last executing test programs: 7.355131972s ago: executing program 2 (id=390): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 7.307926984s ago: executing program 2 (id=393): timer_create(0x1, 0x0, &(0x7f0000000340)=0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000e6ff0080000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) timer_gettime(r0, &(0x7f0000000380)) 7.237846755s ago: executing program 2 (id=396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0300"}) 7.134063437s ago: executing program 2 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 7.104577167s ago: executing program 2 (id=402): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) 6.878321661s ago: executing program 2 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 6.850226602s ago: executing program 32 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1.399810076s ago: executing program 5 (id=544): r0 = syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000001880)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x10042}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1.249802389s ago: executing program 5 (id=547): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 1.086987021s ago: executing program 4 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1.039762802s ago: executing program 4 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 962.168303ms ago: executing program 4 (id=553): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 839.752466ms ago: executing program 4 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') close_range(r3, 0xffffffffffffffff, 0x0) 752.846408ms ago: executing program 4 (id=557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 649.615219ms ago: executing program 4 (id=560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000240)=0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0xe, 0x4, 0x10203, 0x40, 0x9, 0x8001, 0xffffff94, 0x1, r2}, &(0x7f0000000100)=0x20) 535.654631ms ago: executing program 0 (id=564): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 460.399692ms ago: executing program 3 (id=567): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 419.876383ms ago: executing program 1 (id=569): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WNFumsSXCh7qUbRY0HtdkjGUbLoluylNLLQ92IsXKYKIBfHgTe8ei/+Af0VBi0VK0IOXyGxm022zm2zTbXbrfj4w4XlmZvM835l5nn1mn1k2gIE1nv0pRDwfEV8mEYciIsm3DUe+cXx9v9X7V2ayJYm1tY/+TOr7ZfnG/2q87kCeeS4ifvk84tXC5nKryyvzpXI5XczzE7WFixPV5ZUT5xdKc+lcemFqevrUG9NTb7/1ZtdifeXs3998ePu9U18cW/36p7uHbyZxOg7m25rjeALXmjPjMZ4fk5E4/ciOk10orJ8kva4AOzKUt/ORyPqAQzGUt3rgv+9qRKwBAyrR/mFANcYBjXv7Lt0HPzPuvbt+A7Q5/uH1z0Zib/3eaP9q8tCdUXa/O9aF8rMyfv791s1sie59DgGwrWvXI+Lk8PDm/i/J+7+dO9nBPo+Wof+D3XM7G/+81mr8U9gY/0SL8c+BFm13J7Zv/4W7XSimrWz8907L8e/GpNXYUJ77X33MN5J8er6cZn3b/yPieIzsyfJbzeecWr2z1m5b8/gvW7LyG2PBvB53h/c8/JrZUq30JDE3u3c94oWW499k4/wnLc5/djzOdljG0fTWS+22bR//07X2fcTLLc//gxmtZOv5yYn69TDRuCo2++vG0V/blb85/tHYzfiz879/6/jHkub52urjl/Hd3n/Sdtseij86v/5Hk4/r6dF83eVSrbY4GTGafLB5/dSD1zbyjf2z+I8f27r/a3X974uITzqM/8aRH1/sKP4eXP9Z/LOPdf4fP3Hn/c++bVd+Z/3f6/XU8XxNJ/1fpxV8kmMHAAAAAAAA/aYQEQcjKRQ30oVCsbj+fMeR2F8oj60//xGzUf+u7FiMFBoz3YeanoeYzJ+HbeSnHslPR8ThiPhqaF89X5yplGd7HTwAAAAAAAAAAAAAAAAAAAD0iQNtvv+f+W2o17UDnjo/+Q2Da9v2341fegL6kvd/GFzaPwwu7R8Gl/YPg6up/e/pZT2A3ef9HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArjp75ky2rK3evzKT5WcvLS/NVy6dmE2r88WFpZniTGXxYnGuUpkrp8WZysJ2/69cqVycnIqlyxO1tFqbqC6vnFuoLF2onTu/UJpLz6UjuxIVAAAAAAAAAAAAAAAAAAAAPFuqyyvzpXI5XZSQ2FFiuD+qsZ7ILummNVd7XZ+tEn/80BfVaJfodc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8GwAA//9ITzKe") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 414.057993ms ago: executing program 5 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x1000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setfsuid(0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 411.536294ms ago: executing program 0 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 380.169384ms ago: executing program 3 (id=572): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 313.730035ms ago: executing program 0 (id=573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x1}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) 313.223555ms ago: executing program 3 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 275.932816ms ago: executing program 0 (id=575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x5, 0x0) 242.418576ms ago: executing program 1 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 240.395236ms ago: executing program 0 (id=577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) 222.333777ms ago: executing program 5 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fstat(r2, &(0x7f0000000580)) 217.986677ms ago: executing program 0 (id=579): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) 206.046697ms ago: executing program 3 (id=580): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4a800, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) fchdir(r0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/171, 0xab) 155.839187ms ago: executing program 3 (id=581): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 151.846358ms ago: executing program 5 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 134.906388ms ago: executing program 1 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r2, &(0x7f0000001a00)=[{&(0x7f0000000080)='b', 0x1}], 0x1) 106.982919ms ago: executing program 5 (id=584): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 94.361849ms ago: executing program 1 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000000000000000000000420400120008000a"], 0x58}}, 0x8000) 30.39133ms ago: executing program 1 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 26.0565ms ago: executing program 3 (id=587): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=588): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 27.485438][ T29] audit: type=1400 audit(1749058886.303:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.486565][ T3304] cgroup: Unknown subsys name 'net' [ 27.508352][ T29] audit: type=1400 audit(1749058886.303:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.535757][ T29] audit: type=1400 audit(1749058886.333:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.732732][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.738969][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.871406][ T29] audit: type=1400 audit(1749058886.683:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.897199][ T29] audit: type=1400 audit(1749058886.693:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.917747][ T29] audit: type=1400 audit(1749058886.693:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.938364][ T29] audit: type=1400 audit(1749058886.693:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.958682][ T29] audit: type=1400 audit(1749058886.693:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.967464][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.983599][ T29] audit: type=1400 audit(1749058886.693:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.015816][ T29] audit: type=1400 audit(1749058886.813:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.051065][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.809208][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.860514][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.877525][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.908879][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.916156][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.923583][ T3314] bridge_slave_0: entered allmulticast mode [ 29.930389][ T3314] bridge_slave_0: entered promiscuous mode [ 29.956429][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.963799][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.971183][ T3314] bridge_slave_1: entered allmulticast mode [ 29.977675][ T3314] bridge_slave_1: entered promiscuous mode [ 30.021069][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.033882][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.068226][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.075513][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.082852][ T3321] bridge_slave_0: entered allmulticast mode [ 30.089320][ T3321] bridge_slave_0: entered promiscuous mode [ 30.097310][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.104569][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.111736][ T3321] bridge_slave_1: entered allmulticast mode [ 30.118484][ T3321] bridge_slave_1: entered promiscuous mode [ 30.130533][ T3314] team0: Port device team_slave_0 added [ 30.137262][ T3314] team0: Port device team_slave_1 added [ 30.156802][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.164358][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.172149][ T3320] bridge_slave_0: entered allmulticast mode [ 30.178745][ T3320] bridge_slave_0: entered promiscuous mode [ 30.202949][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.212034][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.219008][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.245696][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.256674][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.263940][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.271361][ T3320] bridge_slave_1: entered allmulticast mode [ 30.278200][ T3320] bridge_slave_1: entered promiscuous mode [ 30.285869][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.309793][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.316831][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.342825][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.354531][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.372443][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.385411][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.405737][ T3321] team0: Port device team_slave_0 added [ 30.431476][ T3321] team0: Port device team_slave_1 added [ 30.454017][ T3320] team0: Port device team_slave_0 added [ 30.471299][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.478350][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.504369][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.517862][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.524973][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.551102][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.563707][ T3320] team0: Port device team_slave_1 added [ 30.572105][ T3314] hsr_slave_0: entered promiscuous mode [ 30.578143][ T3314] hsr_slave_1: entered promiscuous mode [ 30.584337][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 30.629452][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.636597][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.643865][ T3315] bridge_slave_0: entered allmulticast mode [ 30.650294][ T3315] bridge_slave_0: entered promiscuous mode [ 30.669367][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.676578][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.683937][ T3315] bridge_slave_1: entered allmulticast mode [ 30.690710][ T3315] bridge_slave_1: entered promiscuous mode [ 30.702674][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.709722][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.735760][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.758500][ T3321] hsr_slave_0: entered promiscuous mode [ 30.764544][ T3321] hsr_slave_1: entered promiscuous mode [ 30.770447][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.778096][ T3321] Cannot create hsr debugfs directory [ 30.789030][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.796153][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.822388][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.845825][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.876708][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.912063][ T3315] team0: Port device team_slave_0 added [ 30.937593][ T3315] team0: Port device team_slave_1 added [ 30.955681][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.962842][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.970020][ T3322] bridge_slave_0: entered allmulticast mode [ 30.976635][ T3322] bridge_slave_0: entered promiscuous mode [ 30.985620][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.992870][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.000601][ T3322] bridge_slave_1: entered allmulticast mode [ 31.008171][ T3322] bridge_slave_1: entered promiscuous mode [ 31.016534][ T3320] hsr_slave_0: entered promiscuous mode [ 31.022554][ T3320] hsr_slave_1: entered promiscuous mode [ 31.028493][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.036262][ T3320] Cannot create hsr debugfs directory [ 31.063770][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.070802][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.097057][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.108284][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.115281][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.141258][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.161521][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.184392][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.239024][ T3322] team0: Port device team_slave_0 added [ 31.247844][ T3315] hsr_slave_0: entered promiscuous mode [ 31.254084][ T3315] hsr_slave_1: entered promiscuous mode [ 31.260212][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.267820][ T3315] Cannot create hsr debugfs directory [ 31.281450][ T3322] team0: Port device team_slave_1 added [ 31.297857][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.304985][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.331114][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.354149][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.361325][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.387655][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.433717][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.443342][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.462725][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.482921][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.496391][ T3322] hsr_slave_0: entered promiscuous mode [ 31.502794][ T3322] hsr_slave_1: entered promiscuous mode [ 31.508688][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.516444][ T3322] Cannot create hsr debugfs directory [ 31.552701][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.562593][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.582417][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.596416][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.643295][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.661513][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.670753][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.679995][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.721146][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.730239][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.740185][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.749511][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.770661][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.790455][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.821431][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.829924][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.839516][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.846631][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.856067][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.863142][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.881561][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.904074][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.913734][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.928183][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.942947][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.967790][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.975229][ T1682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.986592][ T1682] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.993720][ T1682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.018380][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.039757][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.050195][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.068723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.075838][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.094552][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.101646][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.113772][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.138611][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.152287][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.171698][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.178845][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.196327][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.203500][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.233269][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.246177][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.265963][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.297263][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.304468][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.315070][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.322226][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.347472][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.357936][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.379672][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.425781][ T3314] veth0_vlan: entered promiscuous mode [ 32.449199][ T3314] veth1_vlan: entered promiscuous mode [ 32.477174][ T3314] veth0_macvtap: entered promiscuous mode [ 32.506926][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.519619][ T3314] veth1_macvtap: entered promiscuous mode [ 32.553495][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.562525][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.581609][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.593420][ T3321] veth0_vlan: entered promiscuous mode [ 32.601329][ T3321] veth1_vlan: entered promiscuous mode [ 32.610699][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.619820][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.628798][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.637700][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.666397][ T3320] veth0_vlan: entered promiscuous mode [ 32.678240][ T3321] veth0_macvtap: entered promiscuous mode [ 32.695416][ T3321] veth1_macvtap: entered promiscuous mode [ 32.704756][ T3320] veth1_vlan: entered promiscuous mode [ 32.718009][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.718028][ T29] audit: type=1400 audit(1749058891.533:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.C3DB7A/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.758103][ T29] audit: type=1400 audit(1749058891.563:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.761317][ T3322] veth0_vlan: entered promiscuous mode [ 32.780131][ T29] audit: type=1400 audit(1749058891.563:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.C3DB7A/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.799632][ T3320] veth0_macvtap: entered promiscuous mode [ 32.810850][ T29] audit: type=1400 audit(1749058891.563:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.823376][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.838571][ T29] audit: type=1400 audit(1749058891.573:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.C3DB7A/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.853174][ T3322] veth1_vlan: entered promiscuous mode [ 32.872484][ T29] audit: type=1400 audit(1749058891.573:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.C3DB7A/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.884513][ T3320] veth1_macvtap: entered promiscuous mode [ 32.905760][ T29] audit: type=1400 audit(1749058891.573:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.919508][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.947271][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.957270][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.973594][ T29] audit: type=1400 audit(1749058891.783:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.982161][ T3322] veth0_macvtap: entered promiscuous mode [ 32.996629][ T29] audit: type=1400 audit(1749058891.783:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.013351][ T3321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.033337][ T3321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.042056][ T3321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050785][ T3321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063745][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.064894][ T3320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.087291][ T3320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096088][ T3320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.104903][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.124864][ T3322] veth1_macvtap: entered promiscuous mode [ 33.142629][ T29] audit: type=1400 audit(1749058891.953:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.187433][ T3393] kernel write not supported for file bpf-prog (pid: 3393 comm: kworker/0:6) [ 33.219918][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.231703][ T3315] veth0_vlan: entered promiscuous mode [ 33.250399][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.261429][ T3315] veth1_vlan: entered promiscuous mode [ 33.276959][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.286085][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.294876][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.303815][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.321583][ T3315] veth0_macvtap: entered promiscuous mode [ 33.329411][ T3315] veth1_macvtap: entered promiscuous mode [ 33.344207][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.373162][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.398883][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.407780][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.416681][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.425551][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.964658][ T3524] loop4: detected capacity change from 0 to 512 [ 33.974992][ T3524] EXT4-fs: Ignoring removed nobh option [ 34.016916][ T3524] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 34.027569][ T3526] netlink: 'syz.1.32': attribute type 3 has an invalid length. [ 34.063435][ T3524] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.30: attempt to clear invalid blocks 2 len 1 [ 34.087502][ T3524] EXT4-fs (loop4): Remounting filesystem read-only [ 34.102260][ T3524] EXT4-fs (loop4): 1 truncate cleaned up [ 34.108593][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.145359][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.159321][ T3539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.168354][ T3539] netlink: 108 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.180475][ T3539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.189810][ T3539] netlink: 108 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.199006][ T3539] netlink: 84 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.361727][ T3498] syz.0.18 (3498) used greatest stack depth: 10976 bytes left [ 34.403268][ T3555] loop1: detected capacity change from 0 to 512 [ 34.416998][ T3555] ======================================================= [ 34.416998][ T3555] WARNING: The mand mount option has been deprecated and [ 34.416998][ T3555] and is ignored by this kernel. Remove the mand [ 34.416998][ T3555] option from the mount to silence this warning. [ 34.416998][ T3555] ======================================================= [ 34.456328][ T3555] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.471073][ T3555] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.43: bg 0: block 248: padding at end of block bitmap is not set [ 34.487097][ T3555] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.43: Failed to acquire dquot type 1 [ 34.499719][ T3555] EXT4-fs (loop1): 1 truncate cleaned up [ 34.512979][ T3555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.551557][ T3392] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 34.559628][ T3392] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 34.576037][ T3392] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 34.601563][ T3392] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 34.640660][ T3555] syz.1.43 (3555) used greatest stack depth: 9496 bytes left [ 34.649918][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.668869][ T3561] fido_id[3561]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.698995][ T3565] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 34.730503][ T3568] loop4: detected capacity change from 0 to 128 [ 34.743378][ T3568] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.756969][ T3568] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.901908][ T3572] Zero length message leads to an empty skb [ 34.954086][ T3576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 34.979013][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.981292][ T3576] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 35.071243][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.56'. [ 35.261562][ T3608] geneve0: entered allmulticast mode [ 35.281943][ T3611] loop3: detected capacity change from 0 to 1024 [ 35.298426][ T3603] loop4: detected capacity change from 0 to 1024 [ 35.310208][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.323647][ T3603] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.330160][ T3603] EXT4-fs: Ignoring removed nobh option [ 35.335905][ T3603] EXT4-fs: Ignoring removed bh option [ 35.367223][ T3603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.429028][ T3611] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.69: Allocating blocks 449-513 which overlap fs metadata [ 35.488693][ T3610] EXT4-fs (loop3): pa ffff88810507b0e0: logic 48, phys. 177, len 21 [ 35.496854][ T3610] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 35.502764][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.557362][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.636630][ T3638] loop3: detected capacity change from 0 to 1024 [ 35.666275][ T3394] kernel write not supported for file /ppp (pid: 3394 comm: kworker/1:3) [ 35.675549][ T3638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.688715][ T3649] atomic_op ffff88810357fd28 conn xmit_atomic 0000000000000000 [ 35.697299][ T3638] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.719561][ T3638] EXT4-fs (loop3): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.745033][ T3638] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.79: inode #4: comm syz.3.79: iget: illegal inode # [ 35.773386][ T3638] EXT4-fs (loop3): Remounting filesystem read-only [ 35.817939][ T3638] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.3.79: cleanup dec ref error -30 [ 35.833703][ T3659] syz.1.88 uses obsolete (PF_INET,SOCK_PACKET) [ 35.884102][ T3638] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #18: comm syz.3.79: dec ref error=-30 [ 35.932888][ T3322] EXT4-fs (loop3): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 36.072375][ T3670] Falling back ldisc for ttyS3. [ 36.195998][ T3696] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 36.320651][ C1] hrtimer: interrupt took 29977 ns [ 36.480932][ T36] IPVS: starting estimator thread 0... [ 36.577009][ T3741] IPVS: using max 2304 ests per chain, 115200 per kthread [ 36.605384][ T3755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3755 comm=syz.0.119 [ 36.631625][ T3761] loop1: detected capacity change from 0 to 512 [ 36.648759][ T3755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 36.658385][ T3761] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 36.673293][ T3755] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (183) [ 36.767705][ T3771] capability: warning: `syz.0.124' uses deprecated v2 capabilities in a way that may be insecure [ 36.894361][ T3777] tipc: Started in network mode [ 36.899300][ T3777] tipc: Node identity ac14140f, cluster identity 4711 [ 36.930931][ T3777] tipc: New replicast peer: 255.255.255.255 [ 36.937421][ T3777] tipc: Enabled bearer , priority 10 [ 36.963761][ T3783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 37.024278][ T3789] loop3: detected capacity change from 0 to 128 [ 37.106081][ T3796] tmpfs: Bad value for 'mpol' [ 37.432069][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.457899][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.524685][ T3840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.156'. [ 37.647510][ T3843] loop1: detected capacity change from 0 to 1024 [ 37.656234][ T3843] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.684802][ T3843] EXT4-fs: Ignoring removed nobh option [ 37.690482][ T3843] EXT4-fs: Ignoring removed bh option [ 37.763597][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.875630][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.902598][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 37.902690][ T29] audit: type=1400 audit(1749058896.713:363): avc: denied { kexec_image_load } for pid=3857 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 37.943366][ T36] tipc: Node number set to 2886997007 [ 37.984152][ T29] audit: type=1400 audit(1749058896.803:364): avc: denied { shutdown } for pid=3863 comm="syz.1.163" lport=59480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.159672][ T29] audit: type=1326 audit(1749058896.973:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 38.242367][ T29] audit: type=1326 audit(1749058897.003:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 38.266016][ T29] audit: type=1326 audit(1749058897.003:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 38.540054][ T3897] process 'syz.0.180' launched './file0' with NULL argv: empty string added [ 38.571206][ T29] audit: type=1400 audit(1749058897.383:368): avc: denied { execute_no_trans } for pid=3896 comm="syz.0.180" path="/35/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.606373][ T29] audit: type=1400 audit(1749058897.423:369): avc: denied { bind } for pid=3903 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.625823][ T29] audit: type=1400 audit(1749058897.423:370): avc: denied { listen } for pid=3903 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.645301][ T29] audit: type=1400 audit(1749058897.423:371): avc: denied { accept } for pid=3903 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.683770][ T29] audit: type=1400 audit(1749058897.493:372): avc: denied { setopt } for pid=3902 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.767476][ T3914] unsupported nlmsg_type 40 [ 38.790681][ T3919] sctp: [Deprecated]: syz.2.186 (pid 3919) Use of int in max_burst socket option. [ 38.790681][ T3919] Use struct sctp_assoc_value instead [ 38.857200][ T3927] loop3: detected capacity change from 0 to 164 [ 38.885698][ T3930] loop0: detected capacity change from 0 to 1024 [ 38.902737][ T3930] EXT4-fs: inline encryption not supported [ 38.915725][ T3930] EXT4-fs: Ignoring removed bh option [ 38.956127][ T3930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.002408][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.011725][ T3943] 9pnet: p9_errstr2errno: server reported unknown error L O! [ 39.266049][ T3966] __nla_validate_parse: 4 callbacks suppressed [ 39.266067][ T3966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 39.331734][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 39.340660][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 39.391376][ T3976] loop1: detected capacity change from 0 to 2048 [ 39.415012][ T3976] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.436451][ T3976] netlink: 208 bytes leftover after parsing attributes in process `syz.1.216'. [ 39.445792][ T3976] unsupported nla_type 17243 [ 39.504615][ T3314] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 39.593600][ T3990] 9pnet: p9_errstr2errno: server reported unknown error @ [ 39.637437][ T3992] loop0: detected capacity change from 0 to 512 [ 39.694402][ T3992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.737626][ T3992] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.789646][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.809426][ T4009] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 39.882793][ T4020] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 39.930098][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 39.939189][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 39.954455][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 40.075653][ T4041] loop2: detected capacity change from 0 to 128 [ 40.098231][ T4041] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.120167][ T4041] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.132114][ T4049] 9pnet_fd: p9_fd_create_unix (4049): problem connecting socket: ./file0: -2 [ 40.174964][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.285655][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 40.368332][ T4076] loop2: detected capacity change from 0 to 512 [ 40.387143][ T4076] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.261: corrupted in-inode xattr: invalid ea_ino [ 40.409656][ T4076] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.261: couldn't read orphan inode 15 (err -117) [ 40.424292][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.489892][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.501467][ T4086] mmap: syz.0.266 (4086) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.568920][ T4094] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 40.585455][ T4094] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 40.640706][ T4103] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.273'. [ 40.647103][ T4101] loop0: detected capacity change from 0 to 1024 [ 40.674201][ T4101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.719622][ T4101] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.272: Allocating blocks 385-513 which overlap fs metadata [ 40.739396][ T4100] EXT4-fs (loop0): pa ffff88810507b070: logic 16, phys. 129, len 24 [ 40.747539][ T4100] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 40.815684][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.831967][ T4119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 40.975011][ T4134] 9pnet: p9_errstr2errno: server reported unknown error @L  [ 41.080590][ T4144] 9p: Unknown access argument ree: -22 [ 41.119670][ T4150] loop2: detected capacity change from 0 to 1024 [ 41.147327][ T4150] EXT4-fs: Ignoring removed bh option [ 41.152918][ T4150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.207771][ T4150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.232131][ T4165] syz.4.297 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.250371][ T12] nci: nci_rx_work: unknown MT 0x5 [ 41.412955][ T4183] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 