last executing test programs: 11.475620267s ago: executing program 3 (id=546): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffb}, 0x18) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) 11.456667369s ago: executing program 3 (id=547): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40010141, 0x0, 0x0) 11.432709922s ago: executing program 3 (id=549): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 11.259794517s ago: executing program 3 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x210009, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00') 11.237554659s ago: executing program 3 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 11.074512765s ago: executing program 3 (id=571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 11.050052037s ago: executing program 32 (id=571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 704.649395ms ago: executing program 4 (id=983): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) unlink(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 665.703068ms ago: executing program 4 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgget$private(0x0, 0x0) 584.895916ms ago: executing program 4 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x6005}, @void, @eth={@multicast, @random="a4941a52afcf", @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0xb00}}}}}}}}}, 0x4a) 469.818987ms ago: executing program 5 (id=996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 466.130877ms ago: executing program 4 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 450.714338ms ago: executing program 5 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') stat(&(0x7f0000000400)='./file0\x00', 0x0) 376.995035ms ago: executing program 5 (id=1000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgget$private(0x0, 0x0) 322.69098ms ago: executing program 1 (id=1002): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) 322.57924ms ago: executing program 5 (id=1003): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 291.767423ms ago: executing program 0 (id=1004): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/51, 0x33) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 291.254753ms ago: executing program 1 (id=1005): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) chmod(0x0, 0x30) 290.577213ms ago: executing program 4 (id=1019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 266.764205ms ago: executing program 1 (id=1010): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204010, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x58) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 248.561887ms ago: executing program 0 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) lgetxattr(0x0, 0x0, 0x0, 0x0) 232.622998ms ago: executing program 0 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 232.190908ms ago: executing program 1 (id=1014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 207.15719ms ago: executing program 5 (id=1016): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) chdir(&(0x7f0000000140)='./file0\x00') link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 206.65193ms ago: executing program 2 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) times(0x0) 181.530533ms ago: executing program 0 (id=1017): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/17, 0x11}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 180.664883ms ago: executing program 1 (id=1030): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xaf}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 165.652105ms ago: executing program 2 (id=1018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 164.855874ms ago: executing program 4 (id=1032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 137.436267ms ago: executing program 2 (id=1020): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x7e6051fbc7d037b5}, 0x0) 99.80542ms ago: executing program 0 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setresuid(0xee00, 0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000016d0cffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000003704000000ffffffdd4005000000000034000000016d00007b130000000000001d440100000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b70300c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a602a018628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7c3abee0712f5f6b4ee5e459493113d8697502c7596566d674e425da5e87e59602a9f6590521d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7bea19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecfd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000999d09ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac494e0b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a42b46979f99f6a1527f004f1e37a3926937e84fb478199dc1ac486e2ea6020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2245e761f5a3bfdcdc18ac27db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b056c90dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d6d4fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520542c1f725402404f37cda7868234eeefbd472c7b396c182f23e00bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb676198caf54f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3eddd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472ec9af3327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834600d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc723e173d14b65bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12d14667855757ca543b524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3884123633e9af67a0972612b5874f2a4bb21772c35bf437c31afa5990a8bb584792aea1353f0e2739cea006984449fec118b5e8545c976a7bd829fdc88855c1641593f4f825e72b56be89c5900666a2edf"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff95, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 94.340951ms ago: executing program 2 (id=1022): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 57.675814ms ago: executing program 2 (id=1023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 18.327998ms ago: executing program 5 (id=1024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 5.769479ms ago: executing program 2 (id=1026): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x10000, @value=r1}, 0x28) 519.65µs ago: executing program 0 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 0s ago: executing program 1 (id=1029): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20502, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) kernel console output (not intermixed with test programs): [ 