddr=::ffff:172.30.0.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.207131][T11911] IPv6: syztnl2: Disabled Multicast RS [ 192.222323][T11706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.233332][T11706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.244617][T11706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.262279][T11706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.338769][T11706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.369111][T11706] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.400638][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.407827][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.447017][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.454188][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.606331][T11706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.735544][T11706] veth0_vlan: entered promiscuous mode [ 192.745836][T11706] veth1_vlan: entered promiscuous mode [ 192.763462][T11706] veth0_macvtap: entered promiscuous mode [ 192.771500][T11706] veth1_macvtap: entered promiscuous mode [ 192.796949][T11706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.814896][T11706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.825021][T12001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12001 comm=syz.2.3054 [ 192.835440][T11706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.846367][T11706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.855199][T11706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.863975][T11706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.439598][T12061] syz_tun: entered promiscuous mode [ 193.444971][T12061] macvtap1: entered promiscuous mode [ 193.450665][T12061] macvtap1: entered allmulticast mode [ 193.456054][T12061] syz_tun: entered allmulticast mode [ 193.462947][T12062] syzkaller1: entered promiscuous mode [ 193.468472][T12062] syzkaller1: entered allmulticast mode [ 193.476103][T12061] syz_tun: left allmulticast mode [ 193.481363][T12061] syz_tun: left promiscuous mode [ 193.787431][T12093] __nla_validate_parse: 22 callbacks suppressed [ 193.787451][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 193.835717][T12097] syzkaller1: entered promiscuous mode [ 193.841466][T12097] syzkaller1: entered allmulticast mode [ 194.043559][ T29] audit: type=1400 audit(1748222648.240:8076): avc: denied { accept } for pid=12104 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.386851][T12128] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3107'. [ 194.446158][T12136] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 194.504689][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 194.534695][T12148] IPv6: syztnl2: Disabled Multicast RS [ 194.537131][T12150] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3118'. [ 194.711604][T12172] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3129'. [ 194.779117][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3130'. [ 194.907955][T12199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3142'. [ 195.789481][T12283] syzkaller1: entered promiscuous mode [ 195.795043][T12283] syzkaller1: entered allmulticast mode [ 195.887781][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 196.009532][T12291] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3184'. [ 196.013065][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'. [ 196.031125][T12293] ip6gretap0: entered promiscuous mode [ 196.036741][T12293] macvtap1: entered promiscuous mode [ 196.042286][T12293] macvtap1: entered allmulticast mode [ 196.047699][T12293] ip6gretap0: entered allmulticast mode [ 196.057765][T12293] ip6gretap0: left allmulticast mode [ 196.058926][ T29] audit: type=1400 audit(1748222650.250:8077): avc: denied { write } for pid=12294 comm="syz.1.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.063252][T12293] ip6gretap0: left promiscuous mode [ 196.118902][T12300] IPv6: syztnl2: Disabled Multicast RS [ 196.201408][T12311] syzkaller1: entered promiscuous mode [ 196.206984][T12311] syzkaller1: entered allmulticast mode [ 196.456643][ T29] audit: type=1400 audit(1748222650.650:8078): avc: denied { connect } for pid=12339 comm="syz.4.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.517574][T12350] syzkaller1: entered promiscuous mode [ 196.523120][T12350] syzkaller1: entered allmulticast mode [ 196.820883][T12392] tipc: Cannot configure node identity twice [ 197.001396][T12421] syzkaller1: entered promiscuous mode [ 197.006966][T12421] syzkaller1: entered allmulticast mode [ 197.119374][T12441] !: renamed from dummy0 (while UP) [ 197.127473][ T29] audit: type=1400 audit(1748222651.320:8079): avc: denied { bind } for pid=12442 comm="syz.0.