41.456824][ T4188] loop3: detected capacity change from 0 to 164 [ 41.569536][ T4194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.592533][ T4194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.705067][ T4200] infiniband syz0: set active [ 41.709863][ T4200] infiniband syz0: added batadv_slave_1 [ 41.726014][ T4200] RDS/IB: syz0: added [ 41.732623][ T4200] smc: adding ib device syz0 with port count 1 [ 41.739067][ T4200] smc: ib device syz0 port 1 has pnetid [ 42.214834][ T4213] bond1: entered promiscuous mode [ 42.219909][ T4213] bond1: entered allmulticast mode [ 42.225609][ T4213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.244306][ T4213] bond1 (unregistering): Released all slaves [ 42.255659][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.375710][ T4230] loop2: detected capacity change from 0 to 1024 [ 42.398934][ T4230] EXT4-fs: Ignoring removed i_version option [ 42.405339][ T4230] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.423375][ T4230] EXT4-fs: Ignoring removed nobh option [ 42.429125][ T4230] EXT4-fs: Ignoring removed bh option [ 42.474365][ T4230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.504724][ T4230] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.323: Allocating blocks 385-513 which overlap fs metadata [ 42.553776][ T4230] EXT4-fs (loop2): pa ffff88810507b070: logic 16, phys. 129, len 24 [ 42.561918][ T4230] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 42.600318][ T4230] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 42.612650][ T4230] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.612650][ T4230] [ 42.622567][ T4230] EXT4-fs (loop2): Total free blocks count 0 [ 42.628790][ T4230] EXT4-fs (loop2): Free/Dirty block details [ 42.634780][ T4230] EXT4-fs (loop2): free_blocks=128 [ 42.640012][ T4230] EXT4-fs (loop2): dirty_blocks=0 [ 42.645182][ T4230] EXT4-fs (loop2): Block reservation details [ 42.651203][ T4230] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 42.709399][ T4251] 9pnet_fd: Insufficient options for proto=fd [ 42.954264][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 42.954283][ T29] audit: type=1326 audit(1749058901.773:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.047847][ T29] audit: type=1326 audit(1749058901.773:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.071519][ T29] audit: type=1326 audit(1749058901.773:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.094946][ T29] audit: type=1326 audit(1749058901.773:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.118236][ T29] audit: type=1326 audit(1749058901.773:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.141707][ T29] audit: type=1326 audit(1749058901.773:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.164953][ T29] audit: type=1326 audit(1749058901.773:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.188289][ T29] audit: type=1326 audit(1749058901.773:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.211658][ T29] audit: type=1326 audit(1749058901.773:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.235169][ T29] audit: type=1326 audit(1749058901.773:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c681e929 code=0x7ffc0000 [ 43.566431][ T4326] loop2: detected capacity change from 0 to 2048 [ 43.594051][ T4326] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 43.667470][ T4336] lo speed is unknown, defaulting to 1000 [ 43.684066][ T4336] lo speed is unknown, defaulting to 1000 [ 43.704249][ T4336] lo speed is unknown, defaulting to 1000 [ 43.720759][ T4336] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.738363][ T4336] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.754827][ T4336] lo speed is unknown, defaulting to 1000 [ 43.761177][ T4336] lo speed is unknown, defaulting to 1000 [ 43.768667][ T4336] lo speed is unknown, defaulting to 1000 [ 43.820341][ T4336] lo speed is unknown, defaulting to 1000 [ 43.850027][ T4336] lo speed is unknown, defaulting to 1000 [ 43.899441][ T4361] geneve0: entered allmulticast mode [ 44.011881][ T4371] bond_slave_0: entered promiscuous mode [ 44.017688][ T4371] bond_slave_1: entered promiscuous mode [ 44.054085][ T4371] macvlan2: entered allmulticast mode [ 44.059655][ T4371] bond0: entered allmulticast mode [ 44.064923][ T4371] bond_slave_0: entered allmulticast mode [ 44.070766][ T4371] bond_slave_1: entered allmulticast mode [ 44.098100][ T4371] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 44.112154][ T4371] bridge0: port 3(macvlan2) entered blocking state [ 44.118777][ T4371] bridge0: port 3(macvlan2) entered disabled state [ 44.131737][ T4371] macvlan2: entered promiscuous mode [ 44.137162][ T4371] bond0: entered promiscuous mode [ 44.148976][ T4371] bridge0: port 3(macvlan2) entered blocking state [ 44.155804][ T4371] bridge0: port 3(macvlan2) entered forwarding state [ 44.361795][ T4418] __nla_validate_parse: 7 callbacks suppressed [ 44.361816][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 44.407057][ T4425] SELinux: failed to load policy [ 44.469718][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.507702][ T4436] loop3: detected capacity change from 0 to 128 [ 44.543668][ T4436] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.560600][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.573941][ T4436] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.589769][ T4442] syzkaller0: refused to change device tx_queue_len [ 44.620683][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.633639][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.689489][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.802679][ T4463] ip6gretap1: entered allmulticast mode [ 44.828953][ T4443] lo speed is unknown, defaulting to 1000 [ 44.854139][ T12] bridge_slave_1: left allmulticast mode [ 44.859929][ T12] bridge_slave_1: left promiscuous mode [ 44.865725][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.892288][ T12] bridge_slave_0: left allmulticast mode [ 44.898049][ T12] bridge_slave_0: left promiscuous mode [ 44.903831][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.950317][ T4482] loop3: detected capacity change from 0 to 512 [ 44.996382][ T4482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.025568][ T4482] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.053821][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.102956][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.126003][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.136402][ T12] bond0 (unregistering): Released all slaves [ 45.143056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.328881][ T12] hsr_slave_0: left promiscuous mode [ 45.349254][ T12] hsr_slave_1: left promiscuous mode [ 45.361600][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.369240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.387134][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.394784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.437555][ T12] veth1_macvtap: left promiscuous mode [ 45.450264][ T12] veth0_macvtap: left