last executing test programs: 6.498672182s ago: executing program 1 (id=727): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 6.136991788s ago: executing program 4 (id=729): r0 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 5.96593016s ago: executing program 2 (id=730): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 5.541256266s ago: executing program 4 (id=733): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 4.972908515s ago: executing program 3 (id=735): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xf97, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 4.848761847s ago: executing program 1 (id=736): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 4.725639169s ago: executing program 1 (id=737): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x5, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x10100, 0x0) shutdown(r1, 0x2) 4.723517819s ago: executing program 2 (id=738): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r3) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 4.722931229s ago: executing program 3 (id=739): io_setup(0x80000000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x180107}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040), 0xfd12) fdatasync(r0) 4.443820993s ago: executing program 0 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f000000b0c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xbe, 0x2, 0x7ff, 0x7, 0xe6, 0x401, 0x4, 0x9, 0x3, 0x7018, 0xb, 0x3, 0xc, 0x7, 0x2, 0x5, 0x80000000, 0x3, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x1, 0x8, 0x5, 0xb, 0x7f, 0x7, 0x9, 0x9, 0x3, 0x9, 0x0, 0x0, 0x53, 0xfffff000, 0x7, 0x5, 0x6, 0x354, 0x800, 0xfff, 0x2, 0x8, 0xfffff53a, 0x4, 0x7fffffff, 0xffffffff, 0x1, 0x5, 0x9, 0x6, 0x8000, 0x67c3, 0x5, 0xb, 0x1ff, 0x8, 0x5, 0xfffffffb, 0x8, 0x2, 0x10, 0x6, 0x8, 0x7, 0x100, 0x7, 0xb9, 0x3, 0x5, 0xfff, 0xffffffff, 0x1, 0x7, 0x401, 0x8, 0xcf, 0x7, 0xc, 0xac, 0x3, 0xfffffffe, 0x456, 0x24a, 0x3, 0x2, 0xc3, 0x2, 0x5, 0xb5d, 0x522, 0x1239, 0x7ff, 0x4, 0x0, 0x10, 0x5, 0xe, 0x3, 0x53b1, 0x4, 0x5, 0x1, 0x5, 0x7fff, 0x4, 0x8, 0xaee1, 0x0, 0x0, 0xd, 0x0, 0x1, 0xebd3, 0xf1, 0x6, 0x3, 0x1000, 0x2, 0xffffffff, 0x936, 0x6, 0x6, 0x10, 0xf13, 0x10001, 0x401, 0x80000000, 0x5, 0x8, 0x0, 0x3, 0x9, 0x2, 0x8000, 0x400, 0xfffffff9, 0x6, 0x1, 0x31, 0x84, 0x6, 0x4fa, 0xc, 0x3, 0x1a9, 0x932, 0x80, 0x0, 0x7f, 0x8001, 0x8, 0xe0000, 0x7f, 0x8c33, 0x4, 0x3, 0xfffffffb, 0x80, 0x7, 0x8000, 0x8, 0x10001, 0x2, 0x73a0, 0x5, 0x0, 0x3, 0x6, 0x7, 0x7ff, 0x6, 0x3, 0x7, 0x8, 0x6, 0x8224, 0x5, 0xffff, 0x4, 0x9, 0x2, 0x4, 0xfffff042, 0xb26, 0x7a1, 0xc6f, 0x0, 0xe, 0x0, 0x3066274d, 0x6, 0xe, 0x3ff, 0x2c, 0x4, 0x4, 0x8001, 0x4, 0x6, 0x80, 0x26e6, 0x30, 0x7fff, 0xa, 0x10, 0x67138a1c, 0x80000001, 0x3, 0x7, 0x3ff, 0x8, 0x7, 0x1, 0xc, 0x12, 0x4, 0x2, 0x7ff, 0xc7, 0x9, 0x94f, 0xf2c, 0x9aa, 0xffffffff, 0x10000000, 0x0, 0xfffffffe, 0x9, 0x45, 0x78, 0x10000, 0xa3, 0x9, 0x8, 0x1, 0x4, 0x1, 0x7, 0x7fff, 0x7, 0x25, 0xd64b, 0xb578, 0xe, 0x6, 0x3409, 0x1, 0x7, 0x7, 0x0, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0x9, 0x400, 0x1, 0x2, 0x6, 0x4, 0x9e8, 0x40, 0x6, 0x2, 0x1, 0xffffbdd1, 0x9, 0x80, 0xf6, 0x574, 0x1, 0x400, 0x0, 0x0, 0x5, 0xd, 0x1, 0x3, 0x81, 0x5, 0xf0, 0x0, 0x3f22, 0x0, 0x7ff, 0x5, 0x40, 0x4, 0x3, 0x85a, 0x585, 0x3ff, 0x58a4f025, 0x0, 0x6, 0x80, 0x200, 0x42e3, 0xfffffe04, 0x0, 0xa, 0xd, 0x9, 0x9, 0x0, 0x9, 0x9, 0x7fff, 0xadc3, 0x1, 0x4, 0x12, 0x8, 0x80, 0x8, 0x8, 0xa, 0x9, 0x3, 0x4, 0x2, 0x80, 0x6c000000, 0x1a, 0x2d4, 0x8, 0x0, 0xc9e8, 0x0, 0x1496, 0x8, 0x3, 0x9, 0x0, 0xb2, 0x10, 0x6, 0x51f8e5d1, 0x2, 0x4, 0x9, 0x8, 0x6, 0x55d9, 0x2, 0xfff, 0x2, 0xd0, 0x8, 0xffff725b, 0x1, 0x3, 0x7, 0x9, 0x7, 0x7, 0xfffffffc, 0xb5, 0x30, 0x1a4f, 0x6f, 0x2, 0x5, 0xd1, 0xfffffc13, 0xe002, 0xe1, 0x3bedad96, 0x71, 0xffff, 0x6, 0x9, 0xffff17c1, 0x2, 0x3, 0x0, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x5, 0x8001, 0x401, 0x9, 0x1, 0xb, 0x8000, 0x8, 0x4, 0x1, 0x2, 0x1, 0x40, 0x401, 0x9, 0x8, 0x4, 0xad5, 0x8, 0x3, 0x7, 0xffffffff, 0xfffffffc, 0x40, 0x80000000, 0x4, 0x400, 0x200, 0x10001, 0x2, 0x9, 0x6, 0x8, 0x3, 0xe8, 0x2, 0x8, 0x9, 0x6, 0xb, 0x80, 0xe, 0x2, 0xffffff3e, 0x6, 0xeb, 0x4, 0xba1, 0xadaf, 0x80, 0x7, 0x2, 0x80000000, 0x2020, 0x0, 0x0, 0x10, 0x4, 0x8, 0x7, 0x2, 0x6, 0x3, 0x7fffffff, 0x144, 0xffff, 0x9, 0x40, 0xfff, 0x7, 0x7, 0x3ff, 0x8, 0x101, 0xffffffff, 0x7, 0x5c8, 0xd, 0x1, 0x8, 0x7f, 0x6, 0x4, 0x1, 0xfffffff9, 0x7fff, 0xa22c, 0x9, 0x1225, 0x0, 0x10001, 0x9389, 0x9, 0xffffffff, 0x800, 0x5, 0x6, 0x38000, 0xffffffff, 0x2, 0x8, 0xfffffe01, 0xa, 0x10000, 0x40, 0x867, 0x6, 0x9, 0x9, 0x5, 0xddf, 0x5, 0x2, 0x0, 0x8, 0x7, 0x3, 0x317, 0x101, 0xfffffffc, 0x1, 0x2, 0xdfa, 0x3, 0x4800, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0xfffffffd, 0xb, 0x9, {0x5, 0x2, 0x4, 0x6, 0x2, 0x40}, {0x7, 0x2, 0x9, 0xff0f, 0xea3a, 0x3}, 0x1, 0x1, 0x7ff}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x884}}, 0x0) 3.937413161s ago: executing program 4 (id=741): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) r1 = io_uring_setup(0x4080, &(0x7f0000000400)={0x0, 0x9369, 0x80, 0x1, 0x2d7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.861449402s ago: executing program 1 (id=742): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000040)={0x0, 0x2, 0xffffffff, 0x0, 0x10040, 0x8f}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 3.851296442s ago: executing program 2 (id=743): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.782061478s ago: executing program 2 (id=744): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f0000000480)=ANY=[], 0x11, 0x221, &(0x7f0000000680)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket$rds(0x15, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00'], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$vcsu(&(0x7f0000000080), 0x200, 0x140) 2.778455698s ago: executing program 3 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) 2.747766569s ago: executing program 1 (id=746): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff, 0xff], [0xffffff, 0xffffff00, 0xffffffff, 0xffffff00], 'wlan0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0xf, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) 2.436318304s ago: executing program 0 (id=747): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x22}], 0x1, 0x0, &(0x7f00000002c0)={[0x3]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 2.433482564s ago: executing program 3 (id=748): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) link(0x0, 0x0) semget(0x0, 0x1, 0x104) 2.349599984s ago: executing program 2 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.298915796s ago: executing program 4 (id=750): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000100000000000000001"], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 2.202579247s ago: executing program 0 (id=751): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000fc0)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) 1.308525991s ago: executing program 4 (id=752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.304654741s ago: executing program 3 (id=753): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1.012547605s ago: executing program 3 (id=754): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x85, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 852.755547ms ago: executing program 1 (id=755): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf4369000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000480)={0x404000, 0x16d, 0x3a}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 782.258428ms ago: executing program 0 (id=756): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r4) accept4(r3, 0x0, 0x0, 0x80000) 530.903682ms ago: executing program 0 (id=757): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000002) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = dup(r2) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 208.763907ms ago: executing program 4 (id=758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 173.002928ms ago: executing program 2 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, 0x0, 0x20000810) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 0s ago: executing program 0 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 33.104703][ T29] audit: type=1400 audit(1744559201.146:81): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.105717][ T3293] cgroup: Unknown subsys name 'net' [ 33.127436][ T29] audit: type=1400 audit(1744559201.146:82): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.154923][ T29] audit: type=1400 audit(1744559201.186:83): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.174799][ T29] audit: type=1400 audit(1744559201.186:84): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.290969][ T3293] cgroup: Unknown subsys name 'cpuset' [ 33.297211][ T3293] cgroup: Unknown subsys name 'rlimit' [ 33.449087][ T29] audit: type=1400 audit(1744559201.486:85): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.472416][ T29] audit: type=1400 audit(1744559201.496:86): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.492887][ T29] audit: type=1400 audit(1744559201.496:87): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.513230][ T29] audit: type=1400 audit(1744559201.496:88): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.533584][ T29] audit: type=1400 audit(1744559201.496:89): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.558462][ T29] audit: type=1400 audit(1744559201.506:90): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.566051][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.644884][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.229400][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.271817][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.316925][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.361471][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.368573][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.375725][ T3302] bridge_slave_0: entered allmulticast mode [ 35.382219][ T3302] bridge_slave_0: entered promiscuous mode [ 35.388750][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.404331][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.411525][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.418798][ T3302] bridge_slave_1: entered allmulticast mode [ 35.425248][ T3302] bridge_slave_1: entered promiscuous mode [ 35.455313][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.462432][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.469617][ T3303] bridge_slave_0: entered allmulticast mode [ 35.476072][ T3303] bridge_slave_0: entered promiscuous mode [ 35.485524][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.492635][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.499792][ T3303] bridge_slave_1: entered allmulticast mode [ 35.506285][ T3303] bridge_slave_1: entered promiscuous mode [ 35.519657][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.545222][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.555270][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.581520][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.615019][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.622159][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.629398][ T3310] bridge_slave_0: entered allmulticast mode [ 35.635974][ T3310] bridge_slave_0: entered promiscuous mode [ 35.656883][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.664058][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.671318][ T3306] bridge_slave_0: entered allmulticast mode [ 35.677810][ T3306] bridge_slave_0: entered promiscuous mode [ 35.685035][ T3302] team0: Port device team_slave_0 added [ 35.691452][ T3302] team0: Port device