18.424417][ T29] audit: type=1400 audit(1767264579.545:62): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.446359][ T29] audit: type=1400 audit(1767264579.545:63): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.469093][ T29] audit: type=1400 audit(1767264579.545:64): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.492151][ T29] audit: type=1400 audit(1767264579.545:65): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.515259][ T29] audit: type=1400 audit(1767264579.545:66): avc: denied { read open } for pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 24.094672][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.094686][ T29] audit: type=1400 audit(1767264585.215:70): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.095566][ T3306] cgroup: Unknown subsys name 'net' [ 24.100713][ T29] audit: type=1400 audit(1767264585.215:71): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.150729][ T29] audit: type=1400 audit(1767264585.255:72): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.242157][ T3306] cgroup: Unknown subsys name 'cpuset' [ 24.248221][ T3306] cgroup: Unknown subsys name 'rlimit' [ 24.397297][ T29] audit: type=1400 audit(1767264585.515:73): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.420899][ T29] audit: type=1400 audit(1767264585.515:74): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.441372][ T29] audit: type=1400 audit(1767264585.515:75): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.461738][ T29] audit: type=1400 audit(1767264585.515:76): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.482175][ T29] audit: type=1400 audit(1767264585.545:77): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.488889][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.507012][ T29] audit: type=1400 audit(1767264585.545:78): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.538826][ T29] audit: type=1400 audit(1767264585.575:79): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.578028][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.642028][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 25.694440][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 25.717690][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 25.737847][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 25.753677][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 25.797263][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.804456][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.811708][ T3318] bridge_slave_0: entered allmulticast mode [ 25.818172][ T3318] bridge_slave_0: entered promiscuous mode [ 25.839720][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.846857][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.854180][ T3318] bridge_slave_1: entered allmulticast mode [ 25.860609][ T3318] bridge_slave_1: entered promiscuous mode [ 25.887895][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.895012][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.902163][ T3323] bridge_slave_0: entered allmulticast mode [ 25.908447][ T3323] bridge_slave_0: entered promiscuous mode [ 25.928103][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.935328][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.942586][ T3323] bridge_slave_1: entered allmulticast mode [ 25.948873][ T3323] bridge_slave_1: entered promiscuous mode [ 25.956069][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.983519][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.997525][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.004657][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.011813][ T3322] bridge_slave_0: entered allmulticast mode [ 26.018109][ T3322] bridge_slave_0: entered promiscuous mode [ 26.038362][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.045503][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.052692][ T3328] bridge_slave_0: entered allmulticast mode [ 26.059125][ T3328] bridge_slave_0: entered promiscuous mode [ 26.065753][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.072871][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.079973][ T3322] bridge_slave_1: entered allmulticast mode [ 26.086508][ T3322] bridge_slave_1: entered promiscuous mode [ 26.092957][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.100112][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.107451][ T3317] bridge_slave_0: entered allmulticast mode [ 26.113788][ T3317] bridge_slave_0: entered promiscuous mode [ 26.121210][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.135099][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.142193][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.149471][ T3328] bridge_slave_1: entered allmulticast mode [ 26.156045][ T3328] bridge_slave_1: entered promiscuous mode [ 26.167212][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.174291][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.181522][ T3317] bridge_slave_1: entered allmulticast mode [ 26.187975][ T3317] bridge_slave_1: entered promiscuous mode [ 26.195045][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.204846][ T3318] team0: Port device team_slave_0 added [ 26.228009][ T3318] team0: Port device team_slave_1 added [ 26.238864][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.262148][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.272376][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.282303][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.292708][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.302544][ T3323] team0: Port device team_slave_0 added [ 26.322104][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.332034][ T3323] team0: Port device team_slave_1 added [ 26.337869][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.344992][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.370951][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.398603][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.405622][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.431624][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.443192][ T3322] team0: Port device team_slave_0 added [ 26.449503][ T3328] team0: Port device team_slave_0 added [ 26.466211][ T3322] team0: Port device team_slave_1 added [ 26.472514][ T3328] team0: Port device team_slave_1 added [ 26.478823][ T3317] team0: Port device team_slave_0 added [ 26.484839][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.491801][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.517843][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.537855][ T3317] team0: Port device team_slave_1 added [ 26.543694][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.550684][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.576735][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.612138][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.619170][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.645082][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.656008][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.662972][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.689029][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.700932][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.707978][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.734390][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.755898][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.762911][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.788862][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.799847][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.806808][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.832790][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.844518][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.851523][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.877528][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.892938][ T3318] hsr_slave_0: entered promiscuous mode [ 26.898961][ T3318] hsr_slave_1: entered promiscuous mode [ 26.921441][ T3323] hsr_slave_0: entered promiscuous mode [ 26.927595][ T3323] hsr_slave_1: entered promiscuous mode [ 26.933585][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 26.939303][ T3323] Cannot create hsr debugfs directory [ 26.987615][ T3322] hsr_slave_0: entered promiscuous mode [ 26.993722][ T3322] hsr_slave_1: entered promiscuous mode [ 26.999540][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.005327][ T3322] Cannot create hsr debugfs directory [ 27.017238][ T3317] hsr_slave_0: entered promiscuous mode [ 27.023265][ T3317] hsr_slave_1: entered promiscuous mode [ 27.029063][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 27.034801][ T3317] Cannot create hsr debugfs directory [ 27.042736][ T3328] hsr_slave_0: entered promiscuous mode [ 27.048600][ T3328] hsr_slave_1: entered promiscuous mode [ 27.054473][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 27.060182][ T3328] Cannot create hsr debugfs directory [ 27.242221][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.251917][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.263022][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.273511][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.295381][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.306431][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.315336][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.327554][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.337711][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.350059][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.359655][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.372131][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.402762][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.412172][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.426830][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.435526][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.459553][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.470242][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.479031][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.492321][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.538062][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.564107][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.575571][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.587822][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.594882][ T803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.604131][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.622022][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.629120][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.642683][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.652656][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.660135][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.682522][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.689581][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.703394][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.710441][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.720058][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.727173][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.737877][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.752961][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.760040][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.769567][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.776611][ T803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.791408][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.798464][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.826660][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.864862][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.888082][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.895167][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.922558][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.929871][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.948988][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.987972][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.003404][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.028141][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.145896][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.163071][ T3323] veth0_vlan: entered promiscuous mode [ 28.182575][ T3323] veth1_vlan: entered promiscuous mode [ 28.214404][ T3322] veth0_vlan: entered promiscuous mode [ 28.230294][ T3318] veth0_vlan: entered promiscuous mode [ 28.243737][ T3322] veth1_vlan: entered promiscuous mode [ 28.272149][ T3323] veth0_macvtap: entered promiscuous mode [ 28.282389][ T3318] veth1_vlan: entered promiscuous mode [ 28.288518][ T3328] veth0_vlan: entered promiscuous mode [ 28.303402][ T3323] veth1_macvtap: entered promiscuous mode [ 28.319267][ T3322] veth0_macvtap: entered promiscuous mode [ 28.329614][ T3328] veth1_vlan: entered promiscuous mode [ 28.336524][ T3322] veth1_macvtap: entered promiscuous mode [ 