last executing test programs: 12.761957659s ago: executing program 2 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = io_uring_setup(0x9c4, &(0x7f0000000000)) close(r3) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r4 = socket(0x1, 0x5, 0x0) r5 = dup3(r2, r4, 0x0) accept$inet(r5, 0x0, 0x0) 11.746389067s ago: executing program 2 (id=154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 11.652263098s ago: executing program 2 (id=155): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11.63627534s ago: executing program 2 (id=156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close(0xffffffffffffffff) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 11.591188225s ago: executing program 2 (id=158): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(r0, 0x4, 0x6100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 10.322272932s ago: executing program 2 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@window, @sack_perm, @sack_perm, @mss, @mss, @timestamp, @window, @mss, @mss, @mss, @mss, @sack_perm, @sack_perm, @sack_perm, @mss, @mss], 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x802, 0x0, 0x6) 10.304778194s ago: executing program 32 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@window, @sack_perm, @sack_perm, @mss, @mss, @timestamp, @window, @mss, @mss, @mss, @mss, @sack_perm, @sack_perm, @sack_perm, @mss, @mss], 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x802, 0x0, 0x6) 6.603684294s ago: executing program 0 (id=248): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x2ff8) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_open_procfs(0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$TIOCGPTPEER(r0, 0x5441, 0xdc1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x0, 0x0, 0x3}) 6.523518023s ago: executing program 0 (id=249): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "5ef40e7ab852acb6", "582f7cccfda6a677c372675d88becd932053048ac5a438b0e48fdb55bdc83053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 5.924596702s ago: executing program 0 (id=262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000efff2800128008000100687372001c000280050007000100000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r6], 0x48}}, 0x0) 5.757851902s ago: executing program 0 (id=268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfd14) 5.08479668s ago: executing program 0 (id=278): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x6, {0x0, 0xa}, {0x3}, @const={0x0, {0x0, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 4.726475811s ago: executing program 0 (id=280): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r1 = io_uring_setup(0x35c, &(0x7f0000000100)={0x0, 0xd415, 0x8, 0xfffffffe, 0x3dc}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x2c) close_range(r1, 0xffffffffffffffff, 0x0) 4.726218501s ago: executing program 33 (id=280): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = io_uring_setup(0x35c, &(0x7f0000000100)={0x0, 0xd415, 0x8, 0xfffffffe, 0x3dc}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x2c) close_range(r1, 0xffffffffffffffff, 0x0) 4.48218528s ago: executing program 3 (id=288): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') fchdir(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 4.427118026s ago: executing program 3 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 4.095091935s ago: executing program 3 (id=296): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, 0x0, 0x0) connect$tipc(r1, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 3.814601327s ago: executing program 3 (id=302): add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.575433845s ago: executing program 3 (id=303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) 3.150475914s ago: executing program 3 (id=310): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x40) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x11) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) 3.10528862s ago: executing program 34 (id=310): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x40) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x11) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) 2.086388138s ago: executing program 1 (id=324): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0xc770, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.71848229s ago: executing program 5 (id=329): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) 1.415662725s ago: executing program 1 (id=331): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = memfd_secret(0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffcc8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) 1.142275707s ago: executing program 1 (id=332): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41104, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 991.682455ms ago: executing program 4 (id=333): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 918.929313ms ago: executing program 5 (id=334): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x21, @time={0x0, 0x4}, 0x10, {0xd}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40a85321, &(0x7f0000000540)={{0x0, 0xb2}, {}, 0x1, 0x2, 0x6}) tkill(r1, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 830.392424ms ago: executing program 4 (id=335): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xb7b0}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 830.117223ms ago: executing program 6 (id=281): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 759.222511ms ago: executing program 4 (id=336): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0xb, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r0, 0x405) 710.121288ms ago: executing program 5 (id=337): r0 = syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 634.389007ms ago: executing program 6 (id=338): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x1) brk(0x20001000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000000000004}, 0x18) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) 633.906766ms ago: executing program 4 (id=339): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040)=0x2, &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001880)={&(0x7f00000015c0)='ext4_sync_file_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x4000) 622.900378ms ago: executing program 6 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x5522, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x5522, 0x0) 611.805549ms ago: executing program 5 (id=341): prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="0fadcac15444000000100009060000000000000096f5cc6de6dd98e7295cdafbe23675c20f9237293c2e0b57b33f78e2b95d7639483d7f1a1a3466decdbdd80f5ff3f4e732a578f63f0bcc66a89b8c5dd2c0ca51635b43be26", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c0012800900010062", @ANYRES8=r0], 0x44}}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)='R', 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 439.957889ms ago: executing program 5 (id=342): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x9, 0x0, 0x67b}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) 257.93332ms ago: executing program 6 (id=343): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x32220, 0x0) read$watch_queue(r2, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) 165.421181ms ago: executing program 5 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x2, 0xff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) acct(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 114.571957ms ago: executing program 4 (id=345): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000700)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r2, 0x0, r0}, 0x10) 114.132737ms ago: executing program 1 (id=346): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, 0x0, 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x2, 0x1}, 0x6) 105.857798ms ago: executing program 1 (id=347): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) accept(r0, 0x0, 0x0) 48.024284ms ago: executing program 6 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r2, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close(r2) 2.264579ms ago: executing program 4 (id=349): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 0s ago: executing program 1 (id=350): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 20.590278][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 20.590297][ T29] audit: type=1400 audit(1730227266.502:76): avc: denied { transition } for pid=3195 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.599357][ T29] audit: type=1400 audit(1730227266.502:77): avc: denied { noatsecure } for pid=3195 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.604878][ T29] audit: type=1400 audit(1730227266.502:78): avc: denied { write } for pid=3195 comm="sh" path="pipe:[1544]" dev="pipefs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 20.619476][ T29] audit: type=1400 audit(1730227266.502:79): avc: denied { rlimitinh } for pid=3195 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.642697][ T29] audit: type=1400 audit(1730227266.502:80): avc: denied { siginh } for pid=3195 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.151851][ T29] audit: type=1400 audit(1730227268.062:81): avc: denied { read } for pid=2999 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 29.002742][ T29] audit: type=1400 audit(1730227274.912:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.003983][ T3304] cgroup: Unknown subsys name 'net' [ 29.028383][ T29] audit: type=1400 audit(1730227274.912:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.057663][ T29] audit: type=1400 audit(1730227274.942:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.218692][ T3304] cgroup: Unknown subsys name 'cpuset' [ 29.225037][ T3304] cgroup: Unknown subsys name 'rlimit' [ 29.372295][ T29] audit: type=1400 audit(1730227275.282:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.395684][ T29] audit: type=1400 audit(1730227275.282:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.416278][ T29] audit: type=1400 audit(1730227275.282:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.436727][ T29] audit: type=1400 audit(1730227275.282:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.457237][ T29] audit: type=1400 audit(1730227275.292:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.466308][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.482132][ T29] audit: type=1400 audit(1730227275.292:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.515347][ T29] audit: type=1400 audit(1730227275.412:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.574868][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.718542][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 30.774156][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.822362][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.839808][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.847822][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.856638][ T3318] bridge_slave_0: entered allmulticast mode [ 30.864602][ T3318] bridge_slave_0: entered promiscuous mode [ 30.873030][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.881844][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.889103][ T3318] bridge_slave_1: entered allmulticast mode [ 30.896089][ T3318] bridge_slave_1: entered promiscuous mode [ 30.939575][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.948685][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 