last executing test programs: 1.183878014s ago: executing program 3 (id=645): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.085098984s ago: executing program 0 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.074302934s ago: executing program 4 (id=648): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x3000002) 334.663438ms ago: executing program 3 (id=662): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102377, 0x18fe9}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 323.704988ms ago: executing program 1 (id=663): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200"], 0x1ec}}, 0x0) 274.009628ms ago: executing program 1 (id=666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 254.532618ms ago: executing program 3 (id=667): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 252.330388ms ago: executing program 1 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x1, &(0x7f00000002c0)) 228.234519ms ago: executing program 0 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_config_ext={0x84b, 0x3}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close_range(r1, 0xffffffffffffffff, 0x2) 227.972729ms ago: executing program 4 (id=670): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x10014}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<\t0&&\t') 219.177929ms ago: executing program 2 (id=671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) 199.408569ms ago: executing program 1 (id=672): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 192.491879ms ago: executing program 3 (id=673): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 178.236089ms ago: executing program 0 (id=674): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) 177.900319ms ago: executing program 2 (id=675): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/55, 0x37) getdents64(r0, 0xfffffffffffffffe, 0x29) 155.764179ms ago: executing program 2 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x6}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') open(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200c00, 0x1a6) 151.685289ms ago: executing program 0 (id=677): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200"], 0x1ec}}, 0x0) 138.480559ms ago: executing program 3 (id=678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 137.630659ms ago: executing program 4 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9d9f80175687dbf2}, 0x0) 107.445349ms ago: executing program 2 (id=680): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) 96.416649ms ago: executing program 3 (id=681): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x3000002) 96.266029ms ago: executing program 4 (id=682): madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mlock(&(0x7f00001e8000/0x4000)=nil, 0x4000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000280)=[{}], 0x18, 0x4, 0x0, 0x0, 0x26}) 80.562909ms ago: executing program 0 (id=683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 72.390239ms ago: executing program 1 (id=684): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = io_uring_setup(0x6ddb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) 63.41763ms ago: executing program 2 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 56.61968ms ago: executing program 4 (id=686): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)) 39.841069ms ago: executing program 1 (id=687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_config_ext={0x84b, 0x3}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close_range(r1, 0xffffffffffffffff, 0x2) 31.11605ms ago: executing program 0 (id=688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32, @ANYBLOB="080005"], 0x6c}, 0x1, 0xba01}, 0x0) 20.32476ms ago: executing program 4 (id=689): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 0s ago: executing program 2 (id=690): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x2, 0x296, &(0x7f0000000540)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000322000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): [ 20.390871][ T29] audit: type=1400 audit(1731701480.713:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 26.460100][ T29] audit: type=1400 audit(1731701486.783:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.461362][ T3304] cgroup: Unknown subsys name 'net' [ 26.482816][ T29] audit: type=1400 audit(1731701486.783:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.510203][ T29] audit: type=1400 audit(1731701486.813:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.655149][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.661310][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.828898][ T29] audit: type=1400 audit(1731701487.153:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.852172][ T29] audit: type=1400 audit(1731701487.153:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.872721][ T29] audit: type=1400 audit(1731701487.153:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.893275][ T29] audit: type=1400 audit(1731701487.153:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.902064][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.913620][ T29] audit: type=1400 audit(1731701487.173:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.947017][ T29] audit: type=1400 audit(1731701487.173:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.970385][ T29] audit: type=1400 audit(1731701487.253:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.000297][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.019169][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.066079][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 28.092502][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.099625][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.106801][ T3314] bridge_slave_0: entered allmulticast mode [ 28.113461][ T3314] bridge_slave_0: entered promiscuous mode [ 28.133304][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.140365][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.147498][ T3314] bridge_slave_1: entered allmulticast mode [ 28.153805][ T3314] bridge_slave_1: entered promiscuous mode [ 28.176308][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.188243][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.219030][ T3314] team0: Port device team_slave_0 added [ 28.226141][ T3314] team0: Port device team_slave_1 added [ 28.260454][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.267474][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.293466][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.304714][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.311651][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.337586][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.348423][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.355494][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.362614][ T3324] bridge_slave_0: entered allmulticast mode [ 28.369038][ T3324] bridge_slave_0: entered promiscuous mode [ 28.376875][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.383916][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.391083][ T3324] bridge_slave_1: entered allmulticast mode [ 28.397495][ T3324] bridge_slave_1: entered promiscuous mode [ 28.412785][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 28.432100][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.443810][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.473803][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.492896][ T3314] hsr_slave_0: entered promiscuous mode [ 28.498854][ T3314] hsr_slave_1: entered promiscuous mode [ 28.526504][ T3324] team0: Port device team_slave_0 added [ 28.542986][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.552134][ T3324] team0: Port device team_slave_1 added [ 28.569197][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.576273][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.583512][ T3322] bridge_slave_0: entered allmulticast mode [ 28.589992][ T3322] bridge_slave_0: entered promiscuous mode [ 28.599022][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.606126][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.613312][ T3322] bridge_slave_1: entered allmulticast mode [ 28.619728][ T3322] bridge_slave_1: entered promiscuous mode [ 28.650560][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.657613][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.683590][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.695032][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.701977][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.727949][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.756358][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.763451][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.770694][ T3315] bridge_slave_0: entered allmulticast mode [ 28.777053][ T3315] bridge_slave_0: entered promiscuous mode [ 28.797586][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.808152][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.820598][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.827733][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.835065][ T3315] bridge_slave_1: entered allmulticast mode [ 28.841438][ T3315] bridge_slave_1: entered promiscuous mode [ 28.861984][ T3322] team0: Port device team_slave_0 added [ 28.887657][ T3322] team0: Port device team_slave_1 added [ 28.902527][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.909772][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.916890][ T3320] bridge_slave_0: entered allmulticast mode [ 28.923395][ T3320] bridge_slave_0: entered promiscuous mode [ 28.938486][ T3324] hsr_slave_0: entered promiscuous mode [ 28.944447][ T3324] hsr_slave_1: entered promiscuous mode [ 28.950205][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.957789][ T3324] Cannot create hsr debugfs directory [ 28.964512][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.973720][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.980838][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.987984][ T3320] bridge_slave_1: entered allmulticast mode [ 28.994489][ T3320] bridge_slave_1: entered promiscuous mode [ 29.011812][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.018836][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.044745][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.063501][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.084895][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.091897][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.117820][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.148172][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.158397][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.168878][ T3315] team0: Port device team_slave_0 added [ 29.175500][ T3315] team0: Port device team_slave_1 added [ 29.204845][ T3320] team0: Port device team_slave_0 added [ 29.227621][ T3320] team0: Port device team_slave_1 added [ 29.235063][ T3322] hsr_slave_0: entered promiscuous mode [ 29.240971][ T3322] hsr_slave_1: entered promiscuous mode [ 29.246931][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.254504][ T3322] Cannot create hsr debugfs directory [ 29.264694][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.271731][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.297873][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.324653][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.331622][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.357616][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.376370][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.383348][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.409315][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.420460][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.427436][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.453354][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.478799][ T3315] hsr_slave_0: entered promiscuous mode [ 29.485100][ T3315] hsr_slave_1: entered promiscuous mode [ 29.490894][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.498529][ T3315] Cannot create hsr debugfs directory [ 29.538368][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.557088][ T3320] hsr_slave_0: entered promiscuous mode [ 29.563077][ T3320] hsr_slave_1: entered promiscuous mode [ 29.569249][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.577918][ T3320] Cannot create hsr debugfs directory [ 29.585950][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.607629][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.617991][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.702658][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.713354][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.735234][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.743802][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.779068][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.789509][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.803998][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.823476][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.844794][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.855896][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.868144][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.879410][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.888354][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.913057][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.921933][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.929019][