28.347525][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.364010][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.372591][ T3317] veth0_vlan: entered promiscuous mode [ 28.381147][ T3318] veth0_macvtap: entered promiscuous mode [ 28.387979][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.401814][ T3318] veth1_macvtap: entered promiscuous mode [ 28.408604][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.416147][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.427068][ T3317] veth1_vlan: entered promiscuous mode [ 28.435233][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.446055][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.460848][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.470308][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.482325][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.493952][ T3328] veth0_macvtap: entered promiscuous mode [ 28.500893][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.510302][ T3328] veth1_macvtap: entered promiscuous mode [ 28.521676][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.531624][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.546290][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.562128][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.572492][ T3317] veth0_macvtap: entered promiscuous mode [ 28.594666][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.611965][ T3317] veth1_macvtap: entered promiscuous mode [ 28.619210][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.632358][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.650468][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.652819][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.672578][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.688747][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.710796][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.724876][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.742922][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.762382][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.827494][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.894769][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.966139][ T3509] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.018355][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.054110][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.092656][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.135931][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.206650][ T3516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9'. [ 29.234001][ T3516] IPVS: Error connecting to the multicast addr [ 29.244842][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 29.244856][ T29] audit: type=1400 audit(1767264590.365:124): avc: denied { create } for pid=3517 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.304909][ T3520] netlink: '+}[@': attribute type 4 has an invalid length. [ 29.325728][ T29] audit: type=1400 audit(1767264590.395:125): avc: denied { write } for pid=3517 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.368402][ T29] audit: type=1400 audit(1767264590.475:126): avc: denied { append } for pid=3526 comm="syz.3.14" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.391164][ T29] audit: type=1400 audit(1767264590.475:127): avc: denied { read } for pid=3526 comm="syz.3.14" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.414220][ T29] audit: type=1400 audit(1767264590.475:128): avc: denied { open } for pid=3526 comm="syz.3.14" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.437882][ T29] audit: type=1400 audit(1767264590.475:129): avc: denied { ioctl } for pid=3526 comm="syz.3.14" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.463128][ T29] audit: type=1400 audit(1767264590.485:130): avc: denied { allowed } for pid=3527 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 29.482198][ T29] audit: type=1400 audit(1767264590.485:131): avc: denied { create } for pid=3527 comm="syz.4.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.503465][ T29] audit: type=1400 audit(1767264590.485:132): avc: denied { map } for pid=3527 comm="syz.4.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.527518][ T29] audit: type=1400 audit(1767264590.485:133): avc: denied { read write } for pid=3527 comm="syz.4.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.646696][ T3548] loop4: detected capacity change from 0 to 512 [ 29.677174][ T3548] ------------[ cut here ]------------ [ 29.682711][ T3548] EA inode 11 i_nlink=2 [ 29.682726][ T3548] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.4.23/3548 [ 29.697680][ T3548] Modules linked in: [ 29.701679][ T3548] CPU: 0 UID: 0 PID: 3548 Comm: syz.4.23 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.711398][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 29.721602][ T3548] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 29.728421][ T3548] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 bc ac ba 03 66 66 66 2e 0f 1f 84 [ 29.748337][ T3548] RSP: 0000:ffffc90001a5f5a0 EFLAGS: 00010246 [ 29.754467][ T3548] RAX: ffff888101d43c10 RBX: ffff888107e2a080 RCX: ffffffff81bb1d5b [ 29.762471][ T3548] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 29.770777][ T3548] RBP: 000000000000000b R08: 0001888107e2a033 R09: 0000000000000000 [ 29.779096][ T3548] R10: ffffc90001a5f4d0 R11: 0001c90001a5f4d0 R12: ffff888107e2a030 [ 29.787228][ T3548] R13: ffffffff86dc0db0 R14: ffff888107e29fe8 R15: 0000000000000001 [ 29.795288][ T3548] FS: 00007f9a339076c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 29.804351][ T3548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.810953][ T3548] CR2: 00007f916f17f000 CR3: 000000011b4d4000 CR4: 00000000003506f0 [ 29.818988][ T3548] Call Trace: [ 29.822312][ T3548] [ 29.825250][ T3548] ext4_xattr_set_entry+0x77f/0x1020 [ 29.830616][ T3548] ext4_xattr_ibody_set+0x184/0x3c0 [ 29.835864][ T3548] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 29.841759][ T3548] __ext4_expand_extra_isize+0x246/0x280 [ 29.847405][ T3548] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 29.852991][ T3548] ext4_evict_inode+0x7c4/0xd40 [ 29.857983][ T3548] ? __pfx_ext4_evict_inode+0x10/0x10 [ 29.863422][ T3548] evict+0x2af/0x510 [ 29.867331][ T3548] ? __dquot_initialize+0x146/0x7c0 [ 29.872607][ T3548] iput+0x4bd/0x650 [ 29.876446][ T3548] ext4_process_orphan+0x1a9/0x1c0 [ 29.881667][ T3548] ext4_orphan_cleanup+0x6a8/0xa00 [ 29.886812][ T3548] ext4_fill_super+0x3411/0x37a0 [ 29.891893][ T3548] ? set_blocksize+0x1a8/0x310 [ 