last executing test programs: 3.875508311s ago: executing program 3 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 3.771793372s ago: executing program 3 (id=196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 3.208845001s ago: executing program 2 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000501b4d006403a293d942a07fc827309fc7eaeb27439c3f4c73009324991ae9c81afeaed693990418947b1b7de4"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x318, 0x100000c, 0x0, 0x1c0, 0xc0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 2.977864884s ago: executing program 3 (id=204): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x81, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) 2.935998155s ago: executing program 3 (id=206): socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.846912597s ago: executing program 3 (id=208): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 2.782937497s ago: executing program 1 (id=209): socket(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0xc56, 0x0) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0xfd1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") 2.675199109s ago: executing program 3 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) 2.303069395s ago: executing program 0 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "fbffffffffffffff", "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r3, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1000000000000054) close_range(r2, r3, 0x0) 2.186074787s ago: executing program 1 (id=216): mkdirat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x430001, 0x1) timer_create(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003380)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64, @ANYRES32=0x0, @ANYRES8=r0], 0x21b0}}, 0x4c000) 2.173445717s ago: executing program 0 (id=217): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f00000006c0)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") truncate(0x0, 0x8) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) 2.014359299s ago: executing program 4 (id=220): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r1) 1.94076135s ago: executing program 1 (id=221): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = fsmount(r1, 0x0, 0x0) fchdir(r5) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.93495958s ago: executing program 0 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) 1.888274021s ago: executing program 0 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x54, 0x2000, 0x0, {0x0, 0xa}, {0x1, 0xb}, @period={0x59, 0xa, 0x1, 0x0, 0x400, {0x2, 0x1, 0x10, 0x5}, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.885728451s ago: executing program 4 (id=224): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.845829302s ago: executing program 1 (id=225): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x3913, &(0x7f0000000080)={0x0, 0x6fa4, 0x200, 0x2, 0x1bf}) io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0x826e, 0x800, 0x0, 0x55, 0x0, r0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x180, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xfffffffffdffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe9ba1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00'}, 0x18) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x0, 0xfff, 0x80, 0x5, 0x7}) 1.801359972s ago: executing program 4 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) 1.537504446s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x37, 0x2d, 0x4e, 0x4e, 0x2f]}}}, 0x4e}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x167) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240), 0x0, 0x7abff, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x0, 0x0, 0x9, 0x3}) 1.476319878s ago: executing program 4 (id=228): mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80003, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000"], 0x64}}, 0x0) 1.474070418s ago: executing program 2 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 1.420594578s ago: executing program 4 (id=230): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40400d1) 1.405670308s ago: executing program 2 (id=231): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x2, 0x10a5, 0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.117214283s ago: executing program 1 (id=232): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @ib={0x1b, 0x0, 0x7ff, {"cba8711ef938102e810100dfffa58ca0"}, 0xd3f7, 0x8b8, 0x101}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000180)='n', 0x1, 0x8000c61) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) fallocate(r2, 0x0, 0x0, 0x8000c62) io_setup(0x15, &(0x7f0000000240)=0x0) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 1.000865135s ago: executing program 0 (id=233): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 763.827678ms ago: executing program 0 (id=234): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 359.958954ms ago: executing program 4 (id=235): r0 = getpid() capset(&(0x7f0000000640)={0x20080522, r0}, &(0x7f0000000bc0)={0x4, 0x4466, 0xfffffffe, 0x6, 0x0, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0x144, {0x0}}, 0x10) 314.779225ms ago: executing program 1 (id=236): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e00"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) 40.79733ms ago: executing program 2 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 34.636877][ T29] audit: type=1400 audit(1749861705.774:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.638051][ T3298] cgroup: Unknown subsys name 'net' [ 34.659620][ T29] audit: type=1400 audit(1749861705.774:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.687056][ T29] audit: type=1400 audit(1749861705.814:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.814665][ T3298] cgroup: Unknown subsys name 'cpuset' [ 34.820941][ T3298] cgroup: Unknown subsys name 'rlimit' [ 34.921677][ T29] audit: type=1400 audit(1749861706.054:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.945178][ T29] audit: type=1400 audit(1749861706.054:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.965776][ T29] audit: type=1400 audit(1749861706.054:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.986275][ T29] audit: type=1400 audit(1749861706.054:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.995358][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.006593][ T29] audit: type=1400 audit(1749861706.054:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.039990][ T29] audit: type=1400 audit(1749861706.054:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.063366][ T29] audit: type=1400 audit(1749861706.164:71): avc: denied { relabelto } for pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.109389][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.300496][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.351481][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 36.379430][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 36.436499][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.447600][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.454757][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.461972][ T3312] bridge_slave_0: entered allmulticast mode [ 36.469388][ T3312] bridge_slave_0: entered promiscuous mode [ 36.476253][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.483508][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.490943][ T3312] bridge_slave_1: entered allmulticast mode [ 36.497343][ T3312] bridge_slave_1: entered promiscuous mode [ 36.525659][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.560215][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.567421][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.574800][ T3309] bridge_slave_0: entered allmulticast mode [ 36.581181][ T3309] bridge_slave_0: entered promiscuous mode [ 36.593531][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.615202][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.622372][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.629546][ T3309] bridge_slave_1: entered allmulticast mode [ 36.636220][ T3309] bridge_slave_1: entered promiscuous mode [ 36.643475][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.657899][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.664997][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.672669][ T3308] bridge_slave_0: entered allmulticast mode [ 36.679268][ T3308] bridge_slave_0: entered promiscuous mode [ 36.703456][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.710602][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.717923][ T3308] bridge_slave_1: entered allmulticast mode [ 36.724367][ T3308] bridge_slave_1: entered promiscuous mode [ 36.743497][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.753448][ T3312] team0: Port device team_slave_0 added [ 36.767243][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.774389][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.781610][ T3324] bridge_slave_0: entered allmulticast mode [ 36.788041][ T3324] bridge_slave_0: entered promiscuous mode [ 36.795121][ T3312] team0: Port device team_slave_1 added [ 36.800866][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.807988][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.815369][ T3324] bridge_slave_1: entered allmulticast mode [ 36.821777][ T3324] bridge_slave_1: entered promiscuous mode [ 36.829060][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.867850][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.878258][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.898325][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.905341][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.931330][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.947173][ T3309] team0: Port device team_slave_0 added [ 36.954009][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.967680][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.974843][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.982001][ T3316] bridge_slave_0: entered allmulticast mode [ 36.988589][ T3316] bridge_slave_0: entered promiscuous mode [ 36.995509][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.002554][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.028553][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.040113][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.049759][ T3309] team0: Port device team_slave_1 added [ 37.060650][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.067853][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.075123][ T3316] bridge_slave_1: entered allmulticast mode [ 37.081568][ T3316] bridge_slave_1: entered promiscuous mode [ 37.114399][ T3308] team0: Port device team_slave_0 added [ 37.127148][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.136939][ T3324] team0: Port device team_slave_0 added [ 37.142931][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.149935][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.175988][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.187385][ T3308] team0: Port device team_slave_1 added [ 37.198785][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.214261][ T3324] team0: Port device team_slave_1 added [ 37.220285][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.227265][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.253297][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.280952][ T3312] hsr_slave_0: entered promiscuous mode [ 37.287089][ T3312] hsr_slave_1: entered promiscuous mode [ 37.306450][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.313613][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.339745][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.356336][ T3316] team0: Port device team_slave_0 added [ 37.362315][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.369321][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.395348][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.406487][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.413470][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.439459][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.460166][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.467164][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.493174][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.504685][ T3316] team0: Port device