promiscuous mode [ 45.458041][ T4542] netlink: 'syz.0.448': attribute type 3 has an invalid length. [ 45.469031][ T12] veth1_vlan: left promiscuous mode [ 45.484152][ T12] veth0_vlan: left promiscuous mode [ 45.586551][ T4557] loop0: detected capacity change from 0 to 512 [ 45.604691][ T4557] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.450: corrupted in-inode xattr: invalid ea_ino [ 45.623780][ T4557] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.450: couldn't read orphan inode 15 (err -117) [ 45.638841][ T4557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.678665][ T12] team0 (unregistering): Port device team_slave_1 removed [ 45.688842][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.699879][ T12] team0 (unregistering): Port device team_slave_0 removed [ 45.819911][ T4443] chnl_net:caif_netlink_parms(): no params data found [ 45.990994][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.998282][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.024251][ T4443] bridge_slave_0: entered allmulticast mode [ 46.033510][ T4443] bridge_slave_0: entered promiscuous mode [ 46.043014][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.050122][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.101492][ T4443] bridge_slave_1: entered allmulticast mode [ 46.119181][ T4443] bridge_slave_1: entered promiscuous mode [ 46.215961][ T4443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.253483][ T4443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.324892][ T4443] team0: Port device team_slave_0 added [ 46.343955][ T4443] team0: Port device team_slave_1 added [ 46.426038][ T4443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.433080][ T4443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.459844][ T4443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.493881][ T4443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.500881][ T4443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.526890][ T4443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.563952][ T4667] 9pnet: p9_errstr2errno: server reported unknown error @ [ 46.715328][ T4443] hsr_slave_0: entered promiscuous mode [ 46.732447][ T4443] hsr_slave_1: entered promiscuous mode [ 46.738484][ T4443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.755473][ T4443] Cannot create hsr debugfs directory [ 47.074703][ T4443] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.105663][ T4443] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.120825][ T4443] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.139893][ T4443] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.153812][ T4731] Falling back ldisc for ttyS3. [ 47.228560][ T4746] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 47.279171][ T4746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.348991][ T4746] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 47.375827][ T4443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.436651][ T4443] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.476984][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.484180][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.530202][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.537338][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.627469][ T4783] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 47.669207][ T4788] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 47.705972][ T4783] bond1: entered promiscuous mode [ 47.728999][ T4783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.765806][ T4803] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 47.826405][ T4803] bond1: (slave batadv1): making interface the new active one [ 47.833965][ T4803] batadv1: entered promiscuous mode [ 47.859139][ T4803] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 47.896915][ T4443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.997839][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 47.997859][ T29] audit: type=1326 audit(1749058906.813:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.3.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036531e929 code=0x7ffc0000 [ 48.089218][ T29] audit: type=1326 audit(1749058906.813:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.3.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f036531e929 code=0x7ffc0000 [ 48.112569][ T29] audit: type=1326 audit(1749058906.813:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.3.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036531e929 code=0x7ffc0000 [ 48.135929][ T29] audit: type=1326 audit(1749058906.823:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.3.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036531e929 code=0x7ffc0000 [ 48.179552][ T4853] netlink: 5 bytes leftover after parsing attributes in process `syz.3.503'. [ 48.192766][ T4853] 0{X: renamed from gretap0 (while UP) [ 48.207631][ T4853] 0{X: entered allmulticast mode [ 48.230226][ T4853] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 48.444845][ T4443] veth0_vlan: entered promiscuous mode [ 48.450551][ T29] audit: type=1400 audit(1749058907.253:913): avc: denied { create } for pid=4893 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 48.476160][ T4443] veth1_vlan: entered promiscuous mode [ 48.488221][ T29] audit: type=1400 audit(1749058907.263:914): avc: denied { sys_admin } for pid=4893 comm="syz.0.507" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 48.536683][ T4443] veth0_macvtap: entered promiscuous mode [ 48.557841][ T4443] veth1_macvtap: entered promiscuous mode [ 48.571271][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 48.584364][ T29] audit: type=1400 audit(1749058907.383:915): avc: denied { bind } for pid=4907 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.603915][ T29] audit: type=1400 audit(1749058907.383:916): avc: denied { node_bind } for pid=4907 comm="syz.4.511" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.630568][ T4443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.661180][ T4443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.668814][ T4894] lo speed is unknown, defaulting to 1000 [ 48.702727][ T4443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.711530][ T4443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720481][ T4443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.729378][ T4443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.766039][ T4916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.791444][ T4920] loop3: detected capacity change from 0 to 164 [ 48.809509][ T29] audit: type=1400 audit(1749058907.623:917): avc: denied { mounton } for pid=4443 comm="syz-executor" path="/root/syzkaller.pGmaO1/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 48.833923][ T29] audit: type=1400 audit(1749058907.623:918): avc: denied { mount } for pid=4443 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.891083][ T4920] syz.3.515: attempt to access beyond end of device [ 48.891083][ T4920] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.933078][ T4920] syz.3.515: attempt