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.147185][T12441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12441 comm=syz.2.3248 [ 197.170758][ T29] audit: type=1400 audit(1748222651.320:8080): avc: denied { name_bind } for pid=12442 comm="syz.0.3249" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 197.191736][ T29] audit: type=1400 audit(1748222651.320:8081): avc: denied { node_bind } for pid=12442 comm="syz.0.3249" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 197.212742][ T29] audit: type=1400 audit(1748222651.320:8082): avc: denied { listen } for pid=12442 comm="syz.0.3249" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.233417][ T29] audit: type=1400 audit(1748222651.320:8083): avc: denied { accept } for pid=12442 comm="syz.0.3249" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.254110][ T29] audit: type=1400 audit(1748222651.320:8084): avc: denied { write } for pid=12442 comm="syz.0.3249" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=54906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.429927][T12465] syzkaller1: entered promiscuous mode [ 197.435468][T12465] syzkaller1: entered allmulticast mode [ 197.706554][T12502] syzkaller1: entered promiscuous mode [ 197.712232][T12502] syzkaller1: entered allmulticast mode [ 197.885310][ T29] audit: type=1400 audit(1748222652.020:8085): avc: denied { read } for pid=12491 comm="syz.1.3270" laddr=127.0.0.1 lport=43004 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 198.270887][T12541] syzkaller1: entered promiscuous mode [ 198.276403][T12541] syzkaller1: entered allmulticast mode [ 199.689798][T12660] __nla_validate_parse: 11 callbacks suppressed [ 199.689814][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 199.835860][T12673] !: renamed from dummy0 (while UP) [ 199.844283][T12673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12673 comm=syz.0.3351 [ 200.366877][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'. [ 200.432455][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'. [ 200.625521][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 200.641758][T12713] ip6gretap0: entered promiscuous mode [ 200.649180][T12713] macvtap1: entered promiscuous mode [ 200.654715][T12713] macvtap1: entered allmulticast mode [ 200.660096][T12713] ip6gretap0: entered allmulticast mode [ 200.674000][T12713] ip6gretap0: left allmulticast mode [ 200.679438][T12713] ip6gretap0: left promiscuous mode [ 200.775945][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3370'. [ 200.957124][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'. [ 200.969212][T12746] ip6gretap0: entered promiscuous mode [ 200.974841][T12746] macvtap2: entered promiscuous mode [ 200.980673][T12746] macvtap2: entered allmulticast mode [ 200.986153][T12746] ip6gretap0: entered allmulticast mode [ 200.994627][T12746] ip6gretap0: left allmulticast mode [ 201.000091][T12746] ip6gretap0: left promiscuous mode [ 201.404479][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'. [ 201.589290][T12764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12764 comm=syz.0.3386 [ 201.611670][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3387'. [ 201.755429][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3392'. [ 201.789541][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 202.188211][T12838] IPv6: syztnl2: Disabled Multicast RS [ 202.347588][T12855] !: renamed from dummy0 (while UP) [ 202.355130][T12855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12855 comm=syz.1.3425 [ 202.924916][T12884] syz_tun: entered promiscuous mode [ 202.948572][T12884] macvtap3: entered promiscuous mode [ 202.954106][T12884] macvtap3: entered allmulticast mode [ 202.959616][T12884] syz_tun: entered allmulticast mode [ 203.483922][T12897] syz_tun: entered promiscuous mode [ 203.515550][T12897] macvtap2: entered promiscuous mode [ 203.521210][T12897] macvtap2: entered allmulticast mode [ 203.526629][T12897] syz_tun: entered allmulticast mode [ 203.564313][T12903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12903 comm=syz.3.3442 [ 203.594002][T12902] loop1: detected capacity change from 0 to 1024 [ 203.627022][T12902] EXT4-fs: Ignoring removed nobh option [ 203.632733][T12902] EXT4-fs: Ignoring removed bh option [ 203.641827][T12898] syz_tun: left allmulticast mode [ 203.646939][T12898] syz_tun: left promiscuous mode [ 203.655366][T12900] !: renamed from dummy0 (while UP) [ 203.680774][T12902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.708286][T12902] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3443: Allocating blocks 481-513 which overlap fs metadata [ 203.724384][T12902] EXT4-fs (loop1): shut down requested (1) [ 203.757682][T11420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.881156][T12933] tipc: Started in network mode [ 203.886171][T12933] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 203.893849][T12933] tipc: Enabled bearer , priority 10 [ 203.927943][T12933] loop1: detected capacity change from 0 to 256 [ 203.953062][T12933] FAT-fs (loop1): codepage cp1255 not found [ 204.055909][T12946] syz_tun: entered promiscuous mode [ 204.061414][T12946] macvtap1: entered promiscuous mode [ 204.066786][T12946] macvtap1: entered allmulticast mode [ 204.072227][T12946] syz_tun: entered allmulticast mode [ 204.618583][ T29] audit: type=1400 audit(1748222658.810:8086): avc: denied { getopt } for pid=12962 comm="syz.4.