30.965257][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.974961][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.983835][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.991548][ T3314] bridge_slave_0: entered allmulticast mode [ 30.998944][ T3314] bridge_slave_0: entered promiscuous mode [ 31.014608][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.029635][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.037585][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.045148][ T3314] bridge_slave_1: entered allmulticast mode [ 31.051813][ T3314] bridge_slave_1: entered promiscuous mode [ 31.098579][ T3318] team0: Port device team_slave_0 added [ 31.107612][ T3318] team0: Port device team_slave_1 added [ 31.114774][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.127704][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.135165][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.142387][ T3317] bridge_slave_0: entered allmulticast mode [ 31.148883][ T3317] bridge_slave_0: entered promiscuous mode [ 31.157214][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.164359][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.171576][ T3317] bridge_slave_1: entered allmulticast mode [ 31.178219][ T3317] bridge_slave_1: entered promiscuous mode [ 31.190118][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.230302][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.238240][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.270580][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.284649][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.292201][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.323670][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.354862][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.370816][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.382391][ T3314] team0: Port device team_slave_0 added [ 31.390367][ T3314] team0: Port device team_slave_1 added [ 31.400710][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.407975][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.415644][ T3315] bridge_slave_0: entered allmulticast mode [ 31.422721][ T3315] bridge_slave_0: entered promiscuous mode [ 31.440297][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.448809][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.456119][ T3321] bridge_slave_0: entered allmulticast mode [ 31.462828][ T3321] bridge_slave_0: entered promiscuous mode [ 31.469584][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.476654][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.483929][ T3315] bridge_slave_1: entered allmulticast mode [ 31.490275][ T3315] bridge_slave_1: entered promiscuous mode [ 31.502301][ T3317] team0: Port device team_slave_0 added [ 31.513287][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.521491][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.529491][ T3321] bridge_slave_1: entered allmulticast mode [ 31.536247][ T3321] bridge_slave_1: entered promiscuous mode [ 31.553213][ T3317] team0: Port device team_slave_1 added [ 31.564980][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.572266][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.600738][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.622639][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.634099][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.653290][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.660757][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.691867][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.708217][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.726189][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.750288][ T3318] hsr_slave_0: entered promiscuous mode [ 31.757011][ T3318] hsr_slave_1: entered promiscuous mode [ 31.795393][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.803830][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.831496][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.854576][ T3321] team0: Port device team_slave_0 added [ 31.861094][ T3315] team0: Port device team_slave_0 added [ 31.867772][ T3321] team0: Port device team_slave_1 added [ 31.873989][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.881696][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.908216][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.921758][ T3314] hsr_slave_0: entered promiscuous mode [ 31.928547][ T3314] hsr_slave_1: entered promiscuous mode [ 31.934363][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.941986][ T3314] Cannot create hsr debugfs directory [ 31.955947][ T3315] team0: Port device team_slave_1 added [ 31.981681][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.989026][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.015226][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.033738][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.041119][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.069084][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.086167][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.093218][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.120040][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.135564][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.142662][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.168800][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.189031][ T3317] hsr_slave_0: entered promiscuous mode [ 32.195135][ T3317] hsr_slave_1: entered promiscuous mode [ 32.201336][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.208963][ T3317] Cannot create hsr debugfs directory [ 32.266968][ T3315] hsr_slave_0: entered promiscuous mode [ 32.273299][ T3315] hsr_slave_1: entered promiscuous mode [ 32.279467][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.287292][ T3315] Cannot create hsr debugfs directory [ 32.295469][ T3321] hsr_slave_0: entered promiscuous mode [ 32.301734][ T3321] hsr_slave_1: entered promiscuous mode [ 32.308243][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.315934][ T3321] Cannot create hsr debugfs directory [ 32.447158][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.471325][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.482923][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.504969][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.536438][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.546972][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.558141][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.572098][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.596914][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.610085][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.622452][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.634325][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.669483][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.679827][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.689744][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.700141][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.739957][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.757509][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.769854][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.780601][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.794536][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.823290][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.850235][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.857523][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.871847][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.879007][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.907967][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.919592][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.932521][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.953743][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.974752][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.984490][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.997173][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.005018][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.035141][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.043649][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.054944][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.062811][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.073396][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.082433][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.091981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.099469][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.109431][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.118750][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.161429][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.215901][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.239374][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.247995][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.264901][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.274913][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.308458][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.331708][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.361058][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.379601][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.509618][ T3318] veth0_vlan: entered promiscuous mode [ 33.539309][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.552380][ T3318] veth1_vlan: entered promiscuous mode [ 33.566356][ T3317] veth0_vlan: entered promiscuous mode [ 33.593441][ T3314] veth0_vlan: entered promiscuous mode [ 33.605437][ T3317] veth1_vlan: entered promiscuous mode [ 33.613487][ T3314] veth1_vlan: entered promiscuous mode [ 33.659146][ T3318] veth0_macvtap: entered promiscuous mode [ 33.667480][ T3317] veth0_macvtap: entered promiscuous mode [ 33.692598][ T3318] veth1_macvtap: entered promiscuous mode [ 33.709452][ T3317] veth1_macvtap: entered promiscuous mode [ 33.720559][ T3314] veth0_macvtap: entered promiscuous mode [ 33.733501][ T3314] veth1_macvtap: entered promiscuous mode [ 33.746001][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.766893][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.776800][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.788749][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.800875][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.818368][ T3321] veth0_vlan: entered promiscuous mode [ 33.825391][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.835012][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.844141][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853234][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.866105][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.878806][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.893096][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.914152][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.925207][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.938919][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.948241][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.960275][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.973981][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.984969][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.997487][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.009545][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.020800][ T3315] veth0_vlan: entered promiscuous mode [ 34.029338][ T3321] veth1_vlan: entered promiscuous mode [ 34.045179][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.057234][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.067841][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.078582][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.089771][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.105374][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.106015][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 34.106031][ T29] audit: type=1400 audit(1730227280.012:110): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.HUIYCr/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.114389][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.146504][ T29] audit: type=1400 audit(1730227280.042:111): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.155069][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.155166][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.178081][ T29] audit: type=1400 audit(1730227280.042:112): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.HUIYCr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.221450][ T29] audit: type=1400 audit(1730227280.042:113): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.243339][ T29] audit: type=1400 audit(1730227280.042:114): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.HUIYCr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.270960][ T29] audit: type=1400 audit(1730227280.042:115): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.HUIYCr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.299663][ T29] audit: type=1400 audit(1730227280.042:116): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.324780][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.343851][ T29] audit: type=1400 audit(1730227280.092:117): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.380872][ T3321] veth0_macvtap: entered promiscuous mode [ 34.391032][ T3321] veth1_macvtap: entered promiscuous mode [ 34.402938][ T29] audit: type=1400 audit(1730227280.312:118): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.408223][ T3315] veth1_vlan: entered promiscuous mode [ 34.446754][ T3315] veth0_macvtap: entered promiscuous mode [ 34.456073][ T29] audit: type=1400 audit(1730227280.342:119): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.489791][ T3315] veth1_macvtap: entered promiscuous mode [ 34.502051][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.513035][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.524958][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.537292][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.549276][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.561537][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.584042][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.605758][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.622448][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.633591][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.647391][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.659873][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.672290][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.683657][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.696358][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.710579][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.724610][ T3459] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 34.739790][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.752622][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.764802][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.776316][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.787002][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.797587][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.811247][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.820271][ T3455] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 34.838900][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.848154][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.858680][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.868527][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.880522][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.892729][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.905493][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.918128][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.929693][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.941308][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.952446][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.965646][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.981745][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.992089][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.003487][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.015474][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.026247][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.261660][ T3484] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 35.357009][ T3491] loop2: detected capacity change from 0 to 128 [ 35.510588][ T3500] loop1: detected capacity change from 0 to 512 [ 35.568661][ T3504] process 'syz.3.16' launched './file1' with NULL argv: empty string added [ 35.602497][ T3500] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.14: bg 0: block 35: padding at end of block bitmap is not set [ 35.643065][ T3500] EXT4-fs (loop1): Remounting filesystem read-only [ 35.657579][ T3500] EXT4-fs (loop1): 1 truncate cleaned up [ 35.664078][ T3500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.698939][ T3500] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 35.733740][ T3500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.746360][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 35.893973][ T3525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 35.914652][ T3521] syz.4.20 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.978569][ T3529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23'. [ 35.987994][ T3529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 36.029403][ T3531] loop0: detected capacity change from 0 to 2048 [ 36.039772][ T3531] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.046830][ T3533] loop4: detected capacity change from 0 to 2048 [ 36.077269][ T3531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.093974][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.314369][ T308] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.332078][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.346430][ T308] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.346430][ T308] [ 36.351418][ T3531] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.24: bg 0: block 234: padding at end of block bitmap is not set [ 36.357868][ T308] EXT4-fs (loop4): Total free blocks count 0 [ 36.357890][ T308] EXT4-fs (loop4): Free/Dirty block details [ 36.357903][ T308] EXT4-fs (loop4): free_blocks=2415919104 [ 36.357916][ T308] EXT4-fs (loop4): dirty_blocks=8224 [ 36.357927][ T308] EXT4-fs (loop4): Block reservation details [ 36.357937][ T308] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 36.365981][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 36.378316][ T3531] EXT4-fs (loop0): Remounting filesystem read-only [ 36.460780][ T3546] EXT4-fs (loop0): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 36.488538][ T3548] pim6reg1: entered promiscuous mode [ 36.495157][ T3548] pim6reg1: entered allmulticast mode [ 36.506802][ T3531] syz.0.24 (3531) used greatest stack depth: 9808 bytes left [ 36.573196][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.635788][ T3552] loop0: detected capacity change from 0 to 512 [ 36.645439][ T3552] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 36.656007][ T3552] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 36.665229][ T3552] EXT4-fs (loop0): 1 truncate cleaned up [ 36.671646][ T3552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.687728][ T3552] ======================================================= [ 36.687728][ T3552] WARNING: The mand mount option has been deprecated and [ 36.687728][ T3552] and is ignored by this kernel. Remove the mand [ 36.687728][ T3552] option from the mount to silence this warning. [ 36.687728][ T3552] ======================================================= [ 36.726242][ T3552] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 36.744573][ T3552] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.31: Logical block already allocated [ 36.768583][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.806198][ T3561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 36.815529][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 36.879398][ C1] hrtimer: interrupt took 37180 ns [ 36.986015][ T3570] pim6reg1: entered promiscuous mode [ 36.993819][ T3570] pim6reg1: entered allmulticast mode [ 37.244943][ T3582] loop1: detected capacity change from 0 to 512 [ 37.299822][ T3582] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 37.323537][ T3582] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 37.345866][ T3589] serio: Serial port ptm0 [ 37.364329][ T3582] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 37.412082][ T3582] EXT4-fs (loop1): 1 truncate cleaned up [ 37.437889][ T3582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.505431][ T3582] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.582196][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.824976][ T3605] xt_CT: No such helper "netbios-ns" [ 37.845273][ T3605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 37.854864][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.862651][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.871127][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.879157][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.986194][ T3624] lo speed is unknown, defaulting to 1000 [ 37.992617][ T3624] lo speed is unknown, defaulting to 1000 [ 37.999716][ T3624] lo speed is unknown, defaulting to 1000 [ 38.006608][ T3624] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.015180][ T3624] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.025929][ T3624] lo speed is unknown, defaulting to 1000 [ 38.032851][ T3624] lo speed is unknown, defaulting to 1000 [ 38.041632][ T3624] lo speed is unknown, defaulting to 1000 [ 38.047963][ T3624] lo speed is unknown, defaulting to 1000 [ 38.062316][ T3624] lo speed is unknown, defaulting to 1000 [ 38.079283][ T3625] loop0: detected capacity change from 0 to 512 [ 38.089535][ T3625] EXT4-fs: Ignoring removed orlov option [ 38.097686][ T3625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.112284][ T3625] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.130526][ T3625] EXT4-fs (loop0): 1 orphan inode deleted [ 38.138176][ T3625] EXT4-fs (loop0): 1 truncate cleaned up [ 38.144817][ T3625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.175019][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.191816][ T3632] pim6reg1: entered promiscuous mode [ 38.197831][ T3632] pim6reg1: entered allmulticast mode [ 38.226757][ T3635] pim6reg1: entered