team_slave_1 added [ 37.539608][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.546685][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.572683][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.586402][ T3309] hsr_slave_0: entered promiscuous mode [ 37.592400][ T3309] hsr_slave_1: entered promiscuous mode [ 37.598496][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.606179][ T3309] Cannot create hsr debugfs directory [ 37.618591][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.625596][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.651569][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.679930][ T3324] hsr_slave_0: entered promiscuous mode [ 37.686097][ T3324] hsr_slave_1: entered promiscuous mode [ 37.691974][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.699748][ T3324] Cannot create hsr debugfs directory [ 37.735022][ T3308] hsr_slave_0: entered promiscuous mode [ 37.741081][ T3308] hsr_slave_1: entered promiscuous mode [ 37.747094][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.754663][ T3308] Cannot create hsr debugfs directory [ 37.770578][ T3316] hsr_slave_0: entered promiscuous mode [ 37.776747][ T3316] hsr_slave_1: entered promiscuous mode [ 37.782614][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.790231][ T3316] Cannot create hsr debugfs directory [ 37.974492][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.982838][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.996905][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.005920][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.025918][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.037627][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.047901][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.059356][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.082068][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.091258][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.100699][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.111644][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.144462][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.155262][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.170546][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.189511][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.203787][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.228718][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.247824][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.255014][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.264467][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.271584][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.285882][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.295159][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.310004][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.324788][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.349258][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.379767][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.393202][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.402921][ T567] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.410068][ T567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.419491][ T567] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.426580][ T567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.461307][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.480078][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.497735][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.504886][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.514131][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.521272][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.537845][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.556613][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.578193][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.585375][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.606767][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.613983][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.633485][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.676846][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.686622][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.693749][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.703093][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.710256][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.730835][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.741284][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.784578][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.811857][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.893984][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.906450][ T3312] veth0_vlan: entered promiscuous mode [ 38.923314][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.948200][ T3312] veth1_vlan: entered promiscuous mode [ 38.971973][ T3312] veth0_macvtap: entered promiscuous mode [ 38.996609][ T3312] veth1_macvtap: entered promiscuous mode [ 39.021744][ T3309] veth0_vlan: entered promiscuous mode [ 39.034600][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.053127][ T3309] veth1_vlan: entered promiscuous mode [ 39.064109][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.072761][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.081676][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.090509][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.099343][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.131109][ T3308] veth0_vlan: entered promiscuous mode [ 39.141154][ T3324] veth0_vlan: entered promiscuous mode [ 39.156065][ T3308] veth1_vlan: entered promiscuous mode [ 39.170958][ T3316] veth0_vlan: entered promiscuous mode [ 39.185965][ T3316] veth1_vlan: entered promiscuous mode [ 39.193109][ T3324] veth1_vlan: entered promiscuous mode [ 39.207642][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.220785][ T3308] veth0_macvtap: entered promiscuous mode [ 39.242379][ T3324] veth0_macvtap: entered promiscuous mode [ 39.256466][ T3308] veth1_macvtap: entered