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 205.020455][ T3389] tipc: Node number set to 15444650 [ 205.811440][ T29] audit: type=1400 audit(1748222660.000:8087): avc: denied { listen } for pid=13018 comm="syz.4.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.831059][ T29] audit: type=1400 audit(1748222660.000:8088): avc: denied { accept } for pid=13018 comm="syz.4.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.893741][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.920435][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.949698][T13040] loop4: detected capacity change from 0 to 2048 [ 206.672077][T13072] __nla_validate_parse: 10 callbacks suppressed [ 206.672096][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3513'. [ 206.882184][T13087] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 206.890838][T13087] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 207.413025][ T52] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.420724][ T52] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.440278][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.917059][T13120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3532'. [ 207.980822][T13139] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.3540' sets config #0 [ 207.990924][T13142] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 207.999474][T13142] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 208.059898][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3543'. [ 208.130963][ T1041] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 208.143810][ T1041] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 208.201140][T13167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13167 comm=syz.3.3547 [ 208.472746][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3554'. [ 208.645612][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 208.770914][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 208.807213][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3567'. [ 208.809724][ T29] audit: type=1400 audit(1748222662.990:8089): avc: denied { mount } for pid=13202 comm="syz.4.3566" name="/" dev="configfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 208.839271][ T29] audit: type=1400 audit(1748222663.010:8090): avc: denied { unmount } for pid=10466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 209.026834][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.034535][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.050282][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.080311][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.135113][ T29] audit: type=1400 audit(1748222663.320:8091): avc: denied { setopt } for pid=13215 comm="syz.4.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 209.182674][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3579'. [ 209.193257][ T23] IPVS: starting estimator thread 0... [ 209.290218][T13232] IPVS: using max 2304 ests per chain, 115200 per kthread [ 209.377488][ T29] audit: type=1400 audit(1748222663.570:8092): avc: denied { connect } for pid=13239 comm="syz.0.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 209.533915][T13254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3589'. [ 209.544229][ T29] audit: type=1400 audit(1748222663.740:8093): avc: denied { relabelfrom } for pid=13251 comm="syz.3.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 209.564190][ T29] audit: type=1400 audit(1748222663.740:8094): avc: denied { relabelto } for pid=13251 comm="syz.3.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 209.586720][ T29] audit: type=1326 audit(1748222663.770:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.636679][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3591'. [ 209.678216][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 209.678233][ T29] audit: type=1326 audit(1748222663.870:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.708173][ T29] audit: type=1326 audit(1748222663.870:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.771157][ T29] audit: type=1326 audit(1748222663.930:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.794735][ T29] audit: type=1326 audit(1748222663.930:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.818260][ T29] audit: type=1326 audit(1748222663.930:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.841817][ T29] audit: type=1326 audit(1748222663.930:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.865284][ T29] audit: type=1326 audit(1748222663.930:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.889117][ T29] audit: type=1326 audit(1748222663.930:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.0.