team_slave_1 added [ 35.702240][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.709300][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.716608][ T3310] bridge_slave_1: entered allmulticast mode [ 35.722933][ T3310] bridge_slave_1: entered promiscuous mode [ 35.732936][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.739999][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.747272][ T3306] bridge_slave_1: entered allmulticast mode [ 35.753919][ T3306] bridge_slave_1: entered promiscuous mode [ 35.765106][ T3303] team0: Port device team_slave_0 added [ 35.793738][ T3303] team0: Port device team_slave_1 added [ 35.799756][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.806767][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.832741][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.845025][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.857005][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.875943][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.882937][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.908864][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.919641][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.934233][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.967872][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.977291][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.984299][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.010235][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.028704][ T3310] team0: Port device team_slave_0 added [ 36.039978][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.047035][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.072954][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.091812][ T3310] team0: Port device team_slave_1 added [ 36.105249][ T3306] team0: Port device team_slave_0 added [ 36.113014][ T3302] hsr_slave_0: entered promiscuous mode [ 36.119041][ T3302] hsr_slave_1: entered promiscuous mode [ 36.144934][ T3306] team0: Port device team_slave_1 added [ 36.171871][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.178846][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.204842][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.216597][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.223594][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.249547][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.260856][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.267825][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.293789][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.316402][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.323465][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.331576][ T3313] bridge_slave_0: entered allmulticast mode [ 36.337927][ T3313] bridge_slave_0: entered promiscuous mode [ 36.352403][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.359511][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.385461][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.401781][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.408865][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.416140][ T3313] bridge_slave_1: entered allmulticast mode [ 36.422725][ T3313] bridge_slave_1: entered promiscuous mode [ 36.436143][ T3303] hsr_slave_0: entered promiscuous mode [ 36.442156][ T3303] hsr_slave_1: entered promiscuous mode [ 36.447974][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.455575][ T3303] Cannot create hsr debugfs directory [ 36.495653][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.506950][ T3310] hsr_slave_0: entered promiscuous mode [ 36.512825][ T3310] hsr_slave_1: entered promiscuous mode [ 36.518575][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.526395][ T3310] Cannot create hsr debugfs directory [ 36.534249][ T3306] hsr_slave_0: entered promiscuous mode [ 36.540546][ T3306] hsr_slave_1: entered promiscuous mode [ 36.546517][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.554169][ T3306] Cannot create hsr debugfs directory [ 36.574374][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.628601][ T3313] team0: Port device team_slave_0 added [ 36.646995][ T3313] team0: Port device team_slave_1 added [ 36.689424][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.696444][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.722389][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.745385][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.752438][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.778381][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.834388][ T3313] hsr_slave_0: entered promiscuous mode [ 36.840414][ T3313] hsr_slave_1: entered promiscuous mode [ 36.846253][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.853869][ T3313] Cannot create hsr debugfs directory [ 36.883760][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.902048][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.915666][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.924460][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.967024][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.976982][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.985806][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.995051][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.021967][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.040425][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.054259][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.064342][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.089861][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.098790][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.108093][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.125705][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.169958][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.184690][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.203524][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.219743][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.227240][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.236094][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.253806][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.263668][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.275684][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.282828][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.291819][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.298971][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.311971][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.319106][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.331865][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.339029][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.355325][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.396332][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.419807][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.426898][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.439861][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.453829][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.472269][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.479429][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.503453][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.518903][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.532918][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.539995][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.557045][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.567545][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.588303][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.595420][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.605950][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.622074][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.629154][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.643316][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.654302][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.677432][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.684591][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.703674][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.722328][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.778403][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.824549][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.868811][ T3306] veth0_vlan: entered promiscuous mode [ 37.889932][ T3306] veth1_vlan: entered promiscuous mode [ 37.906733][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.920710][ T3303] veth0_vlan: entered promiscuous mode [ 37.933983][ T3303] veth1_vlan: entered promiscuous mode [ 37.954227][ T3303] veth0_macvtap: entered promiscuous mode [ 37.966975][ T3302] veth0_vlan: entered promiscuous mode [ 37.974767][ T3302] veth1_vlan: entered promiscuous mode [ 37.989937][ T3310] veth0_vlan: entered promiscuous mode [ 37.999191][ T3303] veth1_macvtap: entered promiscuous mode [ 38.007830][ T3306] veth0_macvtap: entered promiscuous mode [ 38.022032][ T3310] veth1_vlan: entered promiscuous mode [ 38.031627][ T3306] veth1_macvtap: entered promiscuous mode [ 38.043825][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.056538][ T3302] veth0_macvtap: entered promiscuous mode [ 38.070717][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.078211][ T3310] veth0_macvtap: entered promiscuous mode [ 38.088166][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.098693][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.109257][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.118008][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.128625][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.139050][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.147507][ T3302] veth1_macvtap: entered promiscuous mode [ 38.154680][ T3310] veth1_macvtap: entered promiscuous mode [ 38.170758][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.179499][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.188242][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.197062][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.210325][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.219056][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.227954][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.236785][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.257500][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 38.257516][ T29] audit: type=1400 audit(1744559206.296:107): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.m0aK64/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.267838][ T3313] veth0_vlan: entered promiscuous mode [ 38.293637][ T29] audit: type=1400 audit(1744559206.296:108): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.315706][ T29] audit: type=1400 audit(1744559206.296:109): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.m0aK64/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.340996][ T29] audit: type=1400 audit(1744559206.296:110): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.362981][ T29] audit: type=1400 audit(1744559206.296:111): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.m0aK64/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.389759][ T29] audit: type=1400 audit(1744559206.296:112): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.m0aK64/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.417489][ T29] audit: type=1400 audit(1744559206.296:113): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.437741][ T29] audit: type=1400 