to access beyond end of device [ 48.933078][ T4920] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.977261][ T4931] loop5: detected capacity change from 0 to 1024 [ 49.024326][ T4931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.161806][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 49.187910][ T4955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.522'. [ 49.203670][ T4949] IPVS: Error joining to the multicast group [ 49.221937][ T4955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.522'. [ 49.255636][ T4957] loop1: detected capacity change from 0 to 512 [ 49.335019][ T4957] EXT4-fs: Ignoring removed orlov option [ 49.354011][ T4957] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.367288][ T4957] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.393314][ T4957] EXT4-fs (loop1): 1 orphan inode deleted [ 49.399201][ T4957] EXT4-fs (loop1): 1 truncate cleaned up [ 49.399477][ T3006] udevd[3006]: worker [3308] terminated by signal 33 (Unknown signal 33) [ 49.454383][ T4957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.470482][ T3006] udevd[3006]: worker [3308] failed while handling '/devices/virtual/block/loop4' [ 49.529336][ T4443] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.552580][ T4957] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.1.523: path /111/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 49.618000][ T4982] netlink: 96 bytes leftover after parsing attributes in process `syz.5.532'. [ 49.645343][ T4957] EXT4-fs (loop1): Remounting filesystem read-only [ 49.651182][ T4982] netlink: 'syz.5.532': attribute type 5 has an invalid length. [ 49.659738][ T4982] netlink: 44 bytes leftover after parsing attributes in process `syz.5.532'. [ 49.686251][ T4989] loop3: detected capacity change from 0 to 1024 [ 49.723505][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.747421][ T4989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.809393][ T5000] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 49.914697][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.090880][ T5002] lo speed is unknown, defaulting to 1000 [ 50.164262][ T5019] lo speed is unknown, defaulting to 1000 [ 50.219434][ T5024] siw: device registration error -23 [ 50.277650][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 50.288710][ T5027] IPVS: Error joining to the multicast group [ 50.407865][ T5036] loop4: detected capacity change from 0 to 1024 [ 50.445367][ T5036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.460661][ T5038] loop0: detected capacity change from 0 to 512 [ 50.475784][ T5038] EXT4-fs: Ignoring removed orlov option [ 50.505618][ T5038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.519161][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.527356][ T5038] EXT4-fs (loop0): 1 orphan inode deleted [ 50.534929][ T5038] EXT4-fs (loop0): 1 truncate cleaned up [ 50.543094][ T5038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.571863][ T5038] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.0.554: path /120/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 50.596341][ T5038] EXT4-fs (loop0): Remounting filesystem read-only [ 50.632465][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.648063][ T5047] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.557'. [ 50.690808][ T5052] loop0: detected capacity change from 0 to 2048 [ 50.737720][ T5052] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.755428][ T5052] netlink: 208 bytes leftover after parsing attributes in process `syz.0.558'. [ 50.770853][ T5061] sctp: [Deprecated]: syz.4.560 (pid 5061) Use of int in max_burst socket option. [ 50.770853][ T5061] Use struct sctp_assoc_value instead [ 50.815582][ T3321] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 50.901450][ T5071] siw: device registration error -23 [ 50.950401][ T5077] loop1: detected capacity change from 0 to 1024 [ 50.977318][ T5079] loop5: detected capacity change from 0 to 512 [ 51.001055][ T5077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.009832][ T5079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.040322][ T5079] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.060821][ T5090] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 51.106941][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.125054][ T4443] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.338094][ T5119] loop3: detected capacity change from 0 to 1024 [ 51.350497][ T5119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.697861][ T5119] ================================================================== [ 51.706183][ T5119] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 51.714503][ T5119] [ 51.716851][ T5119] write to 0xffff888106b6f254 of 4 bytes by task 5123 on cpu 0: [ 51.724599][ T5119] xas_set_mark+0x12b/0x140 [ 51.729218][ T5119] tag_pages_for_writeback+0xc2/0x290 [ 51.734634][ T5119] ext4_do_writepages+0x697/0x21c0 [ 51.739812][ T5119] ext4_writepages+0x176/0x300 [ 51.744628][ T5119] do_writepages+0x1c3/0x310 [ 51.749270][ T5119] file_write_and_wait_range+0x156/0x2c0 [ 51.754962][ T5119] generic_buffers_fsync_noflush+0x45/0x120 [ 51.760920][ T5119] ext4_sync_file+0x1ab/0x690 [ 51.765652][ T5119] vfs_fsync_range+0x10d/0x130 [ 51.770459][ T5119] ext4_buffered_write_iter+0x34f/0x3c0 [ 51.776068][ T5119] ext4_file_write_iter+0xdbf/0xf00 [ 51.781299][ T5119] iter_file_splice_write+0x5f2/0x970 [ 51.786732][ T5119] direct_splice_actor+0x156/0x2a0 [ 51.791913][ T5119] splice_direct_to_actor+0x312/0x680 [ 51.797335][ T5119] do_splice_direct+0xda/0x150 [ 51.802149][ T5119] do_sendfile+0x380/0x650 [ 51.806683][ T5119] __x64_sys_sendfile64+0x105/0x150 [ 51.811915][ T5119] x64_sys_call+0xb39/0x2fb0 [ 51.816536][ T5119] do_syscall_64+0xd2/0x200 [ 51.821091][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.827033][ T5119] [ 51.829387][ T5119] read to 0xffff888106b6f254 of 4 bytes by task 5119 on cpu 1: [ 51.836968][ T5119] filemap_write_and_wait_range+0xfc/0x340 [ 51.842837][ T5119] ext4_file_write_iter+0xe04/0xf00 [ 51.848084][ T5119] iter_file_splice_write+0x5f2/0x970 [ 51.853523][ T5119] direct_splice_actor+0x156/0x2a0 [ 51.858787][ T5119] splice_direct_to_actor+0x312/0x680 [ 51.864219][ T5119] do_splice_direct+0xda/0x150 [ 51.869046][ T5119] do_sendfile+0x380/0x650 [ 51.873503][ T5119] __x64_sys_sendfile64+0x105/0x150 [ 51.879174][ T5119] x64_sys_call+0xb39/0x2fb0 [ 51.883840][ T5119] do_syscall_64+0xd2/0x200 [ 51.888395][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.894326][ T5119] [ 51.896682][ T5119] value changed: 0x02000021 -> 0x04000021 [ 51.902421][ T5119] [ 51.904765][ T5119] Reported by Kernel Concurrency Sanitizer on: [ 51.910952][ T5119] CPU: 1 UID: 0 PID: 5119 Comm: syz.3.587 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 51.922973][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.933078][ T5119] ================================================================== [ 52.258532][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.862315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog