last executing test programs: 1.205393273s ago: executing program 4 (id=401): syz_clone3(&(0x7f0000000340)={0x3120000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x15}, &(0x7f0000000280)=""/13, 0xd, &(0x7f00000002c0)=""/40, &(0x7f0000000300)=[0x0], 0x1}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x0) 1.162048466s ago: executing program 2 (id=402): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet(0x2, 0x3, 0x30) sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 1.161589456s ago: executing program 2 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x8d0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 1.143695208s ago: executing program 2 (id=404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80002, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.075238283s ago: executing program 4 (id=406): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) pipe2$9p(&(0x7f0000000200), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 974.963851ms ago: executing program 2 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa}]}], {0x14, 0x10}}, 0x108}}, 0x0) 974.445811ms ago: executing program 1 (id=411): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 859.24834ms ago: executing program 2 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000256000/0x1000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a91a160779c8d21f4807cd7f4649bdaff3cb9303b2c373e23abca6d66433d4f3e287e63bbba3eaf0b28fed83"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x80) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 700.427643ms ago: executing program 1 (id=419): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syslog(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) tkill(r4, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d616328616573290000"], 0x1a0}}, 0x800) socket$inet6(0xa, 0x3, 0xff) 668.351896ms ago: executing program 3 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 642.078378ms ago: executing program 0 (id=421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80002, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 641.732408ms ago: executing program 3 (id=422): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 561.109104ms ago: executing program 0 (id=423): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_delete(r7) 511.499568ms ago: executing program 0 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x8d0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 511.121458ms ago: executing program 0 (id=427): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtclass={0x38, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0xffe0}}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x78e3581aa788a1f6}, 0x800) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c460402044080000000000000000200d8279688000092000000000000004000000000000000900100000000000001f0ffff090038008000090002007800"], 0x40) close(r1) unshare(0x26060600) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 489.56113ms ago: executing program 0 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f0000256000/0x1000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a91a160779c8d21f4807cd7f4649bdaff3cb9303b2c373e23abca6d66433d4f3e287e63bbba3eaf0b28fed83"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x80) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) pread64(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x12a8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x91, 0x3, "da01bef71884f61c4f62d47f6364144d9396f669918a5e2b70a2a61d91f97fa2a3a5b5c4f1f81abd8e7c7e04eefd44829e2a38d5e5a48b2b09e8c5ab7096848e8296d2402e177926453ad9ccf59490c037fdc0b7d6e18d4c36835ac9f41557c5be8f4a10bf2b95012acb8e70ee9e589cccd2e8e0752753a7137d1c2d140556d34e3b8da70b4796648f41991963"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "5118446106fcf16dbc1e9eeddeecce4e0d5008cae8ac5855fb33f4967fb8ad0faaf7d94b3e252074ad11308ce734a3437d72e6832969183ecee357fa4f559d7538d7b385ce7060cf1ae9906c795f3b79064361f6d0f0e4917465fe1c045deb8bf802b3228b2dd79a5159f6890a1e63bcbc3d82dbe4b27133453bf5bfa70fa92d397d04682dcddc73c8692ae076ecdbe8fa8d334e0764bbc1a22d3293ab2c04808a0dcf59a9421327baf84240311353762fee2ae5ec1a"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x74eb6360}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "383b56f626cf07f97f034d656b757db23e580fe7be9988e1911eb21a5f1639b659c078becbfcfa7692d7d2cdc17b1a1a1f2981f0491263ef9d0dd4cb5ac6733cf1108390cfc4461cfdaaca325513e2dbbccf5e1e27fc4d8695c5acb3281afa020d1fb90d13dfd1d93e2177fb817827e62953a54a23258e5d405ba430661b150eea2d6a48f8d71e9b46fefb0c84fe248eaf3b7883f9fc9e6981cae492776c4ecd36d9405e9d252ad0055e4d6dc1d3233884c77f23a9bf12eee5060a10e3a4d81dcb8aa6ec57b70e"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 401.799927ms ago: executing program 1 (id=429): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 401.173747ms ago: executing program 4 (id=430): ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000400)={0x1, 0x0, 0x1000, &(0x7f0000000b40)=""/4096}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x0) 339.192712ms ago: executing program 4 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 301.804965ms ago: executing program 4 (id=432): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20008881) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r2, 0x0, 0x7f, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) 301.470215ms ago: executing program 1 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 287.044026ms ago: executing program 1 (id=434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 193.746054ms ago: executing program 1 (id=435): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) pipe2$9p(&(0x7f0000000200), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 80.956793ms ago: executing program 3 (id=436): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x8001}, 0x18) eventfd2(0x0, 0x0) 55.030355ms ago: executing program 3 (id=437): r0 = socket$kcm(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 33.665617ms ago: executing program 3 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x8d0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 272.109µs ago: executing program 2 (id=439): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syslog(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) tkill(r4, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d616328616573290000"], 0x1a0}}, 0x800) socket$inet6(0xa, 0x3, 0xff) 0s ago: executing program 3 (id=440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) syz_mount_image$ext4(&(0x7f0000019200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000019300)={[{@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nodioread_nolock}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmmsg$inet(r6, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.198' (ED25519) to the list of known hosts. [ 24.776613][ T29] audit: type=1400 audit(1754233068.044:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.777299][ T3289] cgroup: Unknown subsys name 'net' [ 24.799600][ T29] audit: type=1400 audit(1754233068.044:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.826952][ T29] audit: type=1400 audit(1754233068.074:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.950354][ T3289] cgroup: Unknown subsys name 'cpuset' [ 24.956374][ T3289] cgroup: Unknown subsys name 'rlimit' [ 25.045215][ T29] audit: type=1400 audit(1754233068.314:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.070777][ T29] audit: type=1400 audit(1754233068.314:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.091328][ T29] audit: type=1400 audit(1754233068.314:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.098404][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.111832][ T29] audit: type=1400 audit(1754233068.314:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.140648][ T29] audit: type=1400 audit(1754233068.324:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.165495][ T29] audit: type=1400 audit(1754233068.324:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.188749][ T29] audit: type=1400 audit(1754233068.394:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.215927][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.447655][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 26.528500][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 26.537212][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.545512][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.558222][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 26.606492][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.613693][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.620953][ T3301] bridge_slave_0: entered allmulticast mode [ 26.627358][ T3301] bridge_slave_0: entered promiscuous mode [ 26.645147][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.652349][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.659504][ T3301] bridge_slave_1: entered allmulticast mode [ 26.665752][ T3301] bridge_slave_1: entered promiscuous mode [ 26.715467][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.722551][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.729821][ T3303] bridge_slave_0: entered allmulticast mode [ 26.736042][ T3303] bridge_slave_0: entered promiscuous mode [ 26.742430][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.749623][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.756810][ T3307] bridge_slave_0: entered allmulticast mode [ 26.763280][ T3307] bridge_slave_0: entered promiscuous mode [ 26.769812][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.776845][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.784062][ T3307] bridge_slave_1: entered allmulticast mode [ 26.790475][ T3307] bridge_slave_1: entered promiscuous mode [ 26.801685][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.810940][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.817989][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.825168][ T3302] bridge_slave_0: entered allmulticast mode [ 26.831561][ T3302] bridge_slave_0: entered promiscuous mode [ 26.841474][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.848523][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.855699][ T3303] bridge_slave_1: entered allmulticast mode [ 26.862139][ T3303] bridge_slave_1: entered promiscuous mode [ 26.873227][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.882385][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.889550][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.896628][ T3302] bridge_slave_1: entered allmulticast mode [ 26.902915][ T3302] bridge_slave_1: entered promiscuous mode [ 26.909165][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.916396][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.924200][ T3299] bridge_slave_0: entered allmulticast mode [ 26.930419][ T3299] bridge_slave_0: entered promiscuous mode [ 26.958111][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.965236][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.972368][ T3299] bridge_slave_1: entered allmulticast mode [ 26.978556][ T3299] bridge_slave_1: entered promiscuous mode [ 26.990195][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.000445][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.010113][ T3301] team0: Port device team_slave_0 added [ 27.016654][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.035299][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.044998][ T3301] team0: Port device team_slave_1 added [ 27.060554][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.085912][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.096187][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.105823][ T3303] team0: Port device team_slave_0 added [ 27.116109][ T3307] team0: Port device team_slave_0 added [ 27.122492][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.129516][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.155464][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.171541][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.184907][ T3303] team0: Port device team_slave_1 added [ 27.191828][ T3307] team0: Port device team_slave_1 added [ 27.197686][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.204647][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.230611][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.246766][ T3302] team0: Port device team_slave_0 added [ 27.272233][ T3302] team0: Port device team_slave_1 added [ 27.282899][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.289887][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.316048][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.327521][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.334771][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.360743][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.372435][ T3299] team0: Port device team_slave_0 added [ 27.382601][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.389573][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.415661][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.431479][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.438503][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.464447][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.475781][ T3299] team0: Port device team_slave_1 added [ 27.488411][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.495402][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.521816][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.545350][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.552330][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.578254][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.598323][ T3301] hsr_slave_0: entered promiscuous mode [ 27.604350][ T3301] hsr_slave_1: entered promiscuous mode [ 27.618342][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.625308][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.651447][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.662998][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.669986][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.696324][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.723485][ T3303] hsr_slave_0: entered promiscuous mode [ 27.729416][ T3303] hsr_slave_1: entered promiscuous mode [ 27.735331][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 27.741168][ T3303] Cannot create hsr debugfs directory [ 27.767239][ T3307] hsr_slave_0: entered promiscuous mode [ 27.773233][ T3307] hsr_slave_1: entered promiscuous mode [ 27.779051][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 27.784801][ T3307] Cannot create hsr debugfs directory [ 27.815386][ T3299] hsr_slave_0: entered promiscuous mode [ 27.821514][ T3299] hsr_slave_1: entered promiscuous mode [ 27.827350][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 27.833096][ T3299] Cannot create hsr debugfs directory [ 27.841038][ T3302] hsr_slave_0: entered promiscuous mode [ 27.846896][ T3302] hsr_slave_1: entered promiscuous mode [ 27.852792][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.858509][ T3302] Cannot create hsr debugfs directory [ 28.033141][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.041880][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.050819][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.061979][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.100395][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.117882][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.127548][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.139072][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.147945][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.156993][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.165943][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.174903][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.183249][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.206469][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.217928][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.233593][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.240702][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.249865][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.260920][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.272582][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.282598][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.289681][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.334984][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.346530][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.358687][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.367496][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.377287][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.398714][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.425234][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.432384][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.452759][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.459838][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.494361][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.519621][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.550193][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.562849][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.572670][ T1712] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.579788][ T1712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.594785][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.606170][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.616367][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.623444][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.632649][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.639788][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.650291][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.657391][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.667108][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.679279][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.698013][ T1712] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.705156][ T1712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.724210][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.731307][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.873152][ T3301] veth0_vlan: entered promiscuous mode [ 28.887687][ T3301] veth1_vlan: entered promiscuous mode [ 28.894759][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.917828][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.928702][ T3299] veth0_vlan: entered promiscuous mode [ 28.950219][ T3299] veth1_vlan: entered promiscuous mode [ 28.959334][ T3301] veth0_macvtap: entered promiscuous mode [ 28.966918][ T3301] veth1_macvtap: entered promiscuous mode [ 28.976236][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.017539][ T3299] veth0_macvtap: entered promiscuous mode [ 29.026698][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.036478][ T3299] veth1_macvtap: entered promiscuous mode [ 29.066394][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.075914][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.095264][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.105070][ T3303] veth0_vlan: entered promiscuous mode [ 29.119258][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.132267][ T3303] veth1_vlan: entered promiscuous mode [ 29.145291][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.166465][ T3302] veth0_vlan: entered promiscuous mode [ 29.172528][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.197716][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.199898][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.221730][ T3303] veth0_macvtap: entered promiscuous mode [ 29.230445][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.242455][ T3302] veth1_vlan: entered promiscuous mode [ 29.248942][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.273532][ T3303] veth1_macvtap: entered promiscuous mode [ 29.298476][ T3302] veth0_macvtap: entered promiscuous mode [ 29.301893][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.307187][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.311880][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.327017][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.343364][ T3302] veth1_macvtap: entered promiscuous mode [ 29.355777][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.363284][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.366421][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.370759][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.379100][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.385502][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.396822][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.401602][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.416199][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.423711][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.429313][ T3472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.431163][ T1045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.444072][ T1045] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 29.466090][ T3429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.483143][ T3429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.499051][ T3429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.509030][ T3307] veth0_vlan: entered promiscuous mode [ 29.515995][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.527232][ T3429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.542627][ T3307] veth1_vlan: entered promiscuous mode [ 29.557675][ T3475] fido_id[3475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.574027][ T3429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.595405][ T3307] veth0_macvtap: entered promiscuous mode [ 29.603069][ T3429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.615988][ T3307] veth1_macvtap: entered promiscuous mode [ 29.630040][ T3429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.646074][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.656527][ T3429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.673592][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.698046][ T3429] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.715898][ T3429] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.735066][ T3429] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.747365][ T3429] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.783929][ T3497] loop4: detected capacity change from 0 to 128 [ 29.796350][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 29.796366][ T29] audit: type=1400 audit(1754233073.064:194): avc: denied { mount } for pid=3496 comm="syz.4.11" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.853113][ T29] audit: type=1400 audit(1754233073.114:195): avc: denied { create } for pid=3481 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.873069][ T29] audit: type=1400 audit(1754233073.114:196): avc: denied { write } for pid=3481 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.873409][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.892960][ T29] audit: type=1400 audit(1754233073.114:197): avc: denied { nlmsg_write } for pid=3481 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.950199][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.970104][ T29] audit: type=1400 audit(1754233073.124:198): avc: denied { read write } for pid=3496 comm="syz.4.11" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.993744][ T29] audit: type=1400 audit(1754233073.124:199): avc: denied { open } for pid=3496 comm="syz.4.11" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.016926][ T29] audit: type=1400 audit(1754233073.144:200): avc: denied { ioctl } for pid=3496 comm="syz.4.11" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.041616][ T29] audit: type=1400 audit(1754233073.204:201): avc: denied { create } for pid=3499 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.062350][ T29] audit: type=1400 audit(1754233073.204:202): avc: denied { write } for pid=3499 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.082628][ T29] audit: type=1326 audit(1754233073.234:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3a55eb69 code=0x7ffc0000 [ 30.336262][ T3542] loop3: detected capacity change from 0 to 512 [ 30.342863][ T3539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 30.358044][ T3539] loop2: detected capacity change from 0 to 764 [ 30.366212][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.382606][ T3539] rock: directory entry would overflow storage [ 30.388783][ T3539] rock: sig=0x4654, size=5, remaining=4 [ 30.412871][ T3542] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.424500][ T3539] rock: directory entry would overflow storage [ 30.430823][ T3539] rock: sig=0x4f50, size=4, remaining=3 [ 30.436498][ T3539] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 30.496148][ T3542] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.16'. [ 30.555857][ T3554] loop2: detected capacity change from 0 to 512 [ 30.581244][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.593185][ T3554] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.616923][ T3554] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.19: casefold flag without casefold feature [ 30.623875][ T3558] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 30.653048][ T3554] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.19: couldn't read orphan inode 15 (err -117) [ 30.674702][ T3554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.732366][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.747730][ T3562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 30.922949][ T3576] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 30.998531][ T3576] infiniband syz1: set active [ 31.003316][ T3576] infiniband syz1: added syz_tun [ 31.028687][ T3581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.043312][ C1] hrtimer: interrupt took 45680 ns [ 31.094903][ T3576] RDS/IB: syz1: added [ 31.099009][ T3573] mmap: syz.0.24 (3573) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.123382][ T3576] smc: adding ib device syz1 with port count 1 [ 31.129920][ T3576] smc: ib device syz1 port 1 has pnetid [ 31.637464][ T3409] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 31.665545][ T3607] fido_id[3607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.755920][ T3576] syz.3.26 (3576) used greatest stack depth: 10616 bytes left [ 32.106170][ T3581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.202363][ T3581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.227403][ T3382] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 32.250616][ T3642] fido_id[3642]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.267499][ T3581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.343430][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.356199][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.375100][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.391785][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.393807][ T3657] loop1: detected capacity change from 0 to 128 [ 32.483441][ T3657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.492567][ T3657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.510536][ T3375] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 32.544154][ T3673] fido_id[3673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.727586][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 32.923136][ T3375] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 32.955923][ T3709] fido_id[3709]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.138186][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 33.319354][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 33.350824][ T3747] fido_id[3747]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.445384][ T3755] loop4: detected capacity change from 0 to 128 [ 33.491608][ T3755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.502053][ T3755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.566124][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 33.644446][ T3382] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 33.658250][ T3775] fido_id[3775]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.891147][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 33.918433][ T3809] fido_id[3809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.074900][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 34.242256][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 34.282271][ T3837] fido_id[3837]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.346308][ T3846] loop4: detected capacity change from 0 to 128 [ 34.373209][ T3846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.384588][ T3846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.463879][ T3857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'. [ 34.574994][ T9] hid_parser_main: 233 callbacks suppressed [ 34.575021][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.588511][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.595974][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.603382][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.610836][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.618260][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.625702][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.633430][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.641130][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.648523][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 34.659644][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 34.698151][ T3867] fido_id[3867]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.819160][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 34.994873][ T3894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.143'. [ 35.051522][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 35.051557][ T29] audit: type=1326 audit(1754233078.314:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.081306][ T29] audit: type=1326 audit(1754233078.314:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.091042][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 35.104716][ T29] audit: type=1326 audit(1754233078.314:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.104813][ T29] audit: type=1326 audit(1754233078.314:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.104884][ T29] audit: type=1326 audit(1754233078.314:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.104911][ T29] audit: type=1326 audit(1754233078.314:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.104938][ T29] audit: type=1326 audit(1754233078.314:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.219253][ T3904] fido_id[3904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.231807][ T29] audit: type=1326 audit(1754233078.314:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.231837][ T29] audit: type=1326 audit(1754233078.314:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.291952][ T29] audit: type=1326 audit(1754233078.314:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f515212eb69 code=0x7ffc0000 [ 35.365749][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 35.417442][ T3923] loop4: detected capacity change from 0 to 128 [ 35.463247][ T3923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.473533][ T3923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.519446][ T3934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.156'. [ 35.584009][ T3375] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 35.617310][ T3941] fido_id[3941]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.656122][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 35.753677][ T3950] loop0: detected capacity change from 0 to 1024 [ 35.762712][ T3950] ======================================================= [ 35.762712][ T3950] WARNING: The mand mount option has been deprecated and [ 35.762712][ T3950] and is ignored by this kernel. Remove the mand [ 35.762712][ T3950] option from the mount to silence this warning. [ 35.762712][ T3950] ======================================================= [ 35.798863][ T3950] EXT4-fs: Ignoring removed bh option [ 35.822672][ T3950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.854175][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.066172][ T3972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.169'. [ 36.075128][ T3972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.169'. [ 36.121515][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.263219][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 36.276556][ T3999] loop1: detected capacity change from 0 to 128 [ 36.300754][ T4004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 36.309880][ T4004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 36.347574][ T3999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.356817][ T3999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.498731][ T3375] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.541229][ T4021] fido_id[4021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.723169][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 