audit(1744559206.486:114): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.452750][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.460699][ T29] audit: type=1400 audit(1744559206.486:115): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.471070][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.503270][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.513851][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.526052][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.526121][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.542212][ T3313] veth1_vlan: entered promiscuous mode [ 38.561109][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.564160][ T29] audit: type=1400 audit(1744559206.606:116): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.571723][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.571736][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.571754][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.571767][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.636741][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.648365][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.657696][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.668241][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.678137][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.688583][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.699797][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.718284][ T3313] veth0_macvtap: entered promiscuous mode [ 38.726419][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.736981][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.746899][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.757397][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.767312][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.777961][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.790542][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.799816][ T3313] veth1_macvtap: entered promiscuous mode [ 38.806630][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.815400][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.824370][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.833189][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.853945][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.862760][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.871792][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.880508][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.896161][ T3448] loop0: detected capacity change from 0 to 1024 [ 38.904214][ T3448] ======================================================= [ 38.904214][ T3448] WARNING: The mand mount option has been deprecated and [ 38.904214][ T3448] and is ignored by this kernel. Remove the mand [ 38.904214][ T3448] option from the mount to silence this warning. [ 38.904214][ T3448] ======================================================= [ 38.908511][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.949659][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.959498][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.969990][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.979891][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.990397][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.000231][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.010752][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.011179][ T3448] EXT4-fs: Ignoring removed bh option [ 39.022638][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.043060][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.053788][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.063693][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.074234][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.084092][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.094586][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.104482][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.114929][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.128104][ T3448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.128814][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.172798][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.181624][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.190463][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.199333][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206745][ T3454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.216789][ T3454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.225555][ T3454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.235345][ T3454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.250566][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.332956][ T3464] wireguard0: entered promiscuous mode [ 39.338580][ T3464] wireguard0: entered allmulticast mode [ 39.427091][ C0] hrtimer: interrupt took 27365 ns [ 39.557046][ T3489] serio: Serial port ptm0 [ 39.802680][ T3501] bond_slave_1: mtu less than device minimum [ 39.875858][ T3506] hub 2-0:1.0: USB hub found [ 39.880978][ T3506] hub 2-0:1.0: 8 ports detected [ 39.946815][ T3510] loop3: detected capacity change from 0 to 512 [ 39.954567][ T3510] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.973420][ T3510] EXT4-fs (loop3): 1 orphan inode deleted [ 39.982521][ T3510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.995468][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 40.001537][ T3510] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.036195][ T3508] loop0: detected capacity change from 0 to 2048 [ 40.046093][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.056204][ T3508] EXT4-fs: Ignoring removed bh option [ 40.068410][ T3508] EXT4-fs (loop0): blocks per group (262144) and clusters per group (16384) inconsistent [ 40.191693][ T3521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3521 comm=syz.3.24 [ 40.215384][ T3521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 40.227323][ T3520] serio: Serial port ptm0 [ 40.554276][ T3541] loop1: detected capacity change from 0 to 2048 [ 40.572434][ T3541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.597330][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.622374][ T3545] openvswitch: netlink: Message has 6 unknown bytes. [ 40.947740][ T3556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.956391][ T3556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.167134][ T3568] netlink: 'syz.3.44': attribute type 13 has an invalid length. [ 41.175322][ T3571] loop0: detected capacity change from 0 to 512 [ 41.188039][ T3571] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.200805][ T3571] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.237471][ T3571] EXT4-fs (loop0): 1 truncate cleaned up [ 41.254670][ T3571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.433623][ T3584] loop4: detected capacity change from 0 to 1024 [ 41.495933][ T3584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.509397][ T3584] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.572835][ T3595] loop3: detected capacity change from 0 to 8192 [ 41.625156][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 41.640722][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.652487][ T3584] bridge_slave_1 (unregistering): left allmulticast mode [ 41.659585][ T3584] bridge_slave_1 (unregistering): left promiscuous mode [ 41.666680][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.719879][ T3595] syz.3.54: attempt to access beyond end of device [ 41.719879][ T3595] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 41.755776][ T3595] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.763684][ T3595] FAT-fs (loop3): Filesystem has been set read-only [ 41.784914][ T3595] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.794335][ T3595] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.840705][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.864635][ T3609] netlink: '+}[@': attribute type 10 has an invalid length. [ 41.875001][ T3609] batman_adv: batadv0: Adding interface: team0 [ 41.881324][ T3609] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.906490][ T3609] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 42.077051][ T3617] tipc: Started in network mode [ 42.082034][ T3617] tipc: Node identity 8e57d2516a92, cluster identity 4711 [ 42.089339][ T3617] tipc: Enabled bearer , priority 0 [ 42.112681][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.163229][ T3617] syzkaller0: entered promiscuous mode [ 42.168774][ T3617] syzkaller0: entered allmulticast mode [ 42.176877][ T3617] tipc: Resetting bearer [ 42.247212][ T3616] tipc: Resetting bearer [ 42.275239][ T3616] tipc: Disabling bearer [ 42.299367][ T3634] serio: Serial port ptm0 [ 42.321677][ T3601] 9pnet_fd: Insufficient options for proto=fd [ 42.429448][ T3644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 42.441234][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 42.558952][ T3644] syz.3.75 (3644) used greatest stack depth: 10928 bytes left [ 42.568556][ T3646] vlan2: entered allmulticast mode [ 42.616254][ T3650] IPv4: Oversized IP packet from 127.202.26.0 [ 42.693419][ T3659] netlink: 96 bytes leftover after parsing attributes in process `syz.2.82'. [ 42.785573][ T3646] syz.1.76 (3646) used greatest stack depth: 10592 bytes left [ 42.789613][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.804061][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.867601][ T3672] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 42.908439][ T3672] gretap1: entered promiscuous mode [ 42.951951][ T3675] 8021q: VLANs not supported on xfrm0 [ 43.024953][ T3677] loop4: detected capacity change from 0 to 256 [ 43.043515][ T3677] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.075765][ T3681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.127354][ T3685] process 'syz.4.92' launched './file1' with NULL argv: empty string added [ 43.153902][ T3681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.243577][ T3681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.304471][ T3681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.365226][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 43.365243][ T29] audit: type=1400 audit(1744559211.406:311): avc: denied { setopt } for pid=3696 comm="syz.4.97" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.402015][ T3681] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.447164][ T3681] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.518741][ T3681] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.529393][ T29] audit: type=1400 audit(1744559211.566:312): avc: denied { create } for pid=3706 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.548754][ T3681] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.570489][ T3708] Zero length message leads to an empty skb [ 43.621704][ T29] audit: type=1400 audit(1744559211.646:313): avc: denied { listen } for pid=3706 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.719446][ T29] audit: type=1400 audit(1744559211.756:314): avc: denied { mount } for pid=3711 comm="syz.0.104" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 43.771695][ T29] audit: type=1400 audit(1744559211.796:315): avc: denied { mounton } for pid=3711 comm="syz.0.104" path="/18/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 43.793647][ T29] audit: type=1400 audit(1744559211.796:316): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 43.813743][ T29] audit: type=1400 audit(1744559211.806:317): avc: denied { setopt } for pid=3713 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.834207][ T29] audit: type=1400 audit(1744559211.816:318): avc: denied { bind } for pid=3713 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.853654][ T29] audit: type=1400 audit(1744559211.816:319): avc: denied { name_bind } for pid=3713 comm="syz.4.105" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 43.875499][ T29] audit: type=1400 audit(1744559211.816:320): avc: denied { node_bind } for pid=3713 comm="syz.4.105" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 43.901346][ T3703] syz.3.100 (3703) used greatest stack depth: 10016 bytes left [ 44.102947][ T3728] loop4: detected capacity change from 0 to 512 [ 44.130468][ T3728] EXT4-fs: Ignoring removed oldalloc option [ 44.137688][ T3728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.184483][ T3728] EXT4-fs (loop4): 1 truncate cleaned up [ 44.190859][ T3728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.224077][ T3733] syzkaller0: entered promiscuous mode [ 44.229593][ T3733] syzkaller0: entered allmulticast mode [ 44.344363][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.577801][ T3761] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.730041][ T3767] ip6gre1: entered allmulticast mode [ 44.935398][ T3774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 45.053676][ T3782] capability: warning: `wޣ' uses deprecated v2 capabilities in a way that may be insecure [ 45.088024][ T3784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.104179][ T3788] loop0: detected capacity change from 0 to 512 [ 45.121945][ T3788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.148843][ T3788] EXT4-fs (loop0): 1 truncate cleaned up [ 45.155080][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.176688][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.184113][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.233912][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.336847][ T3812] loop2: detected capacity change from 0 to 128 [ 45.455744][ T3820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.469555][ T3820] netlink: 104 bytes leftover after parsing attributes in process `syz.3.147'. [ 45.514404][ T3822] loop3: detected capacity change from 0 to 512 [ 45.537131][ T3822] EXT4-fs (loop3): failed to initialize system zone (-117) [ 45.547763][ T3822] EXT4-fs (loop3): mount failed [ 45.666336][ T3833] loop3: detected capacity change from 0 to 512 [ 45.676733][ T3833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.692655][ T3833] EXT4-fs (loop3): 1 truncate cleaned up [ 45.703931][ T3833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.743896][ T3784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.776289][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.836707][ T3784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.904998][ T3784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.967863][ T3784] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.979698][ T3784] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.993370][ T3784] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.005179][ T3784] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.044068][ T3851] netlink: 'syz.1.160': attribute type 15 has an invalid length. [ 46.144754][ T3855] loop4: detected capacity change from 0 to 512 [ 46.157259][ T3855] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.172993][ T3855] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.162: bad orphan inode 13 [ 46.184231][ T3855] ext4_test_bit(bit=12, block=18) = 1 [ 46.189718][ T3855] is_bad_inode(inode)=0 [ 46.193975][ T3855] NEXT_ORPHAN(inode)=2130706432 [ 46.198834][ T3855] max_ino=32 [ 46.202131][ T3855] i_nlink=1 [ 46.206227][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.234082][ T3855] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 46.266759][ T3860] loop0: detected capacity change from 0 to 512 [ 46.274504][ T3855] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 46.292231][ T3860] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.305358][ T3866] netlink: 68 bytes leftover after parsing attributes in process `syz.3.165'. [ 46.305384][ T3860] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.305626][ T3860] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 46.337595][ T3860] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 46.344571][ T3860] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #16: comm syz.0.164: iget: immutable or append flags not allowed on symlinks [ 46.372157][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.388229][ T3860] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.164: couldn't read orphan inode 16 (err -117) [ 46.423457][ T3860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.505329][ T23] IPVS: starting estimator thread 0... [ 46.612516][ T3873] IPVS: using max 2304 ests per chain, 115200 per kthread [ 46.870681][ T3890] syz_tun: entered allmulticast mode [ 46.879562][ T3889] syz_tun: left allmulticast mode [ 47.173818][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.489814][ T3924] netlink: 252 bytes leftover after parsing attributes in process `syz.0.186'. [ 47.510150][ T3926] random: crng reseeded on system resumption [ 47.717285][ T3937] syzkaller0: entered allmulticast mode [ 47.723358][ T3937] syzkaller0: entered promiscuous mode [ 47.732912][ T3937] syzkaller0 (unregistering): left promiscuous mode [ 47.739583][ T3937] syzkaller0 (unregistering): left allmulticast mode [ 47.922610][ T3942] infiniband syz!: set active [ 47.922628][ T3942] infiniband syz!: added team_slave_0 [ 47.942090][ T3942] RDS/IB: syz!: added [ 47.942114][ T3942] smc: adding ib device syz! with port count 1 [ 47.942128][ T3942] smc: ib device syz! port 1 has pnetid [ 48.402386][ T3955] loop2: detected capacity change from 0 to 128 [ 48.439004][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 48.439018][ T29] audit: type=1400 audit(1744559216.476:743): avc: denied { mounton } for pid=3954 comm="syz.2.198" path="/36/mnt" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.468807][ T3955] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 48.525449][ T3957] loop2: detected capacity change from 0 to 512 [ 48.535109][ T3957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.545162][ T29] audit: type=1326 audit(1744559216.556:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.568577][ T29] audit: type=1326 audit(1744559216.556:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.591884][ T29] audit: type=1326 audit(1744559216.556:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.615146][ T29] audit: type=1326 audit(1744559216.556:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.638577][ T29] audit: type=1326 audit(1744559216.556:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.661944][ T29] audit: type=1326 audit(1744559216.566:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.685396][ T29] audit: type=1326 audit(1744559216.566:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.708818][ T29] audit: type=1326 audit(1744559216.566:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.732126][ T29] audit: type=1326 audit(1744559216.566:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 48.781044][ T3957] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.199: bad orphan inode 131083 [ 48.798827][ T3961] dns_resolver: Unsupported server list version (0) [ 48.854795][ T3957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.010056][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.580512][ T3982] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.637557][ T3982] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.674112][ T3982] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.710680][ T3986] Falling back ldisc for ttyS3. [ 49.734651][ T3994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.213'. [ 49.745729][ T3994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.213'. [ 49.783167][ T3982] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.835375][ T4004] Falling back ldisc for ttyS3. [ 50.127187][ T4038] syzkaller0: entered promiscuous mode [ 50.132737][ T4038] syzkaller0: entered allmulticast mode [ 50.157144][ T4044] IPVS: stopping master sync thread 4050 ... [ 50.160012][ T4050] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 50.382806][ T4071] syz.4.237 uses obsolete (PF_INET,SOCK_PACKET) [ 50.907499][ T3982] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.918914][ T3982] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.930420][ T3982] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.941801][ T3982] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.003292][ T4082] ref_ctr_offset mismatch. inode: 0x10e offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x200000000200 [ 51.027014][ T4082] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 51.035640][ T4082] ref_ctr decrement failed for inode: 0x10e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104594200 [ 51.048447][ T4082] uprobe: syz.2.242:4082 failed to unregister, leaking uprobe [ 51.160799][ T4095] loop3: detected capacity change from 0 to 1024 [ 51.178278][ T4095] EXT4-fs: Ignoring removed nobh option [ 51.184184][ T4095] EXT4-fs: Ignoring removed bh option [ 51.232321][ T4095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.314088][ T4095] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.247: Allocating blocks 385-513 which overlap fs metadata [ 51.365369][ T4109] netlink: 'syz.0.253': attribute type 13 has an invalid length. [ 51.417871][ T4095] EXT4-fs (loop3): pa ffff8881065660e0: logic 16, phys. 129, len 24 [ 51.426035][ T4095] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 51.448738][ T4109] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.455943][ T4109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.463291][ T4109] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.470360][ T4109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.499661][ T4095] syz.3.247 (4095) used greatest stack depth: 9528 bytes left [ 51.511864][ T4109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.600567][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.658511][ T4127] loop0: detected capacity change from 0 to 512 [ 51.680523][ T4127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.696783][ T4130] loop2: detected capacity change from 0 to 512 [ 51.728662][ T4130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.758227][ T4130] EXT4-fs (loop2): 1 truncate cleaned up [ 51.759613][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.776866][ T4130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.791116][ T4127] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.817795][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.875744][ T4140] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.974809][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.044174][ T4165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 52.085371][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 52.209162][ T4183] loop0: detected capacity change from 0 to 1024 [ 52.219015][ T4185] netlink: 'syz.4.271': attribute type 13 has an invalid length. [ 52.221049][ T4183] EXT4-fs: Ignoring removed nobh option [ 52.232523][ T4183] EXT4-fs: Ignoring removed bh option [ 52.256153][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.278904][ T4183] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.281: Allocating blocks 385-513 which overlap fs metadata [ 52.295707][ T4185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.356438][ T4183] EXT4-fs (loop0): pa ffff88810651e000: logic 16, phys. 129, len 24 [ 52.364518][ T4183] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 52.377054][ T4183] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 52.389425][ T4183] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.389425][ T4183] [ 52.399125][ T4183] EXT4-fs (loop0): Total free blocks count 0 [ 52.405251][ T4183] EXT4-fs (loop0): Free/Dirty block details [ 52.411292][ T4183] EXT4-fs (loop0): free_blocks=128 [ 52.416428][ T4183] EXT4-fs (loop0): dirty_blocks=0 [ 52.421534][ T4183] EXT4-fs (loop0): Block reservation details [ 52.427539][ T4183] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 52.448234][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.482692][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.605382][ T4207] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 52.677327][ T4213] loop3: detected capacity change from 0 to 2048 [ 52.699099][ T4213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.868251][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.943847][ T4230] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 52.985026][ T4233] pim6reg1: entered promiscuous mode [ 52.990447][ T4233] pim6reg1: entered allmulticast mode [ 53.083345][ T4239] loop4: detected capacity change from 0 to 512 [ 53.092269][ T4239] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 53.131660][ T4239] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.149316][ T4239] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.293: invalid indirect mapped block 256 (level 2) [ 53.183753][ T4239] EXT4-fs (loop4): 2 truncates cleaned up [ 53.196760][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.493934][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.507098][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.669626][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.756912][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 53.756930][ T29] audit: type=1400 audit(1744559221.796:1177): avc: denied { mount } for pid=4273 comm="syz.3.307" name="/" dev="ramfs" ino=7108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.823313][ T29] audit: type=1326 audit(1744559221.866:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 53.846578][ T29] audit: type=1326 audit(1744559221.866:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 53.875006][ T29] audit: type=1326 audit(1744559221.916:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 53.898028][ T29] audit: type=1326 audit(1744559221.916:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 53.921028][ T29] audit: type=1326 audit(1744559221.916:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 53.944008][ T29] audit: type=1326 audit(1744559221.916:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 53.967028][ T29] audit: type=1326 audit(1744559221.916:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 53.989969][ T29] audit: type=1326 audit(1744559221.916:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 [ 54.013008][ T29] audit: type=1326 audit(1744559221.916:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b9167d169 code=0x7ffc0000 Apr 13 15:47:02 syzkaller kern.notice kernel: [ 53.875006][ T29] audit: type=1326 audit(1744559221.916:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip [ 54.077720][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 54.152528][ T4298] loop2: detected capacity change from 0 to 1024 [ 54.154091][ T4295] loop3: detected capacity change from 0 to 4096 [ 54.159729][ T4298] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.176301][ T4298] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.189830][ T4298] JBD2: no valid journal superblock found [ 54.195653][ T4298] EXT4-fs (loop2): Could not load journal inode [ 54.206869][ T4295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.211807][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 54.273459][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.291417][ T4305] geneve0: entered allmulticast mode [ 54.397043][ T4312] syzkaller0: entered promiscuous mode [ 54.402613][ T4312] syzkaller0: entered allmulticast mode [ 54.419648][ T4317] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.475409][ T4317] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.573461][ T4317] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.623050][ T4317] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.727861][ T4317] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.742955][ T4317] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.776421][ T4317] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.808014][ T4317] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.816803][ T4346] loop3: detected capacity change from 0 to 2048 [ 54.870806][ T4346] Alternate GPT is invalid, using primary GPT. [ 54.877143][ T4346] loop3: p1 p2 p3 [ 54.910890][ T3004] Alternate GPT is invalid, using primary GPT. [ 54.917255][ T3004] loop3: p1 p2 p3 [ 55.042739][ T4352] bridge: RTM_NEWNEIGH with invalid ether address [ 55.291872][ T4364] loop3: detected capacity change from 0 to 1024 [ 55.300678][ T4364] EXT4-fs: Ignoring removed orlov option [ 55.315343][ T4364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.544847][ T4372] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.612199][ T4372] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.673524][ T4372] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.742324][ T4372] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.818093][ T4372] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.830874][ T4372] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.849621][ T4372] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.862686][ T4372] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.204683][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.641263][ T4402] loop2: detected capacity change from 0 to 128 [ 56.685097][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 56.714854][ T4407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4407 comm=syz.1.359 [ 56.752134][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.752134][ T51] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 56.786342][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.786342][ T51] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 56.803712][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.803712][ T51] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 56.817598][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.817598][ T51] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 56.832823][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.832823][ T51] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 56.871586][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.871586][ T51] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 56.905194][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.905194][ T51] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 56.944162][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.944162][ T51] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 56.974850][ T51] kworker/u8:3: attempt to access beyond end of device [ 56.974850][ T51] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 57.013414][ T51] kworker/u8:3: attempt to access beyond end of device [ 57.013414][ T51] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 57.348226][ T4443] loop4: detected capacity change from 0 to 512 [ 57.374076][ T4443] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.401923][ T4443] EXT4-fs (loop4): 1 truncate cleaned up [ 57.423859][ T4443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.462586][ T4449] loop3: detected capacity change from 0 to 1024 [ 57.487778][ T4451] netlink: 'syz.0.376': attribute type 10 has an invalid length. [ 57.498560][ T4449] EXT4-fs: Ignoring removed orlov option [ 57.504432][ T4449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.555609][ T4451] batman_adv: batadv0: Adding interface: team0 [ 57.561982][ T4451] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.587265][ T4451] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 57.632540][ T4449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.651817][ T4449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.725700][ T4449] loop3: detected capacity change from 0 to 1024 [ 57.740163][ T4449] EXT4-fs: Ignoring removed orlov option [ 57.772227][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.801460][ T4449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.206908][ T4476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.244680][ T4476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.259782][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 58.314978][ T4476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.341139][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.390022][ T4483] netlink: 'syz.3.389': attribute type 13 has an invalid length. [ 58.401833][ T4476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.407662][ T4485] mmap: syz.1.390 (4485) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.475983][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.483252][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.526322][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.537950][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.572144][ T4483] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.581236][ T4483] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.590220][ T4483] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.599158][ T4483] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.635722][ T4476] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.649605][ T4476] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.664119][ T4476] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.685640][ T4476] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.762712][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 58.762726][ T29] audit: type=1400 audit(1744559226.806:1501): avc: denied { create } for pid=4497 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.774925][ T4492] syzkaller0: entered promiscuous mode [ 58.793935][ T4492] syzkaller0: entered allmulticast mode [ 58.843138][ T29] audit: type=1400 audit(1744559226.886:1502): avc: denied { read } for pid=4500 comm="syz.2.396" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.873734][ T29] audit: type=1400 audit(1744559226.886:1503): avc: denied { open } for pid=4500 comm="syz.2.396" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.914443][ T29] audit: type=1400 audit(1744559226.956:1504): avc: denied { name_bind } for pid=4494 comm="syz.0.394" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.389698][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 59.487978][ T4521] hsr0: entered promiscuous mode [ 59.578907][ T29] audit: type=1400 audit(1744559227.616:1505): avc: denied { read } for pid=4528 comm="syz.1.408" dev="nsfs" ino=4026532441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.605578][ T29] audit: type=1400 audit(1744559227.616:1506): avc: denied { open } for pid=4528 comm="syz.1.408" path="net:[4026532441]" dev="nsfs" ino=4026532441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.628881][ T29] audit: type=1400 audit(1744559227.616:1507): avc: denied { create } for pid=4528 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.648403][ T29] audit: type=1400 audit(1744559227.616:1508): avc: denied { bind } for pid=4528 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.667668][ T29] audit: type=1400 audit(1744559227.616:1509): avc: denied { listen } for pid=4528 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.687648][ T29] audit: type=1400 audit(1744559227.726:1510): avc: denied { create } for pid=4532 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.436656][ T4551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.443942][ T4551] IPv6: NLM_F_CREATE should be set when creating new route [ 60.867299][ T4567] netlink: 'syz.4.425': attribute type 7 has an invalid length. [ 60.875044][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 60.935060][ T4569] tipc: Started in network mode [ 60.940024][ T4569] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 60.947386][ T4569] tipc: Enabled bearer , priority 10 [ 60.975286][ T4569] netlink: 14 bytes leftover after parsing attributes in process `syz.3.426'. [ 60.995205][ T4569] tipc: Disabling bearer [ 61.005941][ T4577] IPv4: Oversized IP packet from 127.202.26.0 [ 61.062346][ T4579] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 61.110397][ T4583] loop4: detected capacity change from 0 to 1024 [ 61.122592][ T4583] EXT4-fs: Ignoring removed orlov option [ 61.128311][ T4583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.157191][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.182499][ T4585] serio: Serial port ptm0 [ 61.189364][ T4583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.226369][ T4583] loop4: detected capacity change from 0 to 1024 [ 61.234357][ T4583] EXT4-fs: Ignoring removed orlov option [ 61.245743][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.939295][ T4617] hsr0: entered promiscuous mode [ 62.052554][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.247995][ T4628] pim6reg1: entered promiscuous mode [ 62.253533][ T4628] pim6reg1: entered allmulticast mode [ 62.789314][ T4661] batman_adv: batadv0: Removing interface: team0 [ 62.796687][ T4661] bridge_slave_0: left allmulticast mode [ 62.802444][ T4661] bridge_slave_0: left promiscuous mode [ 62.808123][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.817732][ T4661] bridge_slave_1: left allmulticast mode [ 62.823508][ T4661] bridge_slave_1: left promiscuous mode [ 62.829247][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.839327][ T4661] bond0: (slave bond_slave_0): Releasing backup interface [ 62.848165][ T4661] bond0: (slave bond_slave_1): Releasing backup interface [ 62.858423][ T4661] team0: Port device team_slave_0 removed [ 62.871977][ T4661] team0: Port device team_slave_1 removed [ 62.878556][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.893230][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.913606][ T4663] team0: Mode changed to "loadbalance" [ 62.939766][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 63.010043][ T4668] netlink: 33892 bytes leftover after parsing attributes in process `syz.0.460'. [ 63.067604][ T4670] loop3: detected capacity change from 0 to 128 [ 63.283774][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 63.297868][ T4675] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.306233][ T4675] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.314579][ T4675] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.322793][ T4675] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.369132][ T4678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.412986][ T4678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.428892][ T4680] wg2: entered promiscuous mode [ 63.433869][ T4680] wg2: entered allmulticast mode [ 63.554462][ T4685] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.468'. [ 63.564268][ T4684] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.468'. [ 63.863435][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 63.863452][ T29] audit: type=1400 audit(1744559231.906:1798): avc: denied { write } for pid=4699 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.943198][ T29] audit: type=1400 audit(1744559231.986:1799): avc: denied { name_bind } for pid=4703 comm="syz.3.476" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.188251][ T4714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.195416][ T29] audit: type=1400 audit(1744559232.226:1800): avc: denied { write } for pid=4713 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.223649][ T4714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.529239][ T29] audit: type=1326 audit(1744559232.566:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 64.552661][ T29] audit: type=1326 audit(1744559232.566:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 64.603910][ T29] audit: type=1326 audit(1744559232.616:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 64.627439][ T29] audit: type=1326 audit(1744559232.616:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 64.650786][ T29] audit: type=1326 audit(1744559232.616:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 64.674190][ T29] audit: type=1326 audit(1744559232.616:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 64.697513][ T29] audit: type=1326 audit(1744559232.616:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 64.831231][ T4744] loop3: detected capacity change from 0 to 1024 [ 64.838547][ T4744] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 64.848495][ T4744] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 64.868671][ T4744] EXT4-fs (loop3): journal inode is deleted [ 65.265937][ T23] IPVS: starting estimator thread 0... [ 65.360137][ T4767] IPVS: using max 2208 ests per chain, 110400 per kthread [ 65.363436][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.377524][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.741895][ T4776] loop3: detected capacity change from 0 to 164 [ 65.751498][ T4776] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 65.783609][ T4778] pim6reg1: entered promiscuous mode [ 65.789047][ T4778] pim6reg1: entered allmulticast mode [ 65.814843][ T4781] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 65.822681][ T4781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.508'. [ 65.831804][ T4781] batadv0: entered promiscuous mode [ 65.837064][ T4781] batadv0: entered allmulticast mode [ 65.843993][ T4781] bridge0: port 3(batadv0) entered blocking state [ 65.850686][ T4781] bridge0: port 3(batadv0) entered disabled state [ 65.878986][ T4781] bridge0: port 3(batadv0) entered blocking state [ 65.885626][ T4781] bridge0: port 3(batadv0) entered forwarding state [ 65.963028][ T4792] SELinux: Context system_u:object_r:dhcpd_unit_file_t:s0 is not valid (left unmapped). [ 65.974120][ T4781] batman_adv: batadv0: Adding interface: dummy0 [ 65.980481][ T4781] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.032120][ T4781] batman_adv: batadv0: Interface activated: dummy0 [ 66.048249][ T4781] batadv0: mtu less than device minimum [ 66.054415][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.065123][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.075880][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.086682][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.097552][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.108365][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.119114][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.129918][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.140697][ T4781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.155569][ T4802] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.516'. [ 66.177326][ T4800] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.516'. [ 66.190974][ T4798] capability: warning: `syz.0.515' uses 32-bit capabilities (legacy support in use) [ 66.210234][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 66.219484][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 66.279077][ T4814] Illegal XDP return value 3513136124 on prog (id 471) dev syz_tun, expect packet loss! [ 66.363247][ T4828] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.431884][ T4828] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.531638][ T4828] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.591918][ T4828] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.646916][ T4828] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.658340][ T4828] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.669835][ T4828] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.681913][ T4828] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.987887][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 67.107161][ T4854] loop3: detected capacity change from 0 to 512 [ 67.137976][ T4854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 67.151802][ T4854] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.183070][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 67.279161][ T4870] loop3: detected capacity change from 0 to 1024 [ 67.286362][ T4870] EXT4-fs: Ignoring removed oldalloc option [ 67.293807][ T4870] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 67.324997][ T4874] loop4: detected capacity change from 0 to 256 [ 67.332065][ T4874] msdos: Bad value for 'gid' [ 67.336706][ T4874] msdos: Bad value for 'gid' [ 67.343065][ T4870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.386208][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.400761][ T4878] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 67.888520][ T4909] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.552'. [ 67.898429][ T4904] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.552'. [ 68.049944][ T4921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 68.063620][ T4921] bond0: entered promiscuous mode [ 68.068821][ T4921] bond_slave_0: entered promiscuous mode [ 68.074593][ T4921] bond_slave_1: entered promiscuous mode [ 68.082713][ T4921] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.092323][ T4921] bond0: left promiscuous mode [ 68.097149][ T4921] bond_slave_0: left promiscuous mode [ 68.102703][ T4921] bond_slave_1: left promiscuous mode [ 68.128414][ T4927] loop4: detected capacity change from 0 to 512 [ 68.139975][ T4927] loop4: detected capacity change from 0 to 128 [ 68.162746][ T4927] FAT-fs (loop4): Directory bread(block 32) failed [ 68.177279][ T4927] FAT-fs (loop4): Directory bread(block 33) failed [ 68.184281][ T4927] FAT-fs (loop4): Directory bread(block 34) failed [ 68.207921][ T4927] FAT-fs (loop4): Directory bread(block 35) failed [ 68.214749][ T4927] FAT-fs (loop4): Directory bread(block 36) failed [ 68.221639][ T4927] FAT-fs (loop4): Directory bread(block 37) failed [ 68.228375][ T4927] FAT-fs (loop4): Directory bread(block 38) failed [ 68.236368][ T4927] FAT-fs (loop4): Directory bread(block 39) failed [ 68.245281][ T4927] FAT-fs (loop4): Directory bread(block 40) failed [ 68.258756][ T4927] FAT-fs (loop4): Directory bread(block 41) failed [ 68.347429][ T4942] __nla_validate_parse: 1 callbacks suppressed [ 68.347448][ T4942] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.569'. [ 68.363892][ T4937] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.569'. [ 68.401926][ T4946] loop4: detected capacity change from 0 to 512 [ 68.422822][ T4946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.490942][ T4946] EXT4-fs (loop4): 1 truncate cleaned up [ 68.497551][ T4954] loop3: detected capacity change from 0 to 164 [ 68.518358][ T4946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.548990][ T4954] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 68.583915][ T4946] netlink: 96 bytes leftover after parsing attributes in process `syz.4.574'. [ 68.645336][ T4954] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 68.661059][ T4954] Symlink component flag not implemented [ 68.661977][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.667316][ T4954] Symlink component flag not implemented [ 68.690418][ T4954] Symlink component flag not implemented (7) [ 68.697100][ T4954] Symlink component flag not implemented (116) [ 68.856642][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 68.877428][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 68.877445][ T29] audit: type=1326 audit(1744559236.916:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b9167d169 code=0x0 [ 68.912600][ T29] audit: type=1326 audit(1744559236.916:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6acd9359 code=0x7ffc0000 [ 68.935209][ T29] audit: type=1326 audit(1744559236.916:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 68.957941][ T29] audit: type=1326 audit(1744559236.936:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6acd9359 code=0x7ffc0000 [ 68.980501][ T29] audit: type=1326 audit(1744559236.936:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 69.003123][ T29] audit: type=1326 audit(1744559236.956:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6acd9359 code=0x7ffc0000 [ 69.025617][ T29] audit: type=1326 audit(1744559236.956:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 69.048211][ T29] audit: type=1326 audit(1744559236.956:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6acd9359 code=0x7ffc0000 [ 69.071482][ T29] audit: type=1326 audit(1744559236.956:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6ad3d169 code=0x7ffc0000 [ 69.072716][ T4985] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 69.101917][ T4985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.587'. [ 69.106574][ T29] audit: type=1326 audit(1744559236.986:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6acd9359 code=0x7ffc0000 [ 69.143234][ T4985] dummy0: entered promiscuous mode [ 69.149105][ T4985] bridge0: port 3(dummy0) entered blocking state [ 69.155543][ T4985] bridge0: port 3(dummy0) entered disabled state [ 69.162287][ T4985] dummy0: entered allmulticast mode [ 69.168350][ T4985] bridge0: port 3(dummy0) entered blocking state [ 69.174769][ T4985] bridge0: port 3(dummy0) entered forwarding state [ 69.189406][ T4994] veth0_vlan: entered allmulticast mode [ 69.197949][ T4994] veth0_vlan: left promiscuous mode [ 69.203256][ T4994] veth0_vlan: entered promiscuous mode [ 69.299675][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 71.352081][ T5067] bridge0: port 4(veth0_to_bridge) entered blocking state [ 71.359288][ T5067] bridge0: port 4(veth0_to_bridge) entered disabled state [ 71.386103][ T5067] veth0_to_bridge: entered allmulticast mode [ 71.392883][ T5067] veth0_to_bridge: entered promiscuous mode [ 71.398918][ T5067] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 71.412338][ T5067] bridge0: port 4(veth0_to_bridge) entered blocking state [ 71.419497][ T5067] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 71.651146][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 71.660441][ T5077] tipc: Started in network mode [ 71.665303][ T5077] tipc: Node identity 1, cluster identity 4711 [ 71.671570][ T5077] tipc: Node number set to 1 [ 71.713842][ T5079] loop9: detected capacity change from 0 to 7 [ 71.739867][ T5079] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.778806][ T5079] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.786893][ T5079] loop9: unable to read partition table [ 71.815212][ T5085] loop2: detected capacity change from 0 to 1024 [ 71.830794][ T5079] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 71.830794][ T5079] U) failed (rc=-5) [ 71.854973][ T5085] EXT4-fs: Ignoring removed orlov option [ 71.868094][ T5085] journal_path: Lookup failure for './file1/file0' [ 71.874705][ T5085] EXT4-fs: error: could not find journal device path [ 72.307025][ T5104] loop3: detected capacity change from 0 to 512 [ 72.372688][ T5104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.438075][ T5104] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.451805][ T5110] xt_hashlimit: max too large, truncated to 1048576 [ 72.458438][ T5110] xt_hashlimit: overflow, rate too high: 0 [ 72.593556][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.765860][ T5120] veth1_macvtap: left promiscuous mode [ 73.303779][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 73.374196][ T5153] tipc: Started in network mode [ 73.379175][ T5153] tipc: Node identity ac14140f, cluster identity 4711 [ 73.407284][ T5153] tipc: New replicast peer: 10.1.1.2 [ 73.412720][ T5153] tipc: Enabled bearer , priority 10 [ 73.903682][ T29] kauditd_printk_skb: 1042 callbacks suppressed [ 73.903760][ T29] audit: type=1400 audit(1744559241.946:3467): avc: denied { prog_load } for pid=5172 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.969472][ T29] audit: type=1400 audit(1744559241.946:3468): avc: denied { bpf } for pid=5172 comm="syz.2.661" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.989839][ T5173] loop2: detected capacity change from 0 to 8192 [ 73.990012][ T29] audit: type=1400 audit(1744559241.946:3469): avc: denied { perfmon } for pid=5172 comm="syz.2.661" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.070897][ T29] audit: type=1400 audit(1744559242.026:3470): avc: denied { read write } for pid=5172 comm="syz.2.661" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.094930][ T29] audit: type=1400 audit(1744559242.026:3471): avc: denied { open } for pid=5172 comm="syz.2.661" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.118813][ T29] audit: type=1400 audit(1744559242.026:3472): avc: denied { ioctl } for pid=5172 comm="syz.2.661" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.144269][ T29] audit: type=1400 audit(1744559242.046:3473): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 74.166333][ T29] audit: type=1400 audit(1744559242.046:3474): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.188129][ T29] audit: type=1400 audit(1744559242.046:3475): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.210505][ T29] audit: type=1400 audit(1744559242.046:3476): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.338181][ T5180] pim6reg1: entered promiscuous mode [ 74.343696][ T5180] pim6reg1: entered allmulticast mode [ 74.430252][ T3378] tipc: Node number set to 2886997007 [ 74.764801][ T5194] loop3: detected capacity change from 0 to 512 [ 74.774270][ T5194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.851998][ T5194] EXT4-fs (loop3): 1 truncate cleaned up [ 74.858086][ T5194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.139665][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.524701][ T5210] netlink: 'syz.3.672': attribute type 10 has an invalid length. [ 75.532550][ T5210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 75.657236][ T5210] dummy0: entered promiscuous mode [ 75.691705][ T5210] bridge0: port 1(dummy0) entered blocking state [ 75.698196][ T5210] bridge0: port 1(dummy0) entered disabled state [ 75.733776][ T5210] dummy0: entered allmulticast mode [ 75.775188][ T5219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.676'. [ 75.838868][ T5223] loop4: detected capacity change from 0 to 512 [ 75.934884][ T5223] EXT4-fs (loop4): 1 orphan inode deleted [ 75.962695][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 75.974617][ T5223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.004112][ T5223] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.048264][ T5233] C: renamed from team_slave_0 (while UP) [ 76.074414][ T5233] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 76.082214][ T5233] net_ratelimit: 10 callbacks suppressed [ 76.082228][ T5233] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 76.233365][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.510517][ T5247] wg2: entered promiscuous mode [ 76.515542][ T5247] wg2: entered allmulticast mode [ 76.710988][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 76.728160][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 76.764285][ T5253] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 76.772145][ T5253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.691'. [ 76.820203][ T5253] dummy0: entered promiscuous mode [ 76.838777][ T5253] bridge0: port 3(dummy0) entered blocking state [ 76.845275][ T5253] bridge0: port 3(dummy0) entered disabled state [ 76.907870][ T5260] syz.2.694 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.961866][ T5253] dummy0: entered allmulticast mode [ 76.967884][ T5253] bridge0: port 3(dummy0) entered blocking state [ 76.974343][ T5253] bridge0: port 3(dummy0) entered forwarding state [ 77.085705][ T5265] loop2: detected capacity change from 0 to 128 [ 77.104581][ T5265] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 77.132160][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.146586][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.160997][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.164925][ T5265] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.175396][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.201655][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.216072][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.230528][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.244963][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.259378][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 77.319706][ T5265] ext2 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.354150][ T5264] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 77.388007][ T5264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.696'. [ 77.422101][ T5264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5264 comm=syz.4.696 [ 77.466845][ T5264] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 77.513975][ T5264] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 77.591336][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.677886][ T5291] loop2: detected capacity change from 0 to 512 [ 78.814032][ T5291] EXT4-fs (loop2): 1 orphan inode deleted [ 78.879546][ T5301] netlink: 14 bytes leftover after parsing attributes in process `syz.0.708'. [ 78.882528][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 78.912109][ T5291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.947748][ T29] kauditd_printk_skb: 828 callbacks suppressed [ 78.947843][ T29] audit: type=1326 audit(1744559246.936:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f5f64127 code=0x7ffc0000 [ 78.961843][ T5291] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.983444][ T29] audit: type=1326 audit(1744559246.936:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f5f09359 code=0x7ffc0000 [ 79.019613][ T29] audit: type=1326 audit(1744559246.936:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f54f5f6d169 code=0x7ffc0000 [ 79.046100][ T29] audit: type=1326 audit(1744559246.936:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f5f64127 code=0x7ffc0000 [ 79.072328][ T29] audit: type=1326 audit(1744559246.936:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f5f09359 code=0x7ffc0000 [ 79.098255][ T29] audit: type=1326 audit(1744559246.936:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f54f5f6d169 code=0x7ffc0000 [ 79.124346][ T29] audit: type=1326 audit(1744559246.946:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f5f64127 code=0x7ffc0000 [ 79.150407][ T29] audit: type=1326 audit(1744559246.946:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f5f09359 code=0x7ffc0000 [ 79.176521][ T29] audit: type=1326 audit(1744559246.946:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f54f5f6d169 code=0x7ffc0000 [ 79.202585][ T29] audit: type=1326 audit(1744559246.956:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f5f64127 code=0x7ffc0000 [ 79.264559][ T5301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.276571][ T5301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.303866][ T5298] xt_hashlimit: size too large, truncated to 1048576 [ 79.455775][ T5301] bond0 (unregistering): Released all slaves [ 79.465187][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.481511][ T5304] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 