promiscuous mode [ 39.264032][ T3309] veth0_macvtap: entered promiscuous mode [ 39.280415][ T3316] veth0_macvtap: entered promiscuous mode [ 39.291886][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.302460][ T3324] veth1_macvtap: entered promiscuous mode [ 39.310473][ T3309] veth1_macvtap: entered promiscuous mode [ 39.318397][ T3316] veth1_macvtap: entered promiscuous mode [ 39.331976][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.341237][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.357691][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.366310][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.375145][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.383895][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.392622][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.414767][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.423477][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.431380][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.440175][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.448933][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.457777][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.495476][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.506608][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.515499][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.524344][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.533105][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.557904][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.577790][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.586593][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.595367][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.597070][ T3483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.604184][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.647024][ T3484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.664368][ T3482] loop3: detected capacity change from 0 to 2048 [ 39.696844][ T3484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.716790][ T3482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.737536][ T3484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.752046][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 39.752061][ T29] audit: type=1400 audit(1749861710.884:101): avc: denied { open } for pid=3491 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.754560][ T3482] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.758273][ T29] audit: type=1400 audit(1749861710.884:102): avc: denied { kernel } for pid=3491 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.809650][ T29] audit: type=1400 audit(1749861710.884:103): avc: denied { mount } for pid=3481 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.816811][ C0] hrtimer: interrupt took 29005 ns [ 39.831067][ T29] audit: type=1400 audit(1749861710.934:104): avc: denied { create } for pid=3481 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.856449][ T29] audit: type=1400 audit(1749861710.934:105): avc: denied { write } for pid=3481 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.877934][ T3477] 8021q: VLANs not supported on tunl0 [ 39.881626][ T29] audit: type=1400 audit(1749861711.004:106): avc: denied { add_name } for pid=3481 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.903836][ T29] audit: type=1400 audit(1749861711.004:107): avc: denied { create } for pid=3481 comm="syz.3.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.923834][ T29] audit: type=1400 audit(1749861711.004:108): avc: denied { read write } for pid=3481 comm="syz.3.4" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.946187][ T29] audit: type=1400 audit(1749861711.004:109): avc: denied { open } for pid=3481 comm="syz.3.4" path="/0/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.973981][ T29] audit: type=1400 audit(1749861711.114:110): avc: denied { create } for pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.029738][ T3498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.112392][ T3499] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 345: padding at end of block bitmap is not set [ 40.230370][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 668 with error 117 [ 40.243075][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.243075][ T31] [ 40.327095][ T3515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9'. [ 40.407788][ T3520] loop4: detected capacity change from 0 to 1024 [ 40.416173][ T3520] ======================================================= [ 40.416173][ T3520] WARNING: The mand mount option has been deprecated and [ 40.416173][ T3520] and is ignored by this kernel. Remove the mand [ 40.416173][ T3520] option from the mount to silence this warning. [ 40.416173][ T3520] ======================================================= [ 40.494161][ T3520] EXT4-fs: Ignoring removed nobh option [ 40.499835][ T3520] EXT4-fs: Ignoring removed bh option [ 40.527748][ T3523] netlink: 'syz.2.12': attribute type 21 has an invalid length. [ 40.544899][ T3520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.595551][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.608231][ T3499] syz.3.4 (3499) used greatest stack depth: 10632 bytes left [ 40.683145][ T3482] syz.3.4 (3482) used greatest stack depth: 6064 bytes left [ 40.694580][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.907715][ T3534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.959344][ T3531] loop3: detected capacity change from 0 to 1024 [ 40.966373][ T3531] EXT4-fs: Ignoring removed orlov option [ 40.972089][ T3531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.986783][ T3531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.006584][ T3484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.186425][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.328036][ T3543] vlan2: entered allmulticast mode [ 41.438354][ T3549] netlink: 'wޣ': attribute type 4 has an invalid length. [ 41.450840][ T3549] netlink: 'wޣ': attribute type 4 has an invalid length. [ 41.561690][ T3555] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.742882][ T3534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.807313][ T3567] loop4: detected capacity change from 0 to 128 [ 41.898491][ T3579] syz.4.25: attempt to access beyond end of device [ 41.898491][ T3579] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 41.912414][ T3579] syz.4.25: attempt to access beyond end of device [ 41.912414][ T3579] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 41.946002][ T3579] syz.4.25: attempt to access beyond end of device [ 41.946002][ T3579] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 41.959555][ T3579] syz.4.25: attempt to access beyond end of device [ 41.959555][ T3579] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 41.973320][ T3579] syz.4.25: attempt to access beyond end of device [ 41.973320][ T3579] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 41.986868][ T3579] syz.4.25: attempt to access beyond end of device [ 41.986868][ T3579] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 42.000554][ T3579] syz.4.25: attempt to access beyond end of device [ 42.000554][ T3579] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 42.014096][ T3579] syz.4.25: attempt to access beyond end of device [ 42.014096][ T3579] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 42.028200][ T3579] syz.4.25: attempt to access beyond end of device [ 42.028200][ T3579] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 42.041712][ T3579] syz.4.25: attempt to access beyond end of device [ 42.041712][ T3579] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 42.104008][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 42.115562][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 42.129891][ T3592] bond0: (slave bond_slave_1): Releasing backup interface [ 42.148909][ T3534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.190571][ T3594] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 42.208487][ T3594] vlan2: entered promiscuous mode [ 42.213602][ T3594] veth1: entered promiscuous mode [ 42.218853][ T3594] vlan2: entered allmulticast mode [ 42.224082][ T3594] veth1: entered allmulticast mode [ 42.241538][ T3534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.321437][ T3534] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.341927][ T3534] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.370605][ T3534] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.385246][ T3534] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.439637][ T3605] mmap: syz.0.39 (3605) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.522450][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 42.540694][ T3611] hsr_slave_0 (unregistering): left promiscuous mode [ 42.624988][ T3484] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.642259][ T3622] netlink: 27 bytes leftover after parsing attributes in process `syz.4.44'. [ 42.655561][ T3484] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.667797][ T3484] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.692251][ T3484] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.723895][ T3630] loop4: detected capacity change from 0 to 1024 [ 42.756958][ T3630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.827493][ T3638] loop1: detected capacity change from 0 to 1024 [ 42.858638][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.872243][ T3638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.939901][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.955446][ T3641] openvswitch: netlink: Message has 6 unknown bytes. [ 44.396495][ T3656] sd 0:0:1:0: device reset [ 44.622384][ T3664] loop4: detected capacity change from 0 to 512 [ 44.662179][ T3664] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.699067][ T3664] EXT4-fs (loop4): 1 orphan inode deleted [ 44.705618][ T3664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.720608][ T3664] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.726993][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 44.749744][ T3678] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 44.755504][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 44.755524][ T29] audit: type=1326 audit(2000000000.280:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7e7dccd3df code=0x7ffc0000 [ 44.761354][ T3664] IPVS: stopping master sync thread 3678 ... [ 44.769883][ T3677] loop1: detected capacity change from 0 to 512 [ 44.802297][ T29] audit: type=1326 audit(2000000000.280:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069964e929 code=0x7ffc0000 [ 44.825529][ T29] audit: type=1326 audit(2000000000.280:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069964e929 code=0x7ffc0000 [ 44.849048][ T29] audit: type=1326 audit(2000000000.280:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f069964e929 code=0x7ffc0000 [ 44.872483][ T29] audit: type=1326 audit(2000000000.300:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7e7dcce9b7 code=0x7ffc0000 [ 44.895606][ T29] audit: type=1326 audit(2000000000.300:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e7dccd290 code=0x7ffc0000 [ 44.918800][ T29] audit: type=1326 audit(2000000000.300:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3676 comm="syz.1.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e7dcce52b code=0x7ffc0000 [ 44.950874][ T29] audit: type=1326 audit(2000000000.360:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069964e929 code=0x7ffc0000 [ 44.974274][ T29] audit: type=1326 audit(2000000000.360:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069964e929 code=0x7ffc0000 [ 44.997496][ T29] audit: type=1400 audit(2000000000.380:315): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.041838][ T3677] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.65: Failed to acquire dquot type 1 [ 45.056130][ T3684] tipc: Started in network mode [ 45.061226][ T3684] tipc: Node identity ac14140f, cluster identity 4711 [ 45.061188][ T3677] EXT4-fs (loop1): 1 truncate cleaned up [ 45.075069][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.075570][ T3684] tipc: New replicast peer: 0.0.255.255 [ 45.085770][ T3677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.090157][ T3684] tipc: Enabled bearer , priority 10 [ 45.102501][ T3677] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.109301][ T3690] tipc: Enabling of bearer rejected, failed to enable media [ 45.166144][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.212137][ T3692] : renamed from vlan1 (while UP) [ 45.258470][ T3698] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 45.288722][ T3698] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 45.495757][ T3713] geneve0: entered allmulticast mode [ 45.615352][ T3720] capability: warning: `syz.2.84' uses deprecated v2 capabilities in a way that may be insecure [ 45.779694][ T3732] loop1: detected capacity change from 0 to 1764 [ 45.934723][ T3732] ISOFS: Unable to identify CD-ROM format. [ 46.213750][ T3627] tipc: Node number set to 2886997007 [ 46.316419][ T3754] bridge: RTM_NEWNEIGH with invalid ether address [ 46.403704][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 46.413178][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 46.465244][ T3763] loop1: detected capacity change from 0 to 512 [ 46.473240][ T3763] ext2: Unknown parameter 'fowner>00000000000000000000' [ 46.498544][ T3763] netlink: 'syz.1.102': attribute type 13 has an invalid length. [ 46.531841][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 46.569917][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.577232][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.620820][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.631273][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.664718][ T3763] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.673164][ T3763] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.681806][ T3763] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.690275][ T3763] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.700490][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 46.709456][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.717166][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.742885][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.750550][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.772153][ T3776] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.106'. [ 46.781639][ T3776] netlink: zone id is out of range [ 46.786911][ T3776] netlink: zone id is out of range [ 46.792055][ T3776] netlink: zone id is out of range [ 46.798419][ T3776] netlink: zone id is out of range [ 46.803593][ T3776] netlink: del zone limit has 8 unknown bytes [ 46.909262][ T3785] netlink: 'syz.2.110': attribute type 4 has an invalid length. [ 46.938687][ T3780] tipc: Enabled bearer , priority 0 [ 46.995665][ T3779] tipc: Resetting bearer [ 47.019534][ T3779] tipc: Disabling bearer [ 47.035303][ T3788] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 47.043035][ T3788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.111'. [ 47.060517][ T3793] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 47.072876][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 47.073934][ T3788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 47.134814][ T3796] 9pnet_fd: Insufficient options for proto=fd [ 47.337541][ T3808] netlink: 112 bytes leftover after parsing attributes in process `syz.4.119'. [ 47.347163][ T3808] Zero length message leads to an empty skb [ 47.355744][ T2961] IPVS: starting estimator thread 0... [ 47.381978][ T3810] bridge: RTM_NEWNEIGH with invalid ether address [ 47.483798][ T3809] IPVS: using max 2352 ests per chain, 117600 per kthread [ 48.101920][ T3829] netlink: 'syz.4.124': attribute type 27 has an invalid length. [ 48.132757][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.139923][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.185673][ T3829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.197300][ T3829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.275741][ T3829] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.284909][ T3829] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.293966][ T3829] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.302920][ T3829] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.324135][ T3829] vlan2: left promiscuous mode [ 48.328981][ T3829] veth1: left promiscuous mode [ 48.333950][ T3829] vlan2: left allmulticast mode [ 48.338933][ T3829] veth1: left allmulticast mode [ 48.344184][ T3828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 48.356549][ T3828] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.364841][ T3828] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.373142][ T3828] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.381505][ T3828] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.393841][ T3828] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.402346][ T3828] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.410799][ T3828] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.419263][ T3828] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.489245][ T3836] loop4: detected capacity change from 0 to 1024 [ 48.512978][ T3836] EXT4-fs: Ignoring removed bh option [ 48.518654][ T3836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.530107][ T3840] process 'syz.3.128' launched './file0' with NULL argv: empty string added [ 48.562726][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.578214][ T3844] random: crng reseeded on system resumption [ 48.643240][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.790641][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 49.790656][ T29] audit: type=1326 audit(2000000005.310:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 49.841113][ T29] audit: type=1326 audit(2000000005.350:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 49.864484][ T29] audit: type=1326 audit(2000000005.350:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 49.887918][ T29] audit: type=1400 audit(2000000005.350:410): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.907792][ T29] audit: type=1326 audit(2000000005.350:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 49.931138][ T29] audit: type=1326 audit(2000000005.350:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 49.955297][ T29] audit: type=1326 audit(2000000005.350:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 49.978875][ T29] audit: type=1326 