36.746898][ T4043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.195'. [ 36.867066][ T1045] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.905041][ T4057] fido_id[4057]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.097373][ T4087] loop1: detected capacity change from 0 to 128 [ 37.133878][ T4087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.137565][ T1045] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.145740][ T4087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.190519][ T4092] fido_id[4092]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.508270][ T1045] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.544398][ T4123] fido_id[4123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.768871][ T1045] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.028467][ T4182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.037643][ T4182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.231921][ T1045] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.272618][ T4194] fido_id[4194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.323291][ T4201] loop4: detected capacity change from 0 to 1024 [ 38.331486][ T4201] EXT4-fs: Ignoring removed bh option [ 38.372422][ T4201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.402546][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.567429][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.608502][ T4233] fido_id[4233]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.752055][ T4251] loop3: detected capacity change from 0 to 1024 [ 38.759791][ T4251] EXT4-fs: Ignoring removed bh option [ 38.780832][ T4251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.853184][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.909412][ T4263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.941101][ T4263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.997340][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.043930][ T4274] fido_id[4274]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.278374][ T4294] loop1: detected capacity change from 0 to 1024 [ 39.287366][ T4294] EXT4-fs: Ignoring removed bh option [ 39.310901][ T4294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.351494][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.411138][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.436897][ T4311] fido_id[4311]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.665340][ T4328] loop1: detected capacity change from 0 to 1024 [ 39.675579][ T4328] EXT4-fs: Ignoring removed bh option [ 39.750400][ T4333] loop0: detected capacity change from 0 to 512 [ 39.767251][ T4328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.783521][ T4333] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.794965][ T4333] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.302: casefold flag without casefold feature [ 39.809658][ T4333] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.302: couldn't read orphan inode 15 (err -117) [ 39.826596][ T4333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.873018][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.905519][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.941740][ T4347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.974645][ T4347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.985712][ T1045] hid_parser_main: 341 callbacks suppressed [ 39.985731][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 39.999220][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.024264][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.031728][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.039231][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.046705][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.054131][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.061579][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.068996][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.076462][ T1045] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 40.094290][ T1045] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 40.117206][ T4366] fido_id[4366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.179004][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 40.179022][ T29] audit: type=1326 audit(1754233083.444:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.209905][ T29] audit: type=1326 audit(1754233083.454:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.210556][ T4374] loop1: detected capacity change from 0 to 1024 [ 40.233348][ T29] audit: type=1326 audit(1754233083.454:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.263164][ T29] audit: type=1326 audit(1754233083.454:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.279314][ T4374] EXT4-fs: Ignoring removed bh option [ 40.286612][ T29] audit: type=1326 audit(1754233083.454:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e248ad4d0 code=0x7ffc0000 [ 40.286646][ T29] audit: type=1326 audit(1754233083.454:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.338962][ T29] audit: type=1326 audit(1754233083.454:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.362209][ T29] audit: type=1326 audit(1754233083.454:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.385703][ T29] audit: type=1326 audit(1754233083.454:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.409086][ T29] audit: type=1326 audit(1754233083.454:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e248aeb69 code=0x7ffc0000 [ 40.433795][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.467650][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.542397][ T4384] loop1: detected capacity change from 0 to 512 [ 40.570815][ T4384] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.580616][ T4384] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.319: casefold flag without casefold feature [ 40.593468][ T4384] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.319: couldn't read orphan inode 15 (err -117) [ 40.607284][ T4384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.637079][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.689290][ T9] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 40.737435][ T4400] fido_id[4400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.784777][ T4408] loop0: detected capacity change from 0 to 1024 [ 40.792041][ T4408] EXT4-fs: Ignoring removed bh option [ 40.851381][ T4408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.881268][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.908359][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.932845][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.946632][ T4422] loop3: detected capacity change from 0 to 512 [ 40.964359][ T4425] process 'syz.2.335' launched './file0' with NULL argv: empty string added [ 40.975572][ T4422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.012373][ T4422] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.332: casefold flag without casefold feature [ 41.025920][ T4422] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.332: couldn't read orphan inode 15 (err -117) [ 41.050589][ T4422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.083064][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.115848][ T3369] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.155912][ T4438] fido_id[4438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.491846][ T4464] loop1: detected capacity change from 0 to 1024 [ 41.501602][ T4464] EXT4-fs: Ignoring removed bh option [ 41.533050][ T4464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.561151][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.595330][ T4468] loop2: detected capacity change from 0 to 512 [ 41.611081][ T3369] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.622737][ T4468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.638580][ T4468] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.350: casefold flag without casefold feature [ 41.649087][ T4480] fido_id[4480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.679872][ T4468] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.350: couldn't read orphan inode 15 (err -117) [ 41.700119][ T4468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.729260][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.861439][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.913521][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.944993][ T4507] loop4: detected capacity change from 0 to 1024 [ 41.954166][ T4507] EXT4-fs: Ignoring removed bh option [ 41.971951][ T4507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.999319][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.069044][ T1045] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.114581][ T4517] fido_id[4517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.265901][ T4529] __nla_validate_parse: 22 callbacks suppressed [ 42.265924][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 42.340763][ T4542] loop4: detected capacity change from 0 to 1024 [ 42.347916][ T4542] EXT4-fs: Ignoring removed bh option [ 42.365928][ T4542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.412645][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.700913][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 42.736536][ T3375] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.768633][ T4583] fido_id[4583]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.794038][ T4587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.815269][ T4587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.905039][ T4593] loop0: detected capacity change from 0 to 1024 [ 42.915940][ T4593] EXT4-fs: Ignoring removed bh option [ 42.932537][ T4593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.958609][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.117633][ T1045] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 43.161102][ T4615] fido_id[4615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.194340][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 43.278661][ T4631] loop0: detected capacity change from 0 to 512 [ 43.289242][ T4631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.312990][ T4631] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.408: casefold flag without casefold feature [ 43.326198][ T4631] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.408: couldn't read orphan inode 15 (err -117) [ 43.352661][ T4631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.382359][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.566108][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 43.674799][ T4669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.683575][ T4669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.808050][ T4678] loop4: detected capacity change from 0 to 512 [ 43.831028][ T4678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.841157][ T4678] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.425: casefold flag without casefold feature [ 43.854275][ T4678] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.425: couldn't read orphan inode 15 (err -117) [ 43.867477][ T4678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.901715][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.935146][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 44.305165][ T4707] ================================================================== [ 44.313289][ T4707] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 44.320335][ T4707] [ 44.322678][ T4707] write to 0xffff88811a1b7cf8 of 8 bytes by task 4708 on cpu 1: [ 44.330396][ T4707] shmem_fallocate+0x221/0x840 [ 44.335174][ T4707] vfs_fallocate+0x3b3/0x400 [ 44.339869][ T4707] madvise_vma_behavior+0x17a5/0x1b60 [ 44.345255][ T4707] madvise_do_behavior+0x5b7/0x970 [ 44.350373][ T4707] do_madvise+0x10e/0x190 [ 44.354706][ T4707] __x64_sys_madvise+0x64/0x80 [ 44.359474][ T4707] x64_sys_call+0x1f1a/0x2ff0 [ 44.364172][ T4707] do_syscall_64+0xd2/0x200 [ 44.368682][ T4707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.374576][ T4707] [ 44.376900][ T4707] read to 0xffff88811a1b7cf8 of 8 bytes by task 4707 on cpu 0: [ 44.384442][ T4707] shmem_fault+0x90/0x250 [ 44.388774][ T4707] __do_fault+0xbc/0x200 [ 44.393021][ T4707] handle_mm_fault+0xf78/0x2c20 [ 44.397874][ T4707] __get_user_pages+0x102e/0x1fa0 [ 44.402897][ T4707] __mm_populate+0x243/0x3a0 [ 44.407485][ T4707] vm_mmap_pgoff+0x232/0x2e0 [ 44.412083][ T4707] ksys_mmap_pgoff+0xc2/0x310 [ 44.416771][ T4707] x64_sys_call+0x14a3/0x2ff0 [ 44.421455][ T4707] do_syscall_64+0xd2/0x200 [ 44.426050][ T4707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.431944][ T4707] [ 44.434263][ T4707] value changed: 0x0000000000000000 -> 0xffffc900100efb60 [ 44.441368][ T4707] [ 44.443686][ T4707] Reported by Kernel Concurrency Sanitizer on: [ 44.449831][ T4707] CPU: 0 UID: 0 PID: 4707 Comm: syz.1.435 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 44.461807][ T4707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.471863][ T4707] ================================================================== [ 44.504186][ T4719] loop3: detected capacity change from 0 to 1024 [ 44.511797][ T4719] EXT4-fs: Ignoring removed bh option [ 44.531303][ T4719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.560154][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.