80.229380][ T5318] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 80.237212][ T5318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.714'. [ 80.264560][ T5318] dummy0: entered promiscuous mode [ 80.271668][ T5318] batman_adv: batadv0: Interface deactivated: dummy0 [ 80.278412][ T5318] batman_adv: batadv0: Removing interface: dummy0 [ 80.456434][ T5323] netlink: 165 bytes leftover after parsing attributes in process `syz.1.716'. [ 80.466083][ T5323] netlink: 277 bytes leftover after parsing attributes in process `syz.1.716'. [ 80.518854][ T5325] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 80.782652][ T5318] bridge0: port 5(dummy0) entered blocking state [ 80.789065][ T5318] bridge0: port 5(dummy0) entered disabled state [ 80.807754][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.860329][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.871197][ T5318] dummy0: entered allmulticast mode [ 80.909851][ T5318] bridge0: port 5(dummy0) entered blocking state [ 80.916278][ T5318] bridge0: port 5(dummy0) entered forwarding state [ 81.058490][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 81.069646][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 81.171715][ T5336] loop3: detected capacity change from 0 to 512 [ 81.735031][ T5345] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 82.475693][ T5355] raw_sendmsg: syz.0.732 forgot to set AF_INET. Fix it! [ 82.653010][ T5359] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 83.335135][ T5359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.444696][ T5362] bond1: (slave dummy0): making interface the new active one [ 83.474128][ T5362] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 83.544952][ T5375] loop3: detected capacity change from 0 to 128 [ 83.985692][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 83.985709][ T29] audit: type=1400 audit(1744559252.026:4772): avc: denied { prog_load } for pid=5373 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.011070][ T29] audit: type=1400 audit(1744559252.026:4773): avc: denied { bpf } for pid=5373 comm="syz.2.738" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.031655][ T29] audit: type=1400 audit(1744559252.026:4774): avc: denied { perfmon } for pid=5373 comm="syz.2.738" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.133598][ T5375] bio_check_eod: 58 callbacks suppressed [ 84.133650][ T5375] syz.3.739: attempt to access beyond end of device [ 84.133650][ T5375] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 84.280214][ T5375] syz.3.739: attempt to access beyond end of device [ 84.280214][ T5375] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 84.366356][ T5387] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.372967][ T5387] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 84.380816][ T5387] audit: backlog limit exceeded [ 84.402513][ T5386] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.403362][ T5375] syz.3.739: attempt to access beyond end of device [ 84.403362][ T5375] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 84.409051][ T5386] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 84.430166][ T5386] audit: backlog limit exceeded [ 84.435963][ T5386] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.494886][ T5383] loop4: detected capacity change from 0 to 8192 [ 84.521736][ T5375] syz.3.739: attempt to access beyond end of device [ 84.521736][ T5375] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 84.554415][ T5383] syz.4.741: attempt to access beyond end of device [ 84.554415][ T5383] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 84.592379][ T5383] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 84.600296][ T5383] FAT-fs (loop4): Filesystem has been set read-only [ 84.634311][ T5383] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 84.676537][ T5383] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 84.708586][ T5375] syz.3.739: attempt to access beyond end of device [ 84.708586][ T5375] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 84.722299][ T5375] syz.3.739: attempt to access beyond end of device [ 84.722299][ T5375] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 84.736670][ T5375] syz.3.739: attempt to access beyond end of device [ 84.736670][ T5375] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 84.750269][ T5375] syz.3.739: attempt to access beyond end of device [ 84.750269][ T5375] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 84.765206][ T5375] syz.3.739: attempt to access beyond end of device [ 84.765206][ T5375] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 85.425798][ T5396] loop2: detected capacity change from 0 to 128 [ 86.729781][ T5408] pim6reg1: entered promiscuous mode [ 86.735245][ T5408] pim6reg1: entered allmulticast mode [ 87.844392][ T5429] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 89.703723][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 89.703742][ T29] audit: type=1326 audit(1744559257.096:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6ad34127 code=0x7ffc0000 [ 89.736848][ T29] audit: type=1326 audit(1744559257.096:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6acd9359 code=0x7ffc0000 [ 89.763599][ T29] audit: type=1326 audit(1744559257.176:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6ad34127 code=0x7ffc0000 [ 89.790348][ T29] audit: type=1326 audit(1744559257.176:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.2.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d6acd9359 code=0x7ffc0000 [ 89.817146][ T29] audit: type=1400 audit(1744559257.286:5297): avc: denied { search } for pid=5441 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.842903][ T29] audit: type=1400 audit(1744559257.286:5298): avc: denied { search } for pid=5441 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.869302][ T29] audit: type=1400 audit(1744559257.286:5299): avc: denied { read } for pid=5441 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.895758][ T29] audit: type=1400 audit(1744559257.286:5300): avc: denied { open } for pid=5441 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.924230][ T29] audit: type=1400 audit(1744559257.286:5301): avc: denied { getattr } for pid=5441 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.953053][ T29] audit: type=1400 audit(1744559257.286:5302): avc: denied { getattr } for pid=5441 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.470179][ C0] ================================================================== [ 91.478326][ C0] BUG: KCSAN: data-race in br_fdb_update / br_fdb_update [ 91.485391][ C0] [ 91.487724][ C0] write to 0xffff8881185217c0 of 8 bytes by interrupt on cpu 1: [ 91.495387][ C0] br_fdb_update+0x14e/0x4c0 [ 91.500005][ C0] br_handle_frame_finish+0x315/0xf70 [ 91.505401][ C0] br_handle_frame+0x5b6/0x9b0 [ 91.510202][ C0] __netif_receive_skb_core+0xaf6/0x2580 [ 91.515882][ C0] __netif_receive_skb+0x5d/0x290 [ 91.520941][ C0] process_backlog+0x22e/0x440 [ 91.525735][ C0] __napi_poll+0x63/0x3c0 [ 91.530095][ C0] net_rx_action+0x3a3/0x800 [ 91.534716][ C0] handle_softirqs+0xbf/0x280 [ 91.539415][ C0] do_softirq+0x62/0xa0 [ 91.543591][ C0] __local_bh_enable_ip+0x6e/0x70 [ 91.548633][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 91.553587][ C0] batadv_dat_purge+0x1e6/0x270 [ 91.558472][ C0] process_scheduled_works+0x4de/0xa20 [ 91.563995][ C0] worker_thread+0x52c/0x710 [ 91.568602][ C0] kthread+0x4b7/0x540 [ 91.572690][ C0] ret_from_fork+0x4b/0x60 [ 91.577133][ C0] ret_from_fork_asm+0x1a/0x30 [ 91.581914][ C0] [ 91.584240][ C0] read to 0xffff8881185217c0 of 8 bytes by interrupt on cpu 0: [ 91.591800][ C0] br_fdb_update+0x119/0x4c0 [ 91.596419][ C0] br_handle_frame_finish+0x315/0xf70 [ 91.601811][ C0] br_handle_frame+0x5b6/0x9b0 [ 91.606589][ C0] __netif_receive_skb_core+0xaf6/0x2580 [ 91.612303][ C0] __netif_receive_skb+0x5d/0x290 [ 91.617350][ C0] process_backlog+0x22e/0x440 [ 91.622144][ C0] __napi_poll+0x63/0x3c0 [ 91.626501][ C0] net_rx_action+0x3a3/0x800 [ 91.631118][ C0] handle_softirqs+0xbf/0x280 [ 91.635807][ C0] do_softirq+0x62/0xa0 [ 91.639978][ C0] __local_bh_enable_ip+0x6e/0x70 [ 91.645021][ C0] fpu_clone+0x244/0x560 [ 91.649299][ C0] copy_thread+0x17d/0x390 [ 91.653732][ C0] copy_process+0xd95/0x1f60 [ 91.658344][ C0] kernel_clone+0x168/0x5d0 [ 91.662869][ C0] __x64_sys_clone+0xe9/0x120 [ 91.667573][ C0] x64_sys_call+0x2dc9/0x2e10 [ 91.672272][ C0] do_syscall_64+0xc9/0x1c0 [ 91.676844][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.682767][ C0] [ 91.685096][ C0] value changed: 0x00000000ffffae59 -> 0x00000000ffffae5a [ 91.692208][ C0] [ 91.694539][ C0] Reported by Kernel Concurrency Sanitizer on: [ 91.700700][ C0] CPU: 0 UID: 0 PID: 5439 Comm: dhcpcd-run-hook Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 91.713650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.723718][ C0] ================================================================== SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 93.770738][ C0] net_ratelimit: 32510 callbacks suppressed [ 93.770755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.789200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.801632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.814092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.826537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.838957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.851349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.863794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.876222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 93.888697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 95.091467][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 95.091483][ T29] audit: type=1400 audit(1744559263.136:5344): avc: denied { search } for pid=5448 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.123414][ T29] audit: type=1400 audit(1744559263.136:5345): avc: denied { search } for pid=5448 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.934137][ T29] audit: type=1400 audit(1744559263.196:5346): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 95.959846][ T29] audit: type=1400 audit(1744559263.196:5347): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.985267][ T29] audit: type=1400 audit(1744559263.196:5348): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.011232][ T29] audit: type=1400 audit(1744559263.196:5349): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.037469][ T29] audit: type=1400 audit(1744559263.196:5350): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.064069][ T29] audit: type=1400 audit(1744559263.206:5351): avc: denied { search } for pid=5448 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.090776][ T29] audit: type=1400 audit(1744559263.236:5352): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.118713][ T29] audit: type=1400 audit(1744559263.236:5353): avc: denied { read write open } for pid=3302 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.780177][ C1] net_ratelimit: 20906 callbacks suppressed [ 98.780195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.780461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 98.786475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.798331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.810489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.822927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0) [ 98.834365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.846161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.858203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.870685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:61:13:99:de:d6, vlan:0)