audit(2000000005.350:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 50.002175][ T29] audit: type=1326 audit(2000000005.350:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 50.025391][ T29] audit: type=1326 audit(2000000005.350:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7b5e929 code=0x7ffc0000 [ 50.062524][ T3868] @: renamed from vlan0 (while UP) [ 50.130184][ T3870] tipc: Started in network mode [ 50.135208][ T3870] tipc: Node identity ac14140f, cluster identity 4711 [ 50.143222][ T3870] tipc: New replicast peer: 255.255.255.83 [ 50.149166][ T3870] tipc: Enabled bearer , priority 10 [ 50.149480][ T3872] loop0: detected capacity change from 0 to 512 [ 50.162617][ T3872] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.199881][ T3872] EXT4-fs (loop0): 1 truncate cleaned up [ 50.208113][ T3872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.245074][ T3879] loop4: detected capacity change from 0 to 512 [ 50.246549][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.258232][ T3879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.579010][ T3888] loop0: detected capacity change from 0 to 512 [ 50.646701][ T3888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.663132][ T3879] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.679613][ T3888] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.703755][ T3879] EXT4-fs (loop4): 1 truncate cleaned up [ 50.711137][ T3879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.734614][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.767562][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.980323][ T3899] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.164380][ T3894] Set syz1 is full, maxelem 65536 reached [ 51.283745][ T9] tipc: Node number set to 2886997007 [ 51.432050][ T3917] __nla_validate_parse: 2 callbacks suppressed [ 51.432068][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 51.530334][ T3918] loop3: detected capacity change from 0 to 512 [ 51.564057][ T3918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.590082][ T3918] EXT4-fs (loop3): 1 truncate cleaned up [ 51.596666][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.943807][ T3927] loop9: detected capacity change from 0 to 7 [ 51.950631][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.958814][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.966753][ T3302] loop9: unable to read partition table [ 51.973004][ T3927] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.982276][ T3927] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.990257][ T3927] loop9: unable to read partition table [ 51.996208][ T3927] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 51.996208][ T3927] U) failed (rc=-5) [ 52.010774][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.018891][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.027367][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.036416][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.053995][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.065634][ T3302] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.216879][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.474686][ T3957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 52.498300][ T3959] loop3: detected capacity change from 0 to 2048 [ 52.532925][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.906535][ T3990] syz.0.174 uses obsolete (PF_INET,SOCK_PACKET) [ 53.007859][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.231115][ T4006] tipc: Started in network mode [ 53.236104][ T4006] tipc: Node identity 4, cluster identity 4711 [ 53.242382][ T4006] tipc: Node number set to 4 [ 53.547204][ T4018] loop4: detected capacity change from 0 to 512 [ 53.609292][ T4018] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.652904][ T4018] EXT4-fs (loop4): failed to initialize system zone (-117) [ 53.685609][ T4018] EXT4-fs (loop4): mount failed [ 54.059902][ T4032] netlink: 'syz.1.188': attribute type 21 has an invalid length. [ 54.060093][ T4030] loop4: detected capacity change from 0 to 512 [ 54.069320][ T4032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.188'. [ 54.088970][ T4030] journal_path: Non-blockdev passed as './bus' [ 54.095307][ T4030] EXT4-fs: error: could not find journal device path [ 54.105091][ T4033] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 54.183826][ T4035] netlink: 'syz.0.189': attribute type 21 has an invalid length. [ 54.191805][ T4035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.189'. [ 54.686275][ T4052] loop1: detected capacity change from 0 to 128 [ 54.747875][ T4055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 54.818799][ T4055] infiniband syz!: set active [ 54.823625][ T4055] infiniband syz!: added team_slave_0 [ 54.836277][ T4046] bio_check_eod: 101 callbacks suppressed [ 54.836296][ T4046] syz.1.193: attempt to access beyond end of device [ 54.836296][ T4046] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 54.862348][ T4055] RDS/IB: syz!: added [ 54.867746][ T4045] syz.1.193: attempt to access beyond end of device [ 54.867746][ T4045] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 54.884150][ T4055] smc: adding ib device syz! with port count 1 [ 54.890571][ T4055] smc: ib device syz! port 1 has pnetid [ 54.897100][ T4046] syz.1.193: attempt to access beyond end of device [ 54.897100][ T4046] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.918066][ T4046] syz.1.193: attempt to access beyond end of device [ 54.918066][ T4046] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.932193][ T4046] syz.1.193: attempt to access beyond end of device [ 54.932193][ T4046] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.945797][ T4046] syz.1.193: attempt to access beyond end of device [ 54.945797][ T4046] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.959145][ T4046] syz.1.193: attempt to access beyond end of device [ 54.959145][ T4046] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 54.982675][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 54.982729][ T29] audit: type=1326 audit(2000000010.500:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.019457][ T29] audit: type=1326 