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 209.913110][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.956557][T13289] hub 9-0:1.0: USB hub found [ 209.961480][T13289] hub 9-0:1.0: 8 ports detected [ 209.976389][T13289] loop0: detected capacity change from 0 to 1024 [ 209.983839][T13289] EXT4-fs: inline encryption not supported [ 209.989756][T13289] ext4: Unknown parameter 'nouser_xattr' [ 210.045814][ T29] audit: type=1326 audit(1748222664.240:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13297 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 210.069618][ T29] audit: type=1326 audit(1748222664.240:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13297 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99dd7e969 code=0x7ffc0000 [ 210.103911][T13301] macvtap4: entered promiscuous mode [ 210.109494][T13301] macvtap4: entered allmulticast mode [ 210.137251][T13305] loop4: detected capacity change from 0 to 128 [ 210.146524][T13305] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.159741][T13305] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.215928][T10466] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.305798][T13322] hub 9-0:1.0: USB hub found [ 210.310593][T13322] hub 9-0:1.0: 8 ports detected [ 210.323808][T13322] loop4: detected capacity change from 0 to 1024 [ 210.330702][T13322] EXT4-fs: inline encryption not supported [ 210.336560][T13322] ext4: Unknown parameter 'nouser_xattr' [ 210.621867][T13340] loop1: detected capacity change from 0 to 128 [ 210.640029][T13340] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.652681][T13340] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.704389][T11420] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.945856][T13363] loop3: detected capacity change from 0 to 512 [ 210.952750][T13363] EXT4-fs: Ignoring removed bh option [ 210.958264][T13363] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.971635][T13363] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 210.995884][T13363] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 211.005308][T13363] EXT4-fs (loop3): orphan cleanup on readonly fs [ 211.013800][T13363] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3635: Failed to acquire dquot type 1 [ 211.029142][T13367] loop2: detected capacity change from 0 to 256 [ 211.057961][T13367] FAT-fs (loop2): Directory bread(block 64) failed [ 211.064635][T13367] FAT-fs (loop2): Directory bread(block 65) failed [ 211.071381][T13367] FAT-fs (loop2): Directory bread(block 66) failed [ 211.077907][T13367] FAT-fs (loop2): Directory bread(block 67) failed [ 211.084494][T13367] FAT-fs (loop2): Directory bread(block 68) failed [ 211.091136][T13367] FAT-fs (loop2): Directory bread(block 69) failed [ 211.097700][T13367] FAT-fs (loop2): Directory bread(block 70) failed [ 211.104245][T13367] FAT-fs (loop2): Directory bread(block 71) failed [ 211.110836][T13367] FAT-fs (loop2): Directory bread(block 72) failed [ 211.117448][T13367] FAT-fs (loop2): Directory bread(block 73) failed [ 211.231959][T13363] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3635: Invalid block bitmap block 0 in block_group 0 [ 211.257562][T13369] hub 9-0:1.0: USB hub found [ 211.283472][T13369] hub 9-0:1.0: 8 ports detected [ 211.319626][T13363] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3635: Invalid block bitmap block 0 in block_group 0 [ 211.342345][T13363] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3635: Invalid block bitmap block 0 in block_group 0 [ 211.359722][T13363] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3635: Failed to acquire dquot type 1 [ 211.366386][T13369] loop0: detected capacity change from 0 to 1024 [ 211.373275][T13363] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3635: Failed to acquire dquot type 1 [ 211.383179][T13374] hub 9-0:1.0: USB hub found [ 211.390972][T13363] EXT4-fs (loop3): 1 orphan inode deleted [ 211.397825][T13369] EXT4-fs: inline encryption not supported [ 211.405142][T13369] ext4: Unknown parameter 'nouser_xattr' [ 211.411195][T13374] hub 9-0:1.0: 8 ports detected [ 211.412465][T13363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.447395][T13363] EXT4-fs (loop3): shut down requested (1) [ 211.454846][T13374] loop4: detected capacity change from 0 to 1024 [ 211.457481][T13376] loop0: detected capacity change from 0 to 128 [ 211.466816][T13374] EXT4-fs: inline encryption not supported [ 211.473398][T13374] ext4: Unknown parameter 'nouser_xattr' [ 211.499154][T13376] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.511627][T13376] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.517449][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.603865][T11706] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.695563][T13387] syzkaller0: entered promiscuous mode [ 211.701132][T13387] syzkaller0: entered allmulticast mode [ 211.883908][T13418] __nla_validate_parse: 9 