29.896759][ T3548] ? sb_set_blocksize+0xfc/0x170 [ 29.901753][ T3548] ? setup_bdev_super+0x30e/0x370 [ 29.906785][ T3548] ? __pfx_ext4_fill_super+0x10/0x10 [ 29.912152][ T3548] get_tree_bdev_flags+0x291/0x300 [ 29.917327][ T3548] ? __pfx_ext4_fill_super+0x10/0x10 [ 29.922658][ T3548] get_tree_bdev+0x1f/0x30 [ 29.927104][ T3548] ext4_get_tree+0x1c/0x30 [ 29.931566][ T3548] vfs_get_tree+0x57/0x1d0 [ 29.935982][ T3548] do_new_mount+0x24d/0x6a0 [ 29.936186][ T3549] loop0: detected capacity change from 0 to 32768 [ 29.940569][ T3548] path_mount+0x4ab/0xb80 [ 29.951977][ T3548] ? user_path_at+0xbf/0x130 [ 29.956651][ T3548] __se_sys_mount+0x28c/0x2e0 [ 29.961420][ T3548] __x64_sys_mount+0x67/0x80 [ 29.966070][ T3548] x64_sys_call+0x2cca/0x3000 [ 29.970745][ T3548] do_syscall_64+0xca/0x2b0 [ 29.975362][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.981423][ T3548] RIP: 0033:0x7f9a34ea0eea [ 29.985837][ T3548] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.005466][ T3548] RSP: 002b:00007f9a33906e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.013999][ T3548] RAX: ffffffffffffffda RBX: 00007f9a33906ef0 RCX: 00007f9a34ea0eea [ 30.022223][ T3548] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9a33906eb0 [ 30.030282][ T3548] RBP: 0000200000000180 R08: 00007f9a33906ef0 R09: 0000000000800700 [ 30.038386][ T3548] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 30.046372][ T3548] R13: 00007f9a33906eb0 R14: 000000000000046f R15: 000000000000002c [ 30.054375][ T3548] [ 30.057386][ T3548] ---[ end trace 0000000000000000 ]--- [ 30.067426][ T3548] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.23: iget: bad extra_isize 90 (inode size 256) [ 30.113821][ T3549] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 30.123704][ T3549] loop0: p1 start 460800 is beyond EOD, truncated [ 30.130177][ T3549] loop0: p2 size 83886080 extends beyond EOD, truncated [ 30.158751][ T3548] EXT4-fs (loop4): Remounting filesystem read-only [ 30.173532][ T3549] loop0: p5 start 460800 is beyond EOD, truncated [ 30.180014][ T3549] loop0: p6 size 83886080 extends beyond EOD, truncated [ 30.181396][ T3548] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 30.226388][ T3548] EXT4-fs (loop4): 1 orphan inode deleted [ 30.274670][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.303365][ T3564] IPv6: NLM_F_CREATE should be specified when creating new route [ 30.319039][ T3548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.493280][ T3566] udevd[3566]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 30.493419][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 30.506722][ T3587] loop2: detected capacity change from 0 to 512 [ 30.523862][ T3008] udevd[3008]: worker [3310] terminated by signal 33 (Unknown signal 33) [ 30.540816][ T3589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.40'. [ 30.548457][ T3008] udevd[3008]: worker [3310] failed while handling '/devices/virtual/block/loop0/loop0p2' [ 30.549828][ T3589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.40'. [ 30.576954][ T3583] hub 2-0:1.0: USB hub found [ 30.581876][ T3583] hub 2-0:1.0: 8 ports detected [ 30.593594][ T3587] ======================================================= [ 30.593594][ T3587] WARNING: The mand mount option has been deprecated and [ 30.593594][ T3587] and is ignored by this kernel. Remove the mand [ 30.593594][ T3587] option from the mount to silence this warning. [ 30.593594][ T3587] ======================================================= [ 30.658484][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 30.678840][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 30.722553][ T3587] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.38: invalid block [ 30.751878][ T3587] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.38: invalid indirect mapped block 4294967295 (level 1) [ 30.801744][ T3587] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.38: invalid indirect mapped block 4294967295 (level 1) [ 30.816161][ T3587] EXT4-fs (loop2): 2 truncates cleaned up [ 30.822926][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.876749][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.028460][ T3640] loop4: detected capacity change from 0 to 1024 [ 31.059643][ T3645] ALSA: seq fatal error: cannot create timer (-19) [ 31.073141][ T3640] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 31.084132][ T3640] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 31.118570][ T3640] JBD2: no valid journal superblock found [ 31.121229][ T3650] 9p: Bad value for 'rfdno' [ 31.124497][ T3640] EXT4-fs (loop4): Could not load journal inode [ 31.168168][ T3640] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 31.378023][ T3686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 31.428333][ T3692] netlink: 140 bytes leftover after parsing attributes in process `syz.0.86'. [ 31.468093][ T3694] IPv6: NLM_F_CREATE should be specified when creating new route [ 31.493482][ T3698] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 31.593436][ T3718] netlink: 68 bytes leftover after parsing attributes in process `syz.4.94'. [ 31.680673][ T3732] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 31.794252][ T3749] loop0: detected capacity change from 0 to 512 [ 31.803396][ T3750] mmap: syz.3.110 (3750) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.819430][ T3749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.852879][ T3749] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.882894][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.967891][ T3769] syz.0.119 uses obsolete (PF_INET,SOCK_PACKET) [ 31.997526][ T3775] syz.1.121 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.029700][ T3777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3777 comm=syz.4.122 [ 32.104521][ T3787] syz.4.125 (3787) used greatest stack depth: 10320 bytes left [ 32.174057][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 32.445349][ T3801] loop1: detected capacity change from 0 to 32768 [ 32.492134][ T3801] loop1: p2 p3 < p5 > p4 < > [ 32.496845][ T3801] loop1: partition table partially beyond EOD, truncated [ 32.517450][ T3840] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 32.520009][ T3801] loop1: p2 size 83886080 extends beyond EOD, truncated [ 32.537236][ T3801] loop1: p4 start 7696384 is beyond EOD, truncated [ 32.544512][ T3801] loop1: p5 start 68609 is beyond EOD, truncated [ 32.680153][ T3845] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 32.688475][ T3845] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 32.756891][ T3856] rdma_