audit(2000000010.510:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.042904][ T29] audit: type=1326 audit(2000000010.510:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.066503][ T29] audit: type=1326 audit(2000000010.510:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.089852][ T29] audit: type=1326 audit(2000000010.510:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.113183][ T29] audit: type=1326 audit(2000000010.510:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.136557][ T29] audit: type=1326 audit(2000000010.530:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.159823][ T29] audit: type=1326 audit(2000000010.530:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.183352][ T29] audit: type=1326 audit(2000000010.530:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.206727][ T29] audit: type=1326 audit(2000000010.530:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31958ee929 code=0x7ffc0000 [ 55.260780][ T4063] netlink: 96 bytes leftover after parsing attributes in process `syz.2.200'. [ 55.448737][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 55.499492][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 55.537488][ T4073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 55.626831][ T4080] Cannot find add_set index 0 as target [ 55.665634][ T4077] loop1: detected capacity change from 0 to 512 [ 55.682879][ T4077] SELinux: security_context_str_to_sid (unconfined_u,errors=continue) failed with errno=-22 [ 55.699974][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 55.845960][ T4089] loop1: detected capacity change from 0 to 512 [ 55.877218][ T4089] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.014164][ T4089] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 56.040112][ T4089] System zones: 0-2, 18-18, 34-34 [ 56.110241][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.207761][ T4089] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.319768][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.372018][ T4114] loop0: detected capacity change from 0 to 256 [ 56.385599][ T4118] netlink: zone id is out of range [ 56.390795][ T4118] netlink: zone id is out of range [ 56.395984][ T4118] netlink: zone id is out of range [ 56.401111][ T4118] netlink: zone id is out of range [ 56.406268][ T4118] netlink: zone id is out of range [ 56.411393][ T4118] netlink: zone id is out of range [ 56.416545][ T4118] netlink: zone id is out of range [ 56.421670][ T4118] netlink: zone id is out of range [ 56.426917][ T4118] netlink: zone id is out of range [ 56.432041][ T4118] netlink: zone id is out of range [ 56.734196][ T4134] __nla_validate_parse: 9 callbacks suppressed [ 56.734216][ T4134] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.749532][ T4134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.986933][ T4139] tmpfs: Bad value for 'mpol' [ 57.043017][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 57.538760][ T4155] loop1: detected capacity change from 0 to 512 [ 57.652935][ T4155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.793833][ T4155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.829724][ T4162] loop0: detected capacity change from 0 to 1024 [ 57.855517][ T4155] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.867375][ T4162] EXT4-fs: Ignoring removed bh option [ 57.872868][ T4162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.984344][ T4155] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 9 with error 122 [ 57.996812][ T4155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.996812][ T4155] [ 58.036316][ T4162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.194256][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.820094][ T4166] ================================================================== [ 58.828253][ T4166] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 58.837692][ T4166] [ 58.840043][ T4166] read-write to 0xffff888100786d10 of 4 bytes by task 4162 on cpu 0: [ 58.848143][ T4166] __writeback_single_inode+0x1e3/0x7c0 [ 58.853750][ T4166] writeback_single_inode+0x167/0x3e0 [ 58.859167][ T4166] sync_inode_metadata+0x5b/0x90 [ 58.864144][ T4166] generic_buffers_fsync_noflush+0xd9/0x120 [ 58.870090][ T4166] ext4_sync_file+0x1ab/0x690 [ 58.874809][ T4166] vfs_fsync_range+0x10d/0x130 [ 58.879610][ T4166] ext4_buffered_write_iter+0x34f/0x3c0 [ 58.885208][ T4166] ext4_file_write_iter+0x383/0xf00 [ 58.890439][ T4166] iter_file_splice_write+0x5f2/0x970 [ 58.895864][ T4166] direct_splice_actor+0x153/0x2a0 [ 58.901035][ T4166] splice_direct_to_actor+0x30f/0x680 [ 58.906462][ T4166] do_splice_direct+0xda/0x150 [ 58.911279][ T4166] do_sendfile+0x380/0x650 [ 58.915745][ T4166] __x64_sys_sendfile64+0x105/0x150 [ 58.920988][ T4166] x64_sys_call+0xb39/0x2fb0 [ 58.925622][ T4166] do_syscall_64+0xd2/0x200 [ 58.930161][ T4166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.936180][ T4166] [ 58.938526][ T4166] read to 0xffff888100786d10 of 4 bytes by task 4166 on cpu 1: [ 58.946098][ T4166] generic_buffers_fsync_noflush+0x80/0x120 [ 58.952051][ T4166] ext4_sync_file+0x1ab/0x690 [ 58.956779][ T4166] vfs_fsync_range+0x10d/0x130 [ 58.961583][ T4166] ext4_buffered_write_iter+0x34f/0x3c0 [ 58.967177][ T4166] ext4_file_write_iter+0x383/0xf00 [ 58.972412][ T4166] iter_file_splice_write+0x5f2/0x970 [ 58.977838][ T4166] direct_splice_actor+0x153/0x2a0 [ 58.983000][ T4166] splice_direct_to_actor+0x30f/0x680 [ 58.988426][ T4166] do_splice_direct+0xda/0x150 [ 58.993678][ T4166] do_sendfile+0x380/0x650 [ 58.998140][ T4166] __x64_sys_sendfile64+0x105/0x150 [ 59.003383][ T4166] x64_sys_call+0xb39/0x2fb0 [ 59.008020][ T4166] do_syscall_64+0xd2/0x200 [ 59.012556][ T4166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.018489][ T4166] [ 59.020837][ T4166] value changed: 0x00000022 -> 0x00000000 [ 59.026595][ T4166] [ 59.028947][ T4166] Reported by Kernel Concurrency Sanitizer on: [ 59.035180][ T4166] CPU: 1 UID: 0 PID: 4166 Comm: syz.0.234 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 59.047528][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.057608][ T4166] ================================================================== [ 59.220853][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.