callbacks suppressed [ 211.883923][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3653'. [ 211.923267][T13420] hub 9-0:1.0: USB hub found [ 211.931346][T13420] hub 9-0:1.0: 8 ports detected [ 211.951457][T13420] loop2: detected capacity change from 0 to 1024 [ 211.960232][T13420] EXT4-fs: inline encryption not supported [ 211.966111][T13420] ext4: Unknown parameter 'nouser_xattr' [ 212.009060][T13422] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3658'. [ 212.052598][T13400] loop1: detected capacity change from 0 to 512 [ 212.072403][T13400] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.091946][T13400] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 212.108448][T13400] EXT4-fs (loop1): mount failed [ 212.142415][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3650'. [ 212.671377][T13441] loop3: detected capacity change from 0 to 512 [ 212.681259][T13441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.703048][T13441] EXT4-fs (loop3): 1 truncate cleaned up [ 212.716639][T13441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.716762][T13447] loop0: detected capacity change from 0 to 128 [ 212.773375][T13447] bio_check_eod: 8 callbacks suppressed [ 212.773392][T13447] syz.0.3666: attempt to access beyond end of device [ 212.773392][T13447] loop0: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 212.783280][T13451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3669'. [ 212.792402][T13447] buffer_io_error: 2 callbacks suppressed [ 212.792419][T13447] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 212.804148][T13452] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 212.807249][T13447] syz.0.3666: attempt to access beyond end of device [ 212.807249][T13447] loop0: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 212.839359][T13447] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 212.847974][T13447] syz.0.3666: attempt to access beyond end of device [ 212.847974][T13447] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 212.861476][T13447] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 212.870071][T13447] syz.0.3666: attempt to access beyond end of device [ 212.870071][T13447] loop0: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 212.870283][ C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 212.870299][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.883482][T13447] Buffer I/O error on dev loop0, logical block 134, lost async page write [ 212.912170][T13447] syz.0.3666: attempt to access beyond end of device [ 212.912170][T13447] loop0: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 212.925703][T13447] Buffer I/O error on dev loop0, logical block 135, lost async page write [ 212.971844][T13447] syz.0.3666: attempt to access beyond end of device [ 212.971844][T13447] loop0: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 212.985367][T13447] Buffer I/O error on dev loop0, logical block 136, lost async page write [ 212.987909][ T51] kworker/u8:3: attempt to access beyond end of device [ 212.987909][ T51] loop0: rw=1, sector=137, nr_sectors = 64 limit=128 [ 213.011756][ T51] kworker/u8:3: attempt to access beyond end of device [ 213.011756][ T51] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 213.013855][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.025396][T13447] syz.0.3666: attempt to access beyond end of device [ 213.025396][T13447] loop0: rw=2049, sector=233, nr_sectors = 1 limit=128 [ 213.056324][T13455] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 213.057920][ T51] kworker/u8:3: attempt to access beyond end of device [ 213.057920][ T51] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 213.069678][T13455] loop2: detected capacity change from 0 to 512 [ 213.085032][T13455] EXT4-fs: Ignoring removed bh option [ 213.090589][T13455] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.111656][T13455] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 213.126058][T13455] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 213.145265][T13455] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.160346][T13461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3670'. [ 213.170089][T13455] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3671: Failed to acquire dquot type 1 [ 213.197224][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 213.207740][T13455] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3671: Invalid block bitmap block 0 in block_group 0 [ 213.228816][T13469] bridge0: entered promiscuous mode [ 213.234392][T13455] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3671: Invalid block bitmap block 0 in block_group 0 [ 213.245955][T13469] macvtap2: entered promiscuous mode [ 213.250762][T13455] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3671: Invalid block bitmap block 0 in block_group 0 [ 213.253240][T13469] macvtap2: entered allmulticast mode [ 213.271919][T13469] bridge0: entered allmulticast mode [ 213.275798][T13455] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3671: Failed to acquire dquot type 1 [ 213.290598][T13455] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3671: Failed to acquire dquot type 1 [ 213.303579][T13455] EXT4-fs (loop2): 1 orphan inode deleted [ 213.317760][T13455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.333188][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3677'. [ 213.344887][T13455] EXT4-fs (loop2): shut down requested (1) [ 213.370104][T11095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.450785][T13489] hub 9-0:1.0: USB hub found [ 213.459961][T13489] hub 9-0:1.0: 8 ports detected [ 213.482006][T13489] loop4: detected capacity change from 0 to 1024 [ 213.491100][T13489] EXT4-fs: inline encryption not supported [ 213.497009][T13489] ext4: Unknown parameter 'nouser_xattr' [ 213.602076][T13500] !: renamed from dummy0 (while UP) [ 213.625279][T13500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13500 comm=syz.4.3686 [ 213.687138][T13486] loop2: detected capacity change from 0 to 512 [ 213.697526][T13486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.712552][T13486] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 213.727323][T13486] EXT4-fs (loop2): mount failed [ 213.736081][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3681'. [ 213.769404][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3688'. [ 213.849275][T13514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3692'. [ 213.868339][T13516] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 213.913235][T13518] loop2: detected capacity change from 0 to 1024 [ 213.923443][T13518] EXT4-fs: Ignoring removed orlov option [ 213.953063][T13518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.971459][T13518] EXT4-fs: Ignoring removed orlov option [ 213.978186][T13518] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 213.987783][T13518] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 213.996211][T13518] EXT4-fs (loop2): can't enable nombcache during remount [ 214.255012][T11095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.428785][T13560] loop3: detected capacity change from 0 to 512 [ 214.435447][T13560] EXT4-fs: Ignoring removed bh option [ 214.435514][T13560] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.442623][T13560] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 214.460112][T13560] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 214.460278][T13560] EXT4-fs (loop3): orphan cleanup on readonly fs [ 214.461798][T13560] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3709: Failed to acquire dquot type 1 [ 214.486175][T13560] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3709: Invalid block bitmap block 0 in block_group 0 [ 214.486436][T13560] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3709: Invalid block bitmap block 0 in block_group 0 [ 214.486616][T13560] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3709: Invalid block bitmap block 0 in block_group 0 [ 214.486806][T13560] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3709: Failed to acquire dquot type 1 [ 214.487150][T13560] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3709: Failed to acquire dquot type 1 [ 214.528926][T13537] loop1: detected capacity change from 0 to 512 [ 214.540212][T13560] EXT4-fs (loop3): 1 orphan inode deleted [ 214.562563][T13560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.568373][T13560] EXT4-fs (loop3): shut down requested (1) [ 214.599340][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.609537][T13537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.641143][T13537] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 214.656395][T13537] EXT4-fs (loop1): mount failed [ 214.690417][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.780860][T13572] bond0: (slave macvlan1): Releasing backup interface [ 214.820266][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 214.835291][T13576] loop3: detected capacity change from 0 to 128 [ 214.859705][T13576] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.872444][T13576] ext4 filesystem being mounted at /573/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.890265][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 214.890279][ T29] audit: type=1326 audit(1748222669.080:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 214.920052][ T29] audit: type=1326 audit(1748222669.080:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 214.943642][ T29] audit: type=1326 audit(1748222669.080:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 214.967211][ T29] audit: type=1326 audit(1748222669.080:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 214.990806][ T29] audit: type=1326 audit(1748222669.080:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 215.014438][ T29] audit: type=1326 audit(1748222669.080:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 