promiscuous mode [ 38.232504][ T3635] pim6reg1: entered allmulticast mode [ 38.355874][ T3644] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.368619][ T3645] Cannot find del_set index 4 as target [ 38.717627][ T3663] loop2: detected capacity change from 0 to 128 [ 38.735370][ T3663] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.750170][ T3663] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.904330][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.976882][ T3672] loop2: detected capacity change from 0 to 1024 [ 38.993114][ T3672] EXT4-fs: Ignoring removed i_version option [ 39.001955][ T3672] EXT4-fs: Ignoring removed bh option [ 39.008812][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888118234a00: rx timeout, send abort [ 39.027360][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888118234a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 39.041973][ C0] ------------[ cut here ]------------ [ 39.047562][ C0] refcount_t: underflow; use-after-free. [ 39.053725][ C0] WARNING: CPU: 0 PID: 3668 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 39.058192][ T3675] loop1: detected capacity change from 0 to 2048 [ 39.063343][ C0] Modules linked in: [ 39.063372][ C0] CPU: 0 UID: 0 PID: 3668 Comm: syz.4.72 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 39.079390][ T3672] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.084840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.106187][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 39.112429][ C0] Code: 72 ff ff ff e8 6b 80 71 ff 48 c7 c7 3f d7 b2 86 e8 bf 66 8a ff c6 05 a7 27 f4 04 01 90 48 c7 c7 5f aa 1b 86 e8 8b 44 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 3c 80 71 ff 48 c7 c7 3c d7 b2 86 e8 [ 39.124746][ T3672] __quota_error: 268 callbacks suppressed [ 39.124765][ T3672] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 39.133498][ C0] RSP: 0018:ffffc90000003b40 EFLAGS: 00010246 [ 39.133524][ C0] RAX: 04cb190751ba7500 RBX: ffff888117654ae4 RCX: ffff88811461e300 [ 39.133541][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.141033][ T3672] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.151417][ C0] RBP: 0000000000000003 R08: ffffffff8111f597 R09: 0000000000000000 [ 39.151453][ C0] R10: 0001ffffffffffff R11: 0001c90000003977 R12: ffff888118234a68 [ 39.151469][ C0] R13: 0000000000040000 R14: ffff888117654ae4 R15: 0000000000000000 [ 39.161631][ T3672] EXT4-fs (loop2): mount failed [ 39.168451][ C0] FS: 00007fdf3ad666c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 39.168482][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.199174][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.204762][ C0] CR2: 0000000000000000 CR3: 0000000115baa000 CR4: 00000000003506f0 [ 39.254670][ T3675] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 39.261849][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.261872][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 39.261891][ C0] Call Trace: [ 39.261900][ C0] [ 39.270684][ T3675] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.280303][ C0] ? __warn+0x141/0x350 [ 39.307837][ T3675] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 39.315156][ C0] ? report_bug+0x315/0x420 [ 39.319814][ T3675] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.319814][ T3675] [ 39.334858][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 39.334896][ C0] ? handle_bug+0x60/0x90 [ 39.334921][ C0] ? exc_invalid_op+0x1a/0x50 [ 39.334964][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 39.341055][ T3675] EXT4-fs (loop1): Total free blocks count 0 [ 39.351509][ C0] ? __warn_printk+0x167/0x1b0 [ 39.351558][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 39.351585][ C0] sk_skb_reason_drop+0xe9/0x290 [ 39.351630][ C0] j1939_session_put+0x157/0x2a0 [ 39.358891][ T3675] EXT4-fs (loop1): Free/Dirty block details [ 39.364159][ C0] j1939_xtp_rx_abort_one+0x9d/0x410 [ 39.370085][ T3675] EXT4-fs (loop1): free_blocks=2415919104 [ 39.375148][ C0] j1939_tp_recv+0x71e/0xa80 [ 39.381880][ T3675] EXT4-fs (loop1): dirty_blocks=32 [ 39.386984][ C0] j1939_can_recv+0x45f/0x550 [ 39.395043][ T3675] EXT4-fs (loop1): Block reservation details [ 39.401672][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 39.401710][ C0] can_rcv_filter+0x225/0x4c0 [ 39.401741][ C0] can_receive+0x182/0x1f0 [ 39.401769][ C0] ? can_rcv+0xdc/0x180 [ 39.401810][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 39.401842][ C0] can_rcv+0xe7/0x180 [ 39.401878][ C0] ? __pfx_can_rcv+0x10/0x10 [ 39.401919][ C0] __netif_receive_skb+0x123/0x280 [ 39.401963][ C0] ? try_to_wake_up+0x2eb/0x550 [ 39.401997][ C0] process_backlog+0x22e/0x440 [ 39.402026][ C0] __napi_poll+0x63/0x3c0 [ 39.402048][ C0] ? net_rx_action+0x376/0x7f0 [ 39.402072][ C0] net_rx_action+0x3a1/0x7f0 [ 39.402104][ C0] handle_softirqs+0xbf/0x280 [ 39.402140][ C0] irq_exit_rcu+0x3e/0x90 [ 39.402166][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 39.402228][ C0] [ 39.402237][ C0] [ 39.409223][ T3675] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 39.415208][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 39.478107][ T3680] TCP: out of memory -- consider tuning tcp_mem [ 39.480745][ C0] RIP: 0010:sock_recvmsg_nosec+0x89/0x140 [ 39.568410][ C0] Code: d4 6d 00 89 c5 0f 1f 44 00 00 e8 72 b2 1c fd 89 e8 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc 4c 89 e7 e8 8b b8 35 fd 49 8b 1c 24 <48> 8d bb 90 00 00 00 e8 2b a5 35 fd 48 c7 c0 00 34 6d 84 48 39 83 [ 39.589386][ C0] RSP: 0018:ffffc9000d087c00 EFLAGS: 00000246 [ 39.595757][ C0] RAX: ffffffff84815210 RBX: ffffffff859e3878 RCX: ffffffff84137d42 [ 39.604770][ C0] RDX: 00000000000008b1 RSI: 0000000000000000 RDI: ffff8881065b5060 [ 39.613424][ C0] RBP: ffffc9000d087d88 R08: 0001ffff859e390f R09: 0000000000000000 [ 39.622978][ C0] R10: 0001ffffffffffff R11: 0001c9000d087d90 R12: ffff8881065b5060 [ 39.631575][ C0] R13: 0000000000002da9 R14: 0000000000000002 R15: ffff8881065b5040 [ 39.640624][ C0] ? __pfx_inet6_recvmsg+0x10/0x10 [ 39.646462][ C0] ? sock_recvmsg_nosec+0x32/0x140 [ 39.652500][ C0] ____sys_recvmsg+0x271/0x280 [ 39.657398][ C0] do_recvmmsg+0x2dc/0x740 [ 39.662330][ C0] __x64_sys_recvmmsg+0xe2/0x170 [ 39.668227][ C0] x64_sys_call+0x26e3/0x2d60 [ 39.673138][ C0] do_syscall_64+0xc9/0x1c0 [ 39.678608][ C0] ? clear_bhb_loop+0x55/0xb0 [ 39.683420][ C0] ? clear_bhb_loop+0x55/0xb0 [ 39.688808][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.694921][ C0] RIP: 0033:0x7fdf3c10e719 [ 39.699688][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.719751][ C0] RSP: 002b:00007fdf3ad66038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 39.728663][ C0] RAX: ffffffffffffffda RBX: 00007fdf3c2c6058 RCX: 00007fdf3c10e719 [ 39.737052][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 39.745538][ C0] RBP: 00007fdf3c18132e R08: 0000000000000000 R09: 0000000000000000 [ 39.753844][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 39.762646][ C0] R13: 0000000000000000 R14: 00007fdf3c2c6058 R15: 00007ffe4c0fa558 [ 39.771038][ C0] [ 39.774064][ C0] ---[ end trace 0000000000000000 ]--- [ 39.780380][ T3681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 39.791129][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.875728][ T29] audit: type=1400 audit(1730227285.782:388): avc: denied { write } for pid=3686 comm="syz.1.81" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.926565][ T3689] pim6reg1: entered promiscuous mode [ 39.933082][ T3689] pim6reg1: entered allmulticast mode [ 39.950249][ T29] audit: type=1400 audit(1730227285.852:389): avc: denied { nlmsg_tty_audit } for pid=3690 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 40.001075][ T29] audit: type=1400 audit(1730227285.912:390): avc: denied { read } for pid=3692 comm="syz.2.85" path="socket:[5054]" dev="sockfs" ino=5054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.089922][ T3696] loop4: detected capacity change from 0 to 128 [ 40.126150][ T3696] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.138717][ T3696] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.185796][ T29] audit: type=1400 audit(1730227286.092:391): avc: denied { write } for pid=3695 comm="syz.4.86" path="/12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.249439][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.260086][ T3699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.281947][ T29] audit: type=1400 audit(1730227286.192:392): avc: denied { create } for pid=3700 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.301420][ T29] audit: type=1400 audit(1730227286.192:393): avc: denied { ioctl } for pid=3700 comm="syz.0.98" path="socket:[5057]" dev="sockfs" ino=5057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.353364][ T3699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.365858][ T29] audit: type=1400 audit(1730227286.262:394): avc: denied { getopt } for pid=3705 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.405195][ T29] audit: type=1400 audit(1730227286.312:395): avc: denied { write } for pid=3707 comm="syz.4.90" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.452558][ T3699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.493386][ T3715] serio: Serial port pts0 [ 40.523782][ T3699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.543714][ T3722] loop0: detected capacity change from 0 to 512 [ 40.583666][ T3722] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (5435824128 > 6144). [ 40.597419][ T3722] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.620700][ T3699] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.631437][ T3722] EXT4-fs (loop0): mount failed [ 40.663378][ T3699] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.679112][ T3699] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.696360][ T3699] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.784820][ T3734] loop4: detected capacity change from 0 to 128 [ 40.854465][ T3734] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.874002][ T3734] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.928480][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.980919][ T3747] loop1: detected capacity change from 0 to 512 [ 41.009495][ T3749] loop4: detected capacity change from 0 to 512 [ 41.039311][ T3747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.064259][ T3747] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.076208][ T3749] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.108409][ T3749] EXT4-fs (loop4): mount failed [ 41.126861][ T3749] loop4: detected capacity change from 0 to 256 [ 41.148405][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.154762][ T3762] lo speed is unknown, defaulting to 1000 [ 41.232563][ T3766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.243947][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.252380][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.259928][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.268186][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.276268][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.284635][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.292290][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.300426][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.308003][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.316508][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.324684][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.332838][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.340565][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.349010][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.356952][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.365241][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.373578][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.382160][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.391166][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.399062][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.407106][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.415118][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.423268][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.431915][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.440303][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.449998][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.458280][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.466451][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.474582][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.482581][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.490313][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.497968][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.505752][ T3766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.508930][ T3384] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.588636][ T3776] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 41.669697][ T3779] can0: slcan on pts0. [ 41.717483][ T3779] can0 (unregistered): slcan off pts0. [ 41.774515][ T3793] loop0: detected capacity change from 0 to 2048 [ 41.790623][ T3793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.830973][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.866745][ T3810] loop0: detected capacity change from 0 to 1024 [ 41.874086][ T3810] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 41.996500][ T3824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 42.132241][ T3837] tipc: Started in network mode [ 42.137530][ T3837] tipc: Node identity f7, cluster identity 4711 [ 42.143981][ T3837] tipc: Node number set to 247 [ 42.208339][ T3842] loop0: detected capacity change from 0 to 128 [ 42.219774][ T3842] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 42.236186][ T3842] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 42.252317][ T3842] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.131: checksumming directory block 0 [ 42.267018][ T3842] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 42.298156][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.410415][ T3850] lo speed is unknown, defaulting to 1000 [ 42.495888][ T3861] loop1: detected capacity change from 0 to 512 [ 42.529122][ T3861] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.133: bg 0: block 248: padding at end of block bitmap is not set [ 42.597498][ T3861] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.133: Failed to acquire dquot type 1 [ 42.712420][ T3861] EXT4-fs (loop1): 1 truncate cleaned up [ 42.729585][ T3861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.742698][ T3861] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.853883][ T3861] syz.1.133 (3861) used greatest stack depth: 9360 bytes left [ 42.893414][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.903517][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:0: Failed to release dquot type 1 [ 42.952732][ T3883] syzkaller0: entered promiscuous mode [ 42.958758][ T3883] syzkaller0: entered allmulticast mode [ 43.054992][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 43.064072][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.071663][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.079564][ T3888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.087202][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.119078][ T3891] syz.0.145 uses obsolete (PF_INET,SOCK_PACKET) [ 43.237074][ T3897] loop0: detected capacity change from 0 to 512 [ 43.274915][ T3897] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.147: casefold flag without casefold feature [ 43.280426][ T3903] loop1: detected capacity change from 0 to 1024 [ 43.298395][ T3903] EXT4-fs: Ignoring removed nobh option [ 43.300098][ T3897] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.147: couldn't read orphan inode 15 (err -117) [ 43.304407][ T3903] EXT4-fs: Ignoring removed orlov option [ 43.324145][ T3903] EXT4-fs: Ignoring removed oldalloc option [ 43.332028][ T3897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.348661][ T3897] syz.0.147: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 43.363241][ T3897] CPU: 0 UID: 0 PID: 3897 Comm: syz.0.147 Tainted: G W 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 43.375339][ T3897] Tainted: [W]=WARN [ 43.379193][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.389399][ T3897] Call Trace: [ 43.392786][ T3897] [ 43.395732][ T3897] dump_stack_lvl+0xf2/0x150 [ 43.400414][ T3897] dump_stack+0x15/0x20 [ 43.404607][ T3897] warn_alloc+0x145/0x1b0 [ 43.408977][ T3897] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 43.414902][ T3897] ? read_tsc+0x9/0x20 [ 43.419040][ T3897] ? start_dl_timer+0x6c/0x110 [ 43.423887][ T3897] __vmalloc_node_range_noprof+0xaa/0xec0 [ 43.427330][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.429675][ T3897] ? __bpf_get_stack+0x5ac/0x5e0 [ 43.446763][ T3897] ? __rcu_read_unlock+0x4e/0x70 [ 43.451922][ T3897] ? avc_has_perm_noaudit+0x1cc/0x210 [ 43.457619][ T3897] ? xskq_create+0x36/0xd0 [ 43.462109][ T3897] vmalloc_user_noprof+0x59/0x70 [ 43.467187][ T3897] ? xskq_create+0x79/0xd0 [ 43.471672][ T3897] xskq_create+0x79/0xd0 [ 43.475997][ T3897] xsk_init_queue+0x82/0xd0 [ 43.480702][ T3897] xsk_setsockopt+0x409/0x520 [ 43.486181][ T3897] ? __pfx_xsk_setsockopt+0x10/0x10 [ 43.492001][ T3897] __sys_setsockopt+0x1cc/0x240 [ 43.497203][ T3897] __x64_sys_setsockopt+0x66/0x80 [ 43.502478][ T3897] x64_sys_call+0x278d/0x2d60 [ 43.507453][ T3897] do_syscall_64+0xc9/0x1c0 [ 43.512126][ T3897] ? clear_bhb_loop+0x55/0xb0 [ 43.517213][ T3897] ? clear_bhb_loop+0x55/0xb0 [ 43.522176][ T3897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.528799][ T3897] RIP: 0033:0x7efd1436e719 [ 43.533523][ T3897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.555851][ T3897] RSP: 002b:00007efd12fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.565439][ T3897] RAX: ffffffffffffffda RBX: 00007efd14525f80 RCX: 00007efd1436e719 [ 43.574267][ T3897] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 43.583633][ T3897] RBP: 00007efd143e132e R08: 0000000000000020 R09: 0000000000000000 [ 43.592424][ T3897] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 43.602797][ T3897] R13: 0000000000000000 R14: 00007efd14525f80 R15: 00007ffd41e11228 [ 43.612656][ T3897] [ 43.616983][ T3897] Mem-Info: [ 43.620350][ T3897] active_anon:6882 inactive_anon:1 isolated_anon:0 [ 43.620350][ T3897] active_file:3691 inactive_file:22907 isolated_file:0 [ 43.620350][ T3897] unevictable:24 dirty:91 writeback:0 [ 43.620350][ T3897] slab_reclaimable:2743 slab_unreclaimable:15123 [ 43.620350][ T3897] mapped:24015 shmem:3289 pagetables:718 [ 43.620350][ T3897] sec_pagetables:0 bounce:0 [ 43.620350][ T3897] kernel_misc_reclaimable:0 [ 43.620350][ T3897] free:1903425 free_pcp:1399 free_cma:0 [ 43.675275][ T3897] Node 0 active_anon:27528kB inactive_anon:4kB active_file:14764kB inactive_file:91628kB unevictable:96kB isolated(anon):0kB isolated(file):0kB mapped:96060kB dirty:364kB writeback:0kB shmem:13156kB writeback_tmp:0kB kernel_stack:2928kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 43.705027][ T3897] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 43.733214][ T3897] lowmem_reserve[]: 0 2866 7844 0 [ 43.738598][ T3897] Node 0 DMA32 free:2950376kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 43.768862][ T3897] lowmem_reserve[]: 0 0 4978 0 [ 43.774141][ T3897] Node 0 Normal free:4647964kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:15928kB inactive_anon:4kB active_file:14764kB inactive_file:91628kB unevictable:96kB writepending:356kB present:5242880kB managed:5098208kB mlocked:96kB bounce:0kB free_pcp:13576kB local_pcp:1372kB free_cma:0kB [ 43.806339][ T3897] lowmem_reserve[]: 0 0 0 0 [ 43.811051][ T3897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 43.824035][ T3897] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 1*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950376kB [ 43.840208][ T3897] Node 0 Normal: 84*4kB (UE) 175*8kB (UME) 104*16kB (UE) 18*32kB (UME) 10*64kB (UME) 25*128kB (UME) 46*256kB (UME) 42*512kB (UM) 21*1024kB (UME) 5*2048kB (UME) 1117*4096kB (UM) = 4648072kB [ 43.859434][ T3897] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 43.869343][ T3897] 27062 total pagecache pages [ 43.874218][ T3897] 1 pages in swap cache [ 43.879908][ T3897] Free swap = 124988kB [ 43.884097][ T3897] Total swap = 124996kB [ 43.888561][ T3897] 2097051 pages RAM [ 43.892565][ T3897] 0 pages HighMem/MovableOnly [ 43.897584][ T3897] 80182 pages reserved [ 43.940457][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.985585][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.049600][ T3932] loop0: detected capacity change from 0 to 256 [ 44.108663][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.118496][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.128872][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 44.128926][ T29] audit: type=1400 audit(1730227290.042:522): avc: denied { write } for pid=3938 comm="syz.4.164" name="route" dev="proc" ino=4026532917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.305789][ T29] audit: type=1326 audit(1730227290.212:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.329337][ T29] audit: type=1326 audit(1730227290.212:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.364077][ T29] audit: type=1326 audit(1730227290.262:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.388184][ T29] audit: type=1326 audit(1730227290.262:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.412319][ T29] audit: type=1326 audit(1730227290.262:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.436154][ T29] audit: type=1326 audit(1730227290.262:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.460096][ T29] audit: type=1326 audit(1730227290.262:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.484618][ T29] audit: type=1326 audit(1730227290.262:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.508818][ T29] audit: type=1326 audit(1730227290.262:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 44.627415][ T3952] netlink: 84 bytes leftover after parsing attributes in process `syz.3.169'. [ 44.637392][ T3952] netem: invalid attributes len -16 [ 44.643427][ T3952] netem: change failed [ 44.692895][ T3956] pim6reg1: entered promiscuous mode [ 44.698765][ T3956] pim6reg1: entered allmulticast mode [ 44.957700][ T3975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 45.098013][ T3990] pim6reg1: entered promiscuous mode [ 45.105009][ T3990] pim6reg1: entered allmulticast mode [ 45.118811][ T3994] tipc: Started in network mode [ 45.125292][ T3994] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 45.136188][ T3994] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 45.145856][ T3994] tipc: Enabled bearer , priority 10 [ 45.245340][ T50] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.319676][ T50] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.370084][ T50] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.429325][ T50] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.451132][ T4007] lo speed is unknown, defaulting to 1000 [ 45.547958][ T50] bridge_slave_1: left allmulticast mode [ 45.554304][ T50] bridge_slave_1: left promiscuous mode [ 45.561023][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.571517][ T50] bridge_slave_0: left allmulticast mode [ 45.578281][ T50] bridge_slave_0: left promiscuous mode [ 45.584721][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.690662][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.701730][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.712825][ T50] bond0 (unregistering): Released all slaves [ 45.770047][ T50] hsr_slave_0: left promiscuous mode [ 45.787793][ T50] hsr_slave_1: left promiscuous mode [ 45.789379][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 45.807717][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.815960][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.843878][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.852573][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.864633][ T50] veth1_macvtap: left promiscuous mode [ 45.871029][ T50] veth0_macvtap: left promiscuous mode [ 45.877184][ T50] veth1_vlan: left promiscuous mode [ 45.883096][ T50] veth0_vlan: left promiscuous mode [ 46.029315][ T50] team0 (unregistering): Port device team_slave_1 removed [ 46.042034][ T50] team0 (unregistering): Port device team_slave_0 removed [ 46.123038][ T4007] chnl_net:caif_netlink_parms(): no params data found [ 46.169238][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.176475][ T4007] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.202478][ T4007] bridge_slave_0: entered allmulticast mode [ 46.214537][ T4007] bridge_slave_0: entered promiscuous mode [ 46.228949][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.236543][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.250060][ T4007] bridge_slave_1: entered allmulticast mode [ 46.259745][ T4007] bridge_slave_1: entered promiscuous mode [ 46.267549][ T3392] tipc: Node number set to 1 [ 46.303641][ T4007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.339386][ T4007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.386231][ T4095] loop0: detected capacity change from 0 to 512 [ 46.408632][ T4007] team0: Port device team_slave_0 added [ 46.416658][ T4007] team0: Port device team_slave_1 added [ 46.420404][ T4095] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.436113][ T4101] syz.4.214[4101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.436279][ T4101] syz.4.214[4101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.452488][ T4095] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.464933][ T4101] syz.4.214[4101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.492533][ T4095] EXT4-fs (loop0): 1 truncate cleaned up [ 46.510745][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.528088][ T4007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.536006][ T4007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.563935][ T4007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.576417][ T4007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.584610][ T4007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.611577][ T4007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.680606][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.692540][ T4007] hsr_slave_0: entered promiscuous mode [ 46.703579][ T4007] hsr_slave_1: entered promiscuous mode [ 46.743344][ T4007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.762959][ T4007] Cannot create hsr debugfs directory [ 46.776686][ T4122] loop3: detected capacity change from 0 to 512 [ 46.818938][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.848859][ T4122] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.898667][ T4122] Process accounting resumed [ 46.933897][ T4122] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 46.975516][ T4007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.015704][ T4007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.023724][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.028234][ T4143] loop1: detected capacity change from 0 to 4096 [ 47.045500][ T4007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.051830][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.072109][ T4007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.105736][ T4146] Cannot find set identified by id 0 to match [ 47.169723][ T4157] loop3: detected capacity change from 0 to 512 [ 47.180598][ T4007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.207156][ T4007] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.218750][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.235737][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.243466][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.254401][ T4157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.284155][ T4157] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.302388][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.310364][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.325187][ T4170] loop1: detected capacity change from 0 to 512 [ 47.331855][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 47.341235][ T4167] bridge_slave_1: left allmulticast mode [ 47.346937][ T4167] bridge_slave_1: left promiscuous mode [ 47.353323][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.373367][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.373767][ T4167] bridge_slave_0: left allmulticast mode [ 47.392828][ T4167] bridge_slave_0: left promiscuous mode [ 47.399085][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.402932][ T4170] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.423482][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.492301][ T4007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.514741][ T4180] bond1 (unregistering): Released all slaves [ 47.566526][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.734168][ T4007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.949145][ T4240] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 47.955915][ T4240] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.964521][ T4240] vhci_hcd vhci_hcd.0: Device attached [ 47.980050][ T4242] vhci_hcd: cannot find the pending unlink 53665 [ 47.987128][ T4242] vhci_hcd: connection closed [ 47.987593][ T50] vhci_hcd: stop threads [ 47.989787][ T4007] veth0_vlan: entered promiscuous mode [ 47.992308][ T50] vhci_hcd: release socket [ 48.007729][ T50] vhci_hcd: disconnect device [ 48.011593][ T4007] veth1_vlan: entered promiscuous mode [ 48.031045][ T4007] veth0_macvtap: entered promiscuous mode [ 48.042016][ T4007] veth1_macvtap: entered promiscuous mode [ 48.054203][ T4007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.065217][ T4007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.075522][ T4007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.086754][ T4007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.100535][ T4007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.109453][ T4007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.120524][ T4007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.131046][ T4007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.142189][ T4007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.154799][ T4007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.169542][ T4007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.178641][ T4007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.187824][ T4007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.197147][ T4007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.868638][ T4299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 48.974892][ T4309] loop0: detected capacity change from 0 to 128 [ 48.984149][ T4309] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.997107][ T4309] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.048421][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.141968][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 49.141990][ T29] audit: type=1326 audit(1730227295.052:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa41b2756e7 code=0x7ffc0000 [ 49.172374][ T29] audit: type=1326 audit(1730227295.052:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa41b21a099 code=0x7ffc0000 [ 49.195743][ T29] audit: type=1326 audit(1730227295.052:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 49.219204][ T29] audit: type=1326 audit(1730227295.062:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa41b2756e7 code=0x7ffc0000 [ 49.242650][ T29] audit: type=1326 audit(1730227295.062:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa41b21a099 code=0x7ffc0000 [ 49.266039][ T29] audit: type=1326 audit(1730227295.062:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 49.290092][ T29] audit: type=1326 audit(1730227295.062:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa41b2756e7 code=0x7ffc0000 [ 49.314178][ T29] audit: type=1326 audit(1730227295.062:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa41b21a099 code=0x7ffc0000 [ 49.340441][ T29] audit: type=1326 audit(1730227295.062:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 49.365705][ T29] audit: type=1326 audit(1730227295.092:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa41b2756e7 code=0x7ffc0000 [ 49.435998][ T4324] mmap: syz.3.254 (4324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.489800][ T4330] netlink: 'syz.3.257': attribute type 10 has an invalid length. [ 49.512737][ T4330] team0: Failed to send options change via netlink (err -105) [ 49.521030][ T4330] team0: Port device netdevsim1 added [ 49.544526][ T4336] netlink: 'syz.3.257': attribute type 10 has an invalid length. [ 49.574003][ T4336] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 49.591527][ T4336] team0: Failed to send options change via netlink (err -105) [ 49.603470][ T4336] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 49.615233][ T4336] team0: Port device netdevsim1 removed [ 49.670180][ T4336] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 49.686699][ T4342] netlink: 64 bytes leftover after parsing attributes in process `syz.4.263'. [ 49.722459][ T4344] ipvlan1: entered promiscuous mode [ 49.745822][ T4344] ipvlan1: left promiscuous mode [ 49.841378][ T4355] loop0: detected capacity change from 0 to 512 [ 49.860594][ T4355] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.268: casefold flag without casefold feature [ 49.891361][ T4355] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.268: couldn't read orphan inode 15 (err -117) [ 49.906408][ T4355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.987472][ T4355] loop0: detected capacity change from 512 to 64 [ 50.001096][ T4370] syz.0.268: attempt to access beyond end of device [ 50.001096][ T4370] loop0: rw=3, sector=500, nr_sectors = 4 limit=64 [ 50.016132][ T4376] xt_hashlimit: max too large, truncated to 1048576 [ 50.036601][ T4370] syz.0.268: attempt to access beyond end of device [ 50.036601][ T4370] loop0: rw=2051, sector=504, nr_sectors = 2 limit=64 [ 50.081154][ T4382] loop5: detected capacity change from 0 to 1024 [ 50.087884][ T4370] EXT4-fs (loop0): discard request in group:0 block:249 count:3 failed with -5 [ 50.104426][ T4370] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: IO failure [ 50.107177][ T4384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.122081][ T4370] syz.0.268: attempt to access beyond end of device [ 50.122081][ T4370] loop0: rw=2051, sector=82, nr_sectors = 2 limit=64 [ 50.135759][ T4370] EXT4-fs (loop0): discard request in group:0 block:40 count:1 failed with -5 [ 50.147036][ T4370] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: IO failure [ 50.156810][ T4370] syz.0.268: attempt to access beyond end of device [ 50.156810][ T4370] loop0: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 50.161770][ T4384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.172048][ T4370] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 50.193534][ T4370] Buffer I/O error on device loop0, logical block 255 [ 50.197260][ T4384] loop1: detected capacity change from 0 to 1024 [ 50.202226][ T4370] syz.0.268: attempt to access beyond end of device [ 50.202226][ T4370] loop0: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 50.221305][ T4370] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 50.222430][ T4384] EXT4-fs: Ignoring removed orlov option [ 50.232634][ T4370] Buffer I/O error on device loop0, logical block 253 [ 50.232655][ T4370] Buffer I/O error on device loop0, logical block 254 [ 50.232855][ T4370] syz.0.268: attempt to access beyond end of device [ 50.232855][ T4370] loop0: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 50.239513][ T4384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.246434][ T4370] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 50.271688][ T4382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 50.274048][ T4370] Buffer I/O error on device loop0, logical block 37 [ 50.300581][ T4384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.305233][ T4370] Buffer I/O error on device loop0, logical block 38 [ 50.323859][ T4370] Buffer I/O error on device loop0, logical block 39 [ 50.324086][ T4384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.330550][ T4370] Buffer I/O error on device loop0, logical block 40 [ 50.346304][ T4370] syz.0.268: attempt to access beyond end of device [ 50.346304][ T4370] loop0: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 50.351930][ T4382] bridge_slave_0: left allmulticast mode [ 50.359650][ T4370] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 50.359687][ T4370] Buffer I/O error on device loop0, logical block 249 [ 50.365681][ T4382] bridge_slave_0: left promiscuous mode [ 50.377499][ T4370] Buffer I/O error on device loop0, logical block 250 [ 50.384438][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.390259][ T4370] Buffer I/O error on device loop0, logical block 251 [ 50.397547][ T4370] syz.0.268: attempt to access beyond end of device [ 50.397547][ T4370] loop0: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 50.405131][ T4384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.411376][ T4370] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 50.450914][ T4382] bridge_slave_1: left allmulticast mode [ 50.457188][ T4382] bridge_slave_1: left promiscuous mode [ 50.463671][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.465927][ T3314] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 50.488335][ T4382] bond0: (slave bond_slave_0): Releasing backup interface [ 50.497274][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.506950][ T4382] bond0: (slave bond_slave_1): Releasing backup interface [ 50.521005][ T4382] team0: Port device team_slave_0 removed [ 50.530860][ T4382] team0: Port device team_slave_1 removed [ 50.538789][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.546429][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.555416][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.562917][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.597239][ T4007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 50.624712][ T4394] pim6reg1: entered promiscuous mode [ 50.630175][ T4394] pim6reg1: entered allmulticast mode [ 50.814142][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.971158][ T4398] lo speed is unknown, defaulting to 1000 [ 51.036740][ T4410] Unknown options in mask 5 [ 51.041398][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.070212][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.142735][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.166660][ T4398] chnl_net:caif_netlink_parms(): no params data found [ 51.222594][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.281949][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.289230][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.297068][ T4398] bridge_slave_0: entered allmulticast mode [ 51.317399][ T4398] bridge_slave_0: entered promiscuous mode [ 51.330916][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.338330][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.354263][ T4398] bridge_slave_1: entered allmulticast mode [ 51.361332][ T4398] bridge_slave_1: entered promiscuous mode [ 51.432662][ T4398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.446900][ T50] bridge_slave_1: left allmulticast mode [ 51.452849][ T50] bridge_slave_1: left promiscuous mode [ 51.458774][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.482478][ T50] bridge_slave_0: left allmulticast mode [ 51.488422][ T50] bridge_slave_0: left promiscuous mode [ 51.494703][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.608944][ T4449] loop4: detected capacity change from 0 to 8192 [ 51.617704][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.631718][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.645436][ T50] bond0 (unregistering): Released all slaves [ 51.659823][ T4398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.679563][ T4445] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 51.691265][ T4445] tipc: Enabled bearer , priority 10 [ 51.709248][ T50] tipc: Left network mode [ 51.740378][ T4398] team0: Port device team_slave_0 added [ 51.748945][ T4398] team0: Port device team_slave_1 added [ 51.751448][ T4457] loop4: detected capacity change from 0 to 512 [ 51.763046][ T50] hsr_slave_0: left promiscuous mode [ 51.771547][ T4457] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.776788][ T4455] loop3: detected capacity change from 0 to 1024 [ 51.792378][ T4457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 51.801106][ T4455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.802875][ T50] hsr_slave_1: left promiscuous mode [ 51.811465][ T4457] System zones: 1-12 [ 51.822235][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.835793][ T50] veth1_macvtap: left promiscuous mode [ 51.841571][ T50] veth0_macvtap: left promiscuous mode [ 51.846651][ T4457] EXT4-fs (loop4): 1 truncate cleaned up [ 51.847159][ T50] veth1_vlan: left promiscuous mode [ 51.858437][ T50] veth0_vlan: left promiscuous mode [ 51.864418][ T4457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.951037][ T3318] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 51.977046][ T3318] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 51.978267][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.056450][ T4478] loop4: detected capacity change from 0 to 2048 [ 52.064809][ T50] team0 (unregistering): Port device team_slave_1 removed [ 52.076484][ T50] team0 (unregistering): Port device team_slave_0 removed [ 52.079217][ T4478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.112285][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.141378][ T3390] lo speed is unknown, defaulting to 1000 [ 52.170355][ T4398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.179359][ T4398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.207103][ T4398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.221867][ T4398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.230056][ T4398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.259380][ T4398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.328980][ T4398] hsr_slave_0: entered promiscuous mode [ 52.337253][ T4398] hsr_slave_1: entered promiscuous mode [ 52.344453][ T4398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.353251][ T4398] Cannot create hsr debugfs directory [ 52.361609][ T4467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.558648][ T4503] tipc: Started in network mode [ 52.563633][ T4503] tipc: Node identity fea880698a99, cluster identity 4711 [ 52.571244][ T4503] tipc: Enabled bearer , priority 0 [ 52.623133][ T4509] ªªªªªª: renamed from syzkaller0 [ 52.659079][ T4509] tipc: Disabling bearer [ 52.671183][ T4512] netlink: 'syz.5.313': attribute type 5 has an invalid length. [ 52.732229][ T4398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.748991][ T4398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.777434][ T4398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.811008][ T4398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.840015][ T4520] loop1: detected capacity change from 0 to 512 [ 52.899773][ T4520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.930006][ T4520] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.963396][ T4398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.977004][ T4398] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.027423][ T4398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.039975][ T4398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.067784][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.075534][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.084447][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.091844][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.110553][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.203836][ T4551] @: renamed from bond0 (while UP) [ 53.223596][ T4549] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.240822][ T4398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.331863][ T4566] loop5: detected capacity change from 0 to 2048 [ 53.361735][ T4508] chnl_net:caif_netlink_parms(): no params data found [ 53.518420][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.525544][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.563882][ T4508] bridge_slave_0: entered allmulticast mode [ 53.578240][ T4508] bridge_slave_0: entered promiscuous mode [ 53.595462][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.602955][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.635197][ T4508] bridge_slave_1: entered allmulticast mode [ 53.644199][ T4508] bridge_slave_1: entered promiscuous mode [ 53.668215][ T4398] veth0_vlan: entered promiscuous mode [ 53.711023][ T4398] veth1_vlan: entered promiscuous mode [ 53.720868][ T4508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.744792][ T4398] veth0_macvtap: entered promiscuous mode [ 53.766076][ T4508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.784625][ T4398] veth1_macvtap: entered promiscuous mode [ 53.829271][ T4508] team0: Port device team_slave_0 added [ 53.840141][ T4508] team0: Port device team_slave_1 added [ 53.864449][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.871723][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.899418][ T4508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.915088][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.922327][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.951960][ T4508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.984564][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.995305][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.005632][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.016233][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.032399][ T4398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.063961][ T4508] hsr_slave_0: entered promiscuous mode [ 54.072014][ T4508] hsr_slave_1: entered promiscuous mode [ 54.088261][ T4508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.104986][ T4508] Cannot create hsr debugfs directory [ 54.166351][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.178783][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.190587][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.201800][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.213952][ T4398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.225189][ T4398] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.235493][ T4398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.246147][ T4398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.250501][ T4636] sd 0:0:1:0: device reset [ 54.256210][ T4398] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.261398][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 54.261417][ T29] audit: type=1326 audit(1730227300.142:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.304182][ T29] audit: type=1326 audit(1730227300.142:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.328028][ T29] audit: type=1326 audit(1730227300.142:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.351937][ T29] audit: type=1326 audit(1730227300.142:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa41b27d0b0 code=0x7ffc0000 [ 54.375452][ T29] audit: type=1326 audit(1730227300.142:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.398716][ T29] audit: type=1326 audit(1730227300.142:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.423198][ T29] audit: type=1326 audit(1730227300.142:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.447215][ T29] audit: type=1326 audit(1730227300.142:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.473134][ T29] audit: type=1326 audit(1730227300.142:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.498414][ T29] audit: type=1326 audit(1730227300.142:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41b27e719 code=0x7ffc0000 [ 54.600223][ T4642] Zero length message leads to an empty skb [ 54.788019][ T4660] serio: Serial port ptm0 [ 54.821064][ T4508] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 54.852198][ T4508] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 54.882960][ T4508] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 54.926966][ T4508] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 54.939704][ T4678] loop4: detected capacity change from 0 to 1024 [ 54.961836][ T4678] EXT4-fs: Ignoring removed oldalloc option [ 54.972660][ T4681] syz.6.340[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.972742][ T4681] syz.6.340[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.000095][ T4678] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 55.014796][ T4681] syz.6.340[4681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.049171][ T4508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.084584][ T4678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.093293][ T4681] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.121251][ T4508] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.133713][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.141162][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.162767][ T4508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.174546][ T4508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.191593][ T1849] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.199159][ T1849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.276042][ T4508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.416993][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.511519][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 55.572830][ T4710] loop5: detected capacity change from 0 to 512 [ 55.581179][ T3017] ================================================================== [ 55.589917][ T3017] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 55.597960][ T3017] [ 55.600297][ T3017] write to 0xffff88811485aab0 of 8 bytes by task 3305 on cpu 0: [ 55.609269][ T3017] dentry_unlink_inode+0x65/0x260 [ 55.614373][ T3017] d_delete+0x7d/0x100 [ 55.618599][ T3017] d_delete_notify+0x34/0x100 [ 55.623327][ T3017] vfs_unlink+0x320/0x430 [ 55.627697][ T3017] do_unlinkat+0x236/0x4c0 [ 55.632368][ T3017] __x64_sys_unlink+0x2e/0x40 [ 55.637176][ T3017] x64_sys_call+0x280f/0x2d60 [ 55.642328][ T3017] do_syscall_64+0xc9/0x1c0 [ 55.647765][ T3017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.654409][ T3017] [ 55.657027][ T3017] read to 0xffff88811485aab0 of 8 bytes by task 3017 on cpu 1: [ 55.665922][ T3017] step_into+0x123/0x810 [ 55.670606][ T3017] walk_component+0x169/0x230 [ 55.676029][ T3017] path_lookupat+0x10a/0x2b0 [ 55.680828][ T3017] filename_lookup+0x127/0x300 [ 55.685903][ T3017] do_readlinkat+0x89/0x210 [ 55.690666][ T3017] __x64_sys_readlink+0x47/0x60 [ 55.696095][ T3017] x64_sys_call+0x13c3/0x2d60 [ 55.701041][ T3017] do_syscall_64+0xc9/0x1c0 [ 55.706345][ T3017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.712577][ T3017] [ 55.715022][ T3017] value changed: 0xffff888115939aa8 -> 0x0000000000000000 [ 55.722440][ T3017] [ 55.725031][ T3017] Reported by Kernel Concurrency Sanitizer on: [ 55.731503][ T3017] CPU: 1 UID: 0 PID: 3017 Comm: udevd Tainted: G W 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 55.743686][ T3017] Tainted: [W]=WARN [ 55.748047][ T3017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.759893][ T3017] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.868244][ T4710] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 56.137176][ T3432] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.194922][ T3432] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.271400][ T3432] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.340544][ T3432] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.499448][ T3432] bond0 (unregistering): Released all slaves [ 56.574111][ T3432] hsr_slave_0: left promiscuous mode [ 56.580284][ T3432] hsr_slave_1: left promiscuous mode [ 56.589842][ T3432] veth1_macvtap: left promiscuous mode [ 56.595704][ T3432] veth0_macvtap: left promiscuous mode [ 56.601397][ T3432] veth1_vlan: left promiscuous mode [ 56.606978][ T3432] veth0_vlan: left promiscuous mode [ 56.971606][ T3432] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.012331][ T3432] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.060560][ T3432] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.111464][ T3432] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.300179][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.310985][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.321865][ T3432] bond0 (unregistering): Released all slaves [ 57.380849][ T3432] hsr_slave_0: left promiscuous mode [ 57.386749][ T3432] hsr_slave_1: left promiscuous mode [ 57.392941][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.400768][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.408833][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.417524][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.428421][ T3432] veth1_macvtap: left promiscuous mode [ 57.434153][ T3432] veth0_macvtap: left promiscuous mode [ 57.440367][ T3432] veth1_vlan: left promiscuous mode [ 57.446069][ T3432] veth0_vlan: left promiscuous mode [ 57.555940][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 57.567046][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 58.429674][ T3432] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.472601][ T3432] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.521367][ T3432] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.590910][ T3432] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.666738][ T3432] bridge_slave_1: left allmulticast mode [ 58.672589][ T3432] bridge_slave_1: left promiscuous mode [ 58.678486][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.687225][ T3432] bridge_slave_0: left allmulticast mode [ 58.693285][ T3432] bridge_slave_0: left promiscuous mode [ 58.699215][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.708279][ T3432] bridge_slave_1: left allmulticast mode [ 58.714929][ T3432] bridge_slave_1: left promiscuous mode [ 58.721367][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.730184][ T3432] bridge_slave_0: left allmulticast mode [ 58.736561][ T3432] bridge_slave_0: left promiscuous mode [ 58.743766][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.919966][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.930166][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.940670][ T3432] bond0 (unregistering): Released all slaves [ 58.950001][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.960397][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.970798][ T3432] bond0 (unregistering): Released all slaves [ 59.012201][ T3432] hsr_slave_0: left promiscuous mode [ 59.018864][ T3432] hsr_slave_1: left promiscuous mode [ 59.024955][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.034346][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.044920][ T3432] hsr_slave_0: left promiscuous mode [ 59.051802][ T3432] hsr_slave_1: left promiscuous mode [ 59.058699][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.066842][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.074759][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.083212][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.095234][ T3432] veth1_macvtap: left promiscuous mode [ 59.100951][ T3432] veth0_macvtap: left promiscuous mode [ 59.106942][ T3432] veth1_vlan: left promiscuous mode [ 59.112656][ T3432] veth0_vlan: left promiscuous mode [ 59.220103][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 59.230654][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 59.296303][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 59.307401][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 59.761717][ T3432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.811489][ T3432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.861777][ T3432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.911981][ T3432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.992088][ T3432] bridge_slave_1: left allmulticast mode [ 59.997958][ T3432] bridge_slave_1: left promiscuous mode [ 60.004138][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.014500][ T3432] bridge_slave_0: left allmulticast mode [ 60.022395][ T3432] bridge_slave_0: left promiscuous mode [ 60.028446][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.111118][ T3432] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.122431][ T3432] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.132533][ T3432] @ (unregistering): Released all slaves [ 60.178534][ T3432] tipc: Left network mode [ 60.187024][ T3432] hsr_slave_0: left promiscuous mode [ 60.193183][ T3432] hsr_slave_1: left promiscuous mode [ 60.200840][ T3432] veth1_vlan: left promiscuous mode [ 60.206641][ T3432] veth0_vlan: left promiscuous mode [ 60.289510][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 60.300233][ T3432] team0 (unregistering): Port device team_slave_0 removed