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.952643][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.959706][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.970834][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.980165][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.989651][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.998109][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.031406][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.078243][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.104612][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.121613][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.132535][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.146890][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.153962][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.162940][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.170093][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.186529][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.193585][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.219512][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.226653][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.239788][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.257917][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.274459][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.281548][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.296871][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.303929][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.317640][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.330884][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.349201][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.359656][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.389359][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.396447][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.405788][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.412979][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.432687][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.488346][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.563482][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.582451][ T3324] veth0_vlan: entered promiscuous mode [ 30.605297][ T3324] veth1_vlan: entered promiscuous mode [ 30.625263][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.648359][ T3314] veth0_vlan: entered promiscuous mode [ 30.658448][ T3324] veth0_macvtap: entered promiscuous mode [ 30.669271][ T3314] veth1_vlan: entered promiscuous mode [ 30.681298][ T3324] veth1_macvtap: entered promiscuous mode [ 30.700205][ T3314] veth0_macvtap: entered promiscuous mode [ 30.711545][ T3322] veth0_vlan: entered promiscuous mode [ 30.722249][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.734019][ T3322] veth1_vlan: entered promiscuous mode [ 30.741273][ T3314] veth1_macvtap: entered promiscuous mode [ 30.751385][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.762985][ T3322] veth0_macvtap: entered promiscuous mode [ 30.782951][ T3322] veth1_macvtap: entered promiscuous mode [ 30.794455][ T3324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.803242][ T3324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.811991][ T3324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.820958][ T3324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836242][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.846773][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.857682][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.877129][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.887648][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.899114][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.912299][ T3320] veth0_vlan: entered promiscuous mode [ 30.921229][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.930086][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.938818][ T3314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.947608][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.959271][ T3315] veth0_vlan: entered promiscuous mode [ 30.966226][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.976749][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.986602][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.997090][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.007860][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.020258][ T3320] veth1_vlan: entered promiscuous mode [ 31.030108][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.040738][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.050568][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.061085][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.072336][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.089749][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.098520][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.107268][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.115987][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.126991][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.131509][ T3320] veth0_macvtap: entered promiscuous mode [ 31.155456][ T3315] veth1_vlan: entered promiscuous mode [ 31.165891][ T3320] veth1_macvtap: entered promiscuous mode [ 31.189873][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.200375][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.210254][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.220821][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.230637][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.241147][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.252600][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.272269][ T3315] veth0_macvtap: entered promiscuous mode [ 31.280971][ T3315] veth1_macvtap: entered promiscuous mode [ 31.290603][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.301146][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.310999][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.321480][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.331312][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.341786][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.354963][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.362750][ T3458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 31.379286][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.389766][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.399604][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.410138][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.420026][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.430504][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.440402][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.450819][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.461965][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.472045][ T3320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.481025][ T3320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.489928][ T3320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.498691][ T3320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.520235][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.530725][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.540696][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.551125][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.560742][ T3463] loop3: detected capacity change from 0 to 8192 [ 31.560960][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.570952][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 31.570962][ T29] audit: type=1400 audit(1731701491.893:126): avc: denied { mount } for pid=3462 comm="syz.3.7" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.577649][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.577728][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.625684][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.639353][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.666042][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.674886][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683590][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.692620][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.694170][ T29] audit: type=1400 audit(1731701491.993:127): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.742950][ T3467] loop4: detected capacity change from 0 to 512 [ 31.764390][ T3467] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.777505][ T3467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.788831][ T29] audit: type=1400 audit(1731701492.113:128): avc: denied { prog_load } for pid=3468 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.807643][ T29] audit: type=1400 audit(1731701492.113:129): avc: denied { bpf } for pid=3468 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.827951][ T29] audit: type=1400 audit(1731701492.113:130): avc: denied { prog_run } for pid=3468 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.867183][ T3467] EXT4-fs (loop4): 1 orphan inode deleted [ 31.872962][ T3467] EXT4-fs (loop4): 1 truncate cleaned up [ 31.901586][ T29] audit: type=1326 audit(1731701492.213:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 31.924809][ T29] audit: type=1400 audit(1731701492.213:132): avc: denied { create } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.926492][ T3467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.958437][ T29] audit: type=1326 audit(1731701492.273:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 31.981643][ T29] audit: type=1326 audit(1731701492.273:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 32.004704][ T29] audit: type=1400 audit(1731701492.283:135): avc: denied { mount } for pid=3466 comm="syz.4.9" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.085994][ T3490] loop1: detected capacity change from 0 to 512 [ 32.095056][ T3490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.162408][ T3504] loop3: detected capacity change from 0 to 128 [ 32.179631][ T3490] EXT4-fs (loop1): 1 truncate cleaned up [ 32.187535][ T3490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.271541][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.311731][ T3520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.369772][ T3528] loop1: detected capacity change from 0 to 512 [ 32.380895][ T3528] EXT4-fs: Ignoring removed oldalloc option [ 32.401417][ T3528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.453013][ T3528] EXT4-fs (loop1): 1 truncate cleaned up [ 32.459614][ T3528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.487085][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.549334][ T3555] tipc: Failed to obtain node identity [ 32.554878][ T3555] tipc: Enabling of bearer rejected, failed to enable media [ 32.564075][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.580904][ T3558] loop1: detected capacity change from 0 to 256 [ 32.653693][ T3571] capability: warning: `syz.4.51' uses deprecated v2 capabilities in a way that may be insecure [ 32.685641][ T3574] syz.3.52[3574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.685713][ T3574] syz.3.52[3574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.707550][ T3574] syz.3.52[3574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.848419][ T3589] netlink: 48 bytes leftover after parsing attributes in process `syz.3.60'. [ 32.891033][ T3595] syz.3.63[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.891147][ T3595] syz.3.63[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.921651][ T3595] syz.3.63[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.986065][ T3603] syz.3.67 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.993639][ T3606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.69'. [ 33.018448][ T3607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'. [ 33.027324][ T3607] netlink: 228 bytes leftover after parsing attributes in process `syz.1.68'. [ 33.043142][ T3607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.68'. [ 33.097985][ T3619] loop3: detected capacity change from 0 to 512 [ 33.126682][ T3619] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.74: corrupted in-inode xattr: invalid ea_ino [ 33.142700][ T3619] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.74: couldn't read orphan inode 15 (err -117) [ 33.156429][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.169562][ T3619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.489265][ T3665] syz.3.94[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.489710][ T3665] syz.3.94[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.508208][ T3666] SET target dimension over the limit! [ 33.525180][ T3665] syz.3.94[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.728100][ T3679] loop3: detected capacity change from 0 to 8192 [ 33.954722][ T3709] program syz.0.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.960786][ T3704] bridge_slave_0: left allmulticast mode [ 33.969576][ T3704] bridge_slave_0: left promiscuous mode [ 33.969631][ T3709] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 33.975343][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.993326][ T3704] bridge_slave_1: left allmulticast mode [ 33.999029][ T3704] bridge_slave_1: left promiscuous mode [ 34.004879][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.014435][ T3704] bond0: (slave bond_slave_0): Releasing backup interface [ 34.024958][ T3704] bond0: (slave bond_slave_1): Releasing backup interface [ 34.037652][ T3704] team0: Port device team_slave_0 removed [ 34.046910][ T3704] team0: Port device team_slave_1 removed [ 34.053674][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.061178][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.069747][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.077184][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.097887][ T3712] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 34.105688][ T3712] netlink: 2 bytes leftover after parsing attributes in process `syz.1.111'. [ 34.114494][ T3712] team0: entered promiscuous mode [ 34.125496][ T3712] bridge0: port 1(team0) entered blocking state [ 34.131822][ T3712] bridge0: port 1(team0) entered disabled state [ 34.142312][ T3712] team0: entered allmulticast mode [ 34.145493][ T3714] loop4: detected capacity change from 0 to 256 [ 34.148825][ T3712] bridge0: port 1(team0) entered blocking state [ 34.159989][ T3712] bridge0: port 1(team0) entered forwarding state [ 34.168738][ T3711] netlink: 'syz.0.114': attribute type 5 has an invalid length. [ 34.198734][ T3422] bridge0: port 1(team0) entered disabled state [ 34.226724][ T3720] loop0: detected capacity change from 0 to 2048 [ 34.252397][ T3720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.306375][ T3734] loop2: detected capacity change from 0 to 512 [ 34.318167][ T3734] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.123: bg 0: block 393: padding at end of block bitmap is not set [ 34.343463][ T3734] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 34.381341][ T3734] EXT4-fs (loop2): 2 truncates cleaned up [ 34.385852][ T3744] loop4: detected capacity change from 0 to 512 [ 34.391000][ T3734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.408161][ T3744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.425133][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.436351][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.449314][ T3746] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 34.461598][ T3744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.475838][ T3744] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.496239][ T3750] loop1: detected capacity change from 0 to 512 [ 34.508420][ T3753] netlink: 284 bytes leftover after parsing attributes in process `syz.2.131'. [ 34.540378][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.555748][ T3750] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.570744][ T3750] capability: warning: `syz.1.132' uses 32-bit capabilities (legacy support in use) [ 34.586680][ T3744] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: block 32: comm syz.4.129: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.620856][ T3744] EXT4-fs error (device loop4): ext4_get_first_dir_block:3543: inode #12: comm syz.4.129: directory missing '.' [ 34.642994][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.655959][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.883340][ T3782] loop3: detected capacity change from 0 to 512 [ 34.935684][ T3782] EXT4-fs (loop3): too many log groups per flexible block group [ 34.943455][ T3782] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 34.956385][ T3782] EXT4-fs (loop3): mount failed [ 35.004900][ T3799] netlink: 'syz.3.149': attribute type 5 has an invalid length. [ 35.070252][ T3806] ipip0: entered promiscuous mode [ 35.075347][ T3806] ipip0: entered allmulticast mode [ 35.092585][ T3807] loop4: detected capacity change from 0 to 512 [ 35.100910][ T3807] journal_path: Lookup failure for './bus' [ 35.106830][ T3807] EXT4-fs: error: could not find journal device path [ 35.216240][ T3821] loop0: detected capacity change from 0 to 2048 [ 35.247569][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.263030][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.274839][ T3821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.301137][ T3831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 35.327934][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.406039][ T3841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 35.535222][ T3856] loop4: detected capacity change from 0 to 512 [ 35.543215][ T3856] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 35.559124][ T3856] netlink: 'syz.4.176': attribute type 6 has an invalid length. [ 35.566979][ T3856] netlink: 'syz.4.176': attribute type 5 has an invalid length. [ 35.604697][ T3859] syz.4.178 uses obsolete (PF_INET,SOCK_PACKET) [ 35.611603][ T3860] xt_connbytes: Forcing CT accounting to be enabled [ 35.618885][ T3860] x_tables: ip_tables: osf match: only valid for protocol 6 [ 35.954835][ T3897] sg_write: process 92 (syz.1.195) changed security contexts after opening file descriptor, this is not allowed. [ 35.988743][ T3897] program syz.1.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.027736][ T3907] netlink: 'syz.4.200': attribute type 5 has an invalid length. [ 36.175074][ T3933] lo speed is unknown, defaulting to 1000 [ 36.180969][ T3933] lo speed is unknown, defaulting to 1000 [ 36.187066][ T3933] lo speed is unknown, defaulting to 1000 [ 36.193216][ T3933] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.201781][ T3933] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 36.242238][ T3933] lo speed is unknown, defaulting to 1000 [ 36.256818][ T3933] lo speed is unknown, defaulting to 1000 [ 36.263196][ T3933] lo speed is unknown, defaulting to 1000 [ 36.270852][ T3933] lo speed is unknown, defaulting to 1000 [ 36.286037][ T3933] lo speed is unknown, defaulting to 1000 [ 36.323721][ T3941] netlink: 'syz.1.214': attribute type 11 has an invalid length. [ 36.347959][ T3951] syz.1.223[3951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.409486][ T3960] loop2: detected capacity change from 0 to 512 [ 36.433820][ T3960] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.227: corrupted in-inode xattr: invalid ea_ino [ 36.456278][ T3960] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.227: couldn't read orphan inode 15 (err -117) [ 36.482465][ T3970] SELinux: policydb version 0 does not match my version range 15-33 [ 36.496195][ T3970] SELinux: failed to load policy [ 36.514525][ T3960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.548084][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.649970][ T3991] __nla_validate_parse: 4 callbacks suppressed [ 36.649986][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 36.748336][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 36.748353][ T29] audit: type=1400 audit(1731701497.073:382): avc: denied { watch } for pid=3995 comm="syz.2.243" path="/39/file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.837679][ T29] audit: type=1326 audit(1731701497.133:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bd76e719 code=0x7ffc0000 [ 36.860967][ T29] audit: type=1326 audit(1731701497.133:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bd76e719 code=0x7ffc0000 [ 36.884293][ T29] audit: type=1326 audit(1731701497.133:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe6bd76e719 code=0x7ffc0000 [ 36.908019][ T29] audit: type=1326 audit(1731701497.133:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4002 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bd76e719 code=0x7ffc0000 [ 36.931367][ T29] audit: type=1326 audit(1731701497.153:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb956e6e719 code=0x7ffc0000 [ 36.954697][ T29] audit: type=1326 audit(1731701497.153:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb956e6e719 code=0x7ffc0000 [ 36.978832][ T29] audit: type=1326 audit(1731701497.153:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb956e6e719 code=0x7ffc0000 [ 37.002238][ T29] audit: type=1326 audit(1731701497.153:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb956e6e719 code=0x7ffc0000 [ 37.025741][ T29] audit: type=1326 audit(1731701497.153:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb956e6e719 code=0x7ffc0000 [ 37.172992][ T4041] loop0: detected capacity change from 0 to 512 [ 37.173031][ T4039] lo speed is unknown, defaulting to 1000 [ 37.179955][ T4041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.207382][ T4041] EXT4-fs (loop0): filesystem is read-only [ 37.213390][ T4041] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.226555][ T4041] EXT4-fs (loop0): filesystem is read-only [ 37.232383][ T4041] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.262012][ T4041] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.264: bg 0: block 64: padding at end of block bitmap is not set [ 37.274537][ T4044] program syz.3.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.292431][ T4041] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.328962][ T4041] EXT4-fs (loop0): 1 orphan inode deleted [ 37.341055][ T4056] Illegal XDP return value 4294967294 on prog (id 103) dev N/A, expect packet loss! [ 37.354893][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.414840][ T4062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.274'. [ 37.428837][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.439259][ T4062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.508401][ T4068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.277'. [ 37.518577][ T4068] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.525867][ T4068] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.597667][ T4080] loop3: detected capacity change from 0 to 512 [ 37.618242][ T4085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'. [ 37.627279][ T4085] netlink: 72 bytes leftover after parsing attributes in process `syz.0.285'. [ 37.645820][ T4080] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.678381][ T4080] EXT4-fs (loop3): mount failed [ 37.689806][ T4096] SELinux: failed to load policy [ 37.940516][ T4127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'. [ 37.970149][ T4129] loop1: detected capacity change from 0 to 512 [ 38.020960][ T4136] loop2: detected capacity change from 0 to 512 [ 38.024616][ T4129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.039826][ T4129] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.055555][ T1047] kernel write not supported for file /snd/seq (pid: 1047 comm: kworker/0:2) [ 38.096179][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.128199][ T4136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.150837][ T4136] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.231315][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.271041][ T4163] loop1: detected capacity change from 0 to 128 [ 38.313096][ T4169] loop3: detected capacity change from 0 to 256 [ 38.407586][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 38.422162][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.506139][ T4198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 38.545925][ T4203] loop3: detected capacity change from 0 to 128 [ 38.575948][ T4205] loop2: detected capacity change from 0 to 128 [ 38.618054][ T4211] loop0: detected capacity change from 0 to 512 [ 38.647482][ T4215] loop3: detected capacity change from 0 to 2048 [ 38.657281][ T4211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.695245][ T4211] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.723775][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.727318][ T4226] loop4: detected capacity change from 0 to 512 [ 38.743257][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.797138][ T4226] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.347: corrupted in-inode xattr: invalid ea_ino [ 38.812066][ T4226] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.347: couldn't read orphan inode 15 (err -117) [ 38.825276][ T4226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.857000][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.858362][ T4226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.902878][ T4241] loop3: detected capacity change from 0 to 256 [ 38.942934][ T4248] loop0: detected capacity change from 0 to 128 [ 39.078408][ T4267] tipc: Failed to obtain node identity [ 39.083907][ T4267] tipc: Enabling of bearer rejected, failed to enable media [ 39.280461][ T4279] loop3: detected capacity change from 0 to 512 [ 39.296765][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.309575][ T4279] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.333159][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.353796][ T4283] loop3: detected capacity change from 0 to 512 [ 39.372076][ T4283] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.371: corrupted in-inode xattr: invalid ea_ino [ 39.385656][ T4283] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.371: couldn't read orphan inode 15 (err -117) [ 39.398099][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.511197][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.531563][ T4286] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 39.538097][ T4286] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 39.545595][ T4286] vhci_hcd vhci_hcd.0: Device attached [ 39.552178][ T4287] vhci_hcd: connection closed [ 39.552335][ T11] vhci_hcd: stop threads [ 39.561346][ T11] vhci_hcd: release socket [ 39.565791][ T11] vhci_hcd: disconnect device [ 39.627765][ T4290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.373'. [ 39.636678][ T4290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.373'. [ 39.683752][ T4296] bpf_get_probe_write_proto: 5 callbacks suppressed [ 39.683765][ T4296] syz.1.376[4296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.690710][ T4296] syz.1.376[4296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.702109][ T4296] syz.1.376[4296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.828668][ T4299] tipc: Failed to obtain node identity [ 39.845405][ T4299] tipc: Enabling of bearer rejected, failed to enable media [ 40.040920][ T4320] netlink: 'syz.0.387': attribute type 13 has an invalid length. [ 40.066372][ T4320] syz_tun: refused to change device tx_queue_len [ 40.072744][ T4320] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 40.250616][ T4353] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.274189][ T4353] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 40.372146][ T4378] tun0: tun_chr_ioctl cmd 1074025677 [ 40.381116][ T4378] tun0: linktype set to 774 [ 40.420207][ T4375] lo speed is unknown, defaulting to 1000 [ 40.482464][ T4393] loop0: detected capacity change from 0 to 512 [ 40.496793][ T4390] netlink: 'syz.1.430': attribute type 13 has an invalid length. [ 40.509463][ T4390] syz_tun: refused to change device tx_queue_len [ 40.515867][ T4390] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 40.579045][ T4393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.594974][ T4393] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.615581][ T4393] EXT4-fs warning (device loop0): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 40.676792][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.755590][ T4421] lo speed is unknown, defaulting to 1000 [ 40.836558][ T4433] loop1: detected capacity change from 0 to 512 [ 40.845994][ T4433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.865362][ T4433] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.882213][ T4433] EXT4-fs warning (device loop1): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 40.902474][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.977607][ T4457] ip6erspan0: entered promiscuous mode [ 40.983085][ T4457] ip6erspan0: entered allmulticast mode [ 41.060369][ T4466] loop0: detected capacity change from 0 to 128 [ 41.114544][ T4474] dummy0: entered promiscuous mode [ 41.220232][ T4482] loop0: detected capacity change from 0 to 512 [ 41.231149][ T4482] ======================================================= [ 41.231149][ T4482] WARNING: The mand mount option has been deprecated and [ 41.231149][ T4482] and is ignored by this kernel. Remove the mand [ 41.231149][ T4482] option from the mount to silence this warning. [ 41.231149][ T4482] ======================================================= [ 41.275924][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.289834][ T4482] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.319895][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.342553][ T4497] loop0: detected capacity change from 0 to 512 [ 41.356325][ T4497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.368959][ T4497] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.382584][ T4497] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.474: bg 0: block 248: padding at end of block bitmap is not set [ 41.397178][ T4497] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.474: Failed to acquire dquot type 1 [ 41.415536][ T4497] syz.0.474 (4497) used greatest stack depth: 10304 bytes left [ 41.423801][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.443654][ T4501] geneve0: entered allmulticast mode [ 41.531257][ T4511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.553648][ T4511] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 41.565190][ T4511] batman_adv: batadv0: Adding interface: ip6gretap1 [ 41.571801][ T4511] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.597387][ T4511] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 41.699554][ T4536] loop4: detected capacity change from 0 to 512 [ 41.718464][ T4536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.737598][ T4536] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.744826][ T4536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.484: bg 0: block 248: padding at end of block bitmap is not set [ 41.760221][ T4536] __quota_error: 78 callbacks suppressed [ 41.760238][ T4536] Quota error (device loop4): write_blk: dquota write failed [ 41.773375][ T4536] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 41.783332][ T4536] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.484: Failed to acquire dquot type 1 [ 41.795297][ T4536] EXT4-fs (loop4): 1 truncate cleaned up [ 41.801570][ T4536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.815730][ T4536] syz.4.484 (4536) used greatest stack depth: 9352 bytes left [ 41.834471][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.845536][ T4545] loop2: detected capacity change from 0 to 128 [ 41.851829][ T29] audit: type=1400 audit(1731701502.173:466): avc: denied { listen } for pid=4546 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 41.902994][ T29] audit: type=1326 audit(1731701502.223:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 41.926334][ T29] audit: type=1326 audit(1731701502.223:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 41.953232][ T29] audit: type=1326 audit(1731701502.273:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 41.976596][ T29] audit: type=1326 audit(1731701502.273:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 41.999965][ T29] audit: type=1326 audit(1731701502.283:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 42.033303][ T29] audit: type=1326 audit(1731701502.353:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 42.056688][ T29] audit: type=1326 audit(1731701502.383:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f56ce719 code=0x7ffc0000 [ 42.119257][ T4554] loop4: detected capacity change from 0 to 764 [ 42.128118][ T4554] Symlink component flag not implemented [ 42.135574][ T4554] Symlink component flag not implemented (129) [ 42.142536][ T4554] rock: directory entry would overflow storage [ 42.148789][ T4554] rock: sig=0x4f50, size=4, remaining=3 [ 42.154527][ T4554] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 42.229175][ T4566] lo speed is unknown, defaulting to 1000 [ 42.252732][ T4571] tap0: tun_chr_ioctl cmd 3489698877 [ 42.271206][ T4575] __nla_validate_parse: 10 callbacks suppressed [ 42.271217][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 42.318154][ T4580] loop2: detected capacity change from 0 to 256 [ 42.440625][ T4593] loop0: detected capacity change from 0 to 764 [ 42.455582][ T4593] Symlink component flag not implemented [ 42.461295][ T4593] Symlink component flag not implemented (129) [ 42.470807][ T4595] ip6erspan0: entered promiscuous mode [ 42.476384][ T4595] ip6erspan0: entered allmulticast mode [ 42.483018][ T4593] rock: directory entry would overflow storage [ 42.489248][ T4593] rock: sig=0x4f50, size=4, remaining=3 [ 42.495114][ T4593] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 42.534354][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 42.691798][ T4613] lo speed is unknown, defaulting to 1000 [ 42.805150][ T4626] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 42.849613][ T4634] loop0: detected capacity change from 0 to 512 [ 42.859707][ T4634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.877550][ T4634] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.886420][ T4634] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.529: bg 0: block 248: padding at end of block bitmap is not set [ 42.905516][ T4634] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.529: Failed to acquire dquot type 1 [ 42.918636][ T4634] EXT4-fs (loop0): 1 truncate cleaned up [ 42.933593][ T4644] netlink: 256 bytes leftover after parsing attributes in process `syz.2.533'. [ 42.944608][ T4634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.992589][ T4650] netlink: 'syz.3.536': attribute type 4 has an invalid length. [ 43.016432][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.058062][ T4660] usb usb7: selecting invalid altsetting 6 [ 43.080725][ T4662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.542'. [ 43.089651][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.542'. [ 43.098605][ T4662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.542'. [ 43.106357][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.113158][ T4662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.542'. [ 43.134727][ T4667] loop0: detected capacity change from 0 to 512 [ 43.139740][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.164315][ T4667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.176987][ T4667] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.193086][ T4671] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 43.230643][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.254699][ T4677] netlink: 72 bytes leftover after parsing attributes in process `syz.3.550'. [ 43.291612][ T4684] netlink: 'syz.2.552': attribute type 4 has an invalid length. [ 43.313725][ T4688] usb usb7: selecting invalid altsetting 6 [ 43.348821][ T4692] syz.2.554[4692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.348963][ T4692] syz.2.554[4692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.381816][ T4692] syz.2.554[4692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.442650][ T4702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.559'. [ 43.462914][ T4702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 43.560827][ T4720] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.640190][ T4732] syz.1.571[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.640271][ T4732] syz.1.571[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.657392][ T4732] syz.1.571[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.748988][ T4746] program syz.1.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.855243][ T4757] loop1: detected capacity change from 0 to 512 [ 43.878158][ T4757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.908811][ T4757] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.969701][ T4776] smc: net device bond0 applied user defined pnetid SYZ0 [ 43.977006][ T4776] smc: net device bond0 erased user defined pnetid SYZ0 [ 44.019838][ T4780] loop2: detected capacity change from 0 to 1024 [ 44.031480][ T4780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.066504][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.072197][ T4780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.092546][ T4780] process 'syz.2.592' launched './file0/file0' with NULL argv: empty string added [ 44.137900][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.155190][ T4799] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.250461][ T4809] loop1: detected capacity change from 0 to 1024 [ 44.296642][ T4809] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.319804][ T4818] loop4: detected capacity change from 0 to 512 [ 44.357936][ T4818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.381745][ T4818] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.402605][ T4809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.468862][ T4829] loop3: detected capacity change from 0 to 512 [ 44.496223][ T4829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.517340][ T4829] EXT4-fs (loop3): 1 truncate cleaned up [ 44.518163][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.523490][ T4829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.546535][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.559062][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.652658][ T4850] mmap: syz.0.623 (4850) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.695308][ T4854] smc: net device bond0 applied user defined pnetid SYZ0 [ 44.703658][ T4854] smc: net device bond0 erased user defined pnetid SYZ0 [ 44.754324][ T4858] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.862801][ T4879] loop2: detected capacity change from 0 to 256 [ 44.937081][ T4879] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.972585][ T4892] loop4: detected capacity change from 0 to 1024 [ 44.983883][ T4892] EXT4-fs: Ignoring removed bh option [ 45.010848][ T4892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.051380][ T4892] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.083771][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.196487][ T3016] ================================================================== [ 46.201096][ T4994] loop2: detected capacity change from 0 to 128 [ 46.204600][ T3016] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 46.204639][ T3016] [ 46.221535][ T3016] write to 0xffff888103a7a3d8 of 4 bytes by task 3391 on cpu 1: [ 46.229175][ T3016] inode_set_ctime_current+0x35/0x50 [ 46.234477][ T3016] shmem_unlink+0x114/0x180 [ 46.238994][ T3016] vfs_unlink+0x275/0x430 [ 46.243343][ T3016] do_unlinkat+0x236/0x4c0 [ 46.247772][ T3016] __x64_sys_unlink+0x2e/0x40 [ 46.252487][ T3016] x64_sys_call+0x280f/0x2d60 [ 46.257193][ T3016] do_syscall_64+0xc9/0x1c0 [ 46.261717][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.267666][ T3016] [ 46.270002][ T3016] read to 0xffff888103a7a3d8 of 4 bytes by task 3016 on cpu 0: [ 46.277544][ T3016] atime_needs_update+0x339/0x3e0 [ 46.282596][ T3016] touch_atime+0x4a/0x350 [ 46.286969][ T3016] do_readlinkat+0x12b/0x210 [ 46.291606][ T3016] __x64_sys_readlink+0x47/0x60 [ 46.296460][ T3016] x64_sys_call+0x13c3/0x2d60 [ 46.301139][ T3016] do_syscall_64+0xc9/0x1c0 [ 46.305661][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.311566][ T3016] [ 46.313882][ T3016] value changed: 0x1b9a717b -> 0x1f2df87c [ 46.319589][ T3016] [ 46.321926][ T3016] Reported by Kernel Concurrency Sanitizer on: [ 46.328084][ T3016] CPU: 0 UID: 0 PID: 3016 Comm: udevd Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 46.338317][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.348366][ T3016] ==================================================================