215.038056][ T29] audit: type=1326 audit(1748222669.080:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 215.061650][ T29] audit: type=1326 audit(1748222669.080:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 215.085262][ T29] audit: type=1326 audit(1748222669.080:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 215.108797][ T29] audit: type=1326 audit(1748222669.080:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1888e969 code=0x7ffc0000 [ 215.140094][T13593] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 215.149413][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.492351][T13433] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.500183][T13433] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.658715][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.953464][T13619] loop1: detected capacity change from 0 to 256 [ 216.265994][T13619] FAT-fs (loop1): Directory bread(block 64) failed [ 216.272622][T13619] FAT-fs (loop1): Directory bread(block 65) failed [ 216.279168][T13619] FAT-fs (loop1): Directory bread(block 66) failed [ 216.281140][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.285736][T13619] FAT-fs (loop1): Directory bread(block 67) failed [ 216.299703][T13619] FAT-fs (loop1): Directory bread(block 68) failed [ 216.306287][T13619] FAT-fs (loop1): Directory bread(block 69) failed [ 216.312865][T13619] FAT-fs (loop1): Directory bread(block 70) failed [ 216.319532][T13619] FAT-fs (loop1): Directory bread(block 71) failed [ 216.326182][T13619] FAT-fs (loop1): Directory bread(block 72) failed [ 216.332766][T13619] FAT-fs (loop1): Directory bread(block 73) failed [ 216.380635][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.395685][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.581071][ T3760] ================================================================== [ 216.581118][ T3760] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 216.581195][ T3760] [ 216.581202][ T3760] write to 0xffff8881047c5e04 of 4 bytes by task 6750 on cpu 1: [ 216.581224][ T3760] shmem_unlink+0x13c/0x170 [ 216.581260][ T3760] vfs_unlink+0x269/0x420 [ 216.581283][ T3760] do_unlinkat+0x28e/0x4c0 [ 216.581305][ T3760] __x64_sys_unlink+0x2e/0x40 [ 216.581335][ T3760] x64_sys_call+0x22a6/0x2fb0 [ 216.581361][ T3760] do_syscall_64+0xd0/0x1a0 [ 216.581391][ T3760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.581418][ T3760] [ 216.581425][ T3760] read to 0xffff8881047c5e04 of 4 bytes by task 3760 on cpu 0: [ 216.581445][ T3760] fill_mg_cmtime+0x5b/0x260 [ 216.581484][ T3760] generic_fillattr+0x24a/0x340 [ 216.581519][ T3760] shmem_getattr+0x181/0x200 [ 216.581557][ T3760] vfs_getattr_nosec+0x143/0x1e0 [ 216.581592][ T3760] vfs_statx+0x11a/0x380 [ 216.581621][ T3760] vfs_fstatat+0xe1/0x160 [ 216.581652][ T3760] __se_sys_newfstatat+0x55/0x260 [ 216.581676][ T3760] __x64_sys_newfstatat+0x55/0x70 [ 216.581698][ T3760] x64_sys_call+0x2c22/0x2fb0 [ 216.581726][ T3760] do_syscall_64+0xd0/0x1a0 [ 216.581753][ T3760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.581779][ T3760] [ 216.581783][ T3760] value changed: 0x2a54be57 -> 0x2ec1ba33 [ 216.581796][ T3760] [ 216.581801][ T3760] Reported by Kernel Concurrency Sanitizer on: [ 216.581828][ T3760] CPU: 0 UID: 0 PID: 3760 Comm: udevd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 216.581864][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.581880][ T3760] ================================================================== [ 216.886458][T13654] loop1: detected capacity change from 0 to 256 [ 216.977436][T13654] FAT-fs (loop1): Directory bread(block 64) failed [ 216.977546][T13654] FAT-fs (loop1): Directory bread(block 65) failed [ 216.977579][T13654] FAT-fs (loop1): Directory bread(block 66) failed [ 216.977596][T13654] FAT-fs (loop1): Directory bread(block 67) failed [ 216.977632][T13654] FAT-fs (loop1): Directory bread(block 68) failed [ 216.977697][T13654] FAT-fs (loop1): Directory bread(block 69) failed [ 216.977771][T13654] FAT-fs (loop1): Directory bread(block 70) failed [ 216.977799][T13654] FAT-fs (loop1): Directory bread(block 71) failed [ 216.977821][T13654] FAT-fs (loop1): Directory bread(block 72) failed [ 216.977837][T13654] FAT-fs (loop1): Directory bread(block 73) failed [ 217.099237][T13653] loop0: detected capacity change from 0 to 512 [ 217.105151][T13653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.159048][T13653] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 217.159220][T13653] EXT4-fs (loop0): mount failed [ 217.318954][T13628] __nla_validate_parse: 7 callbacks suppressed [ 217.318971][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3732'. [ 219.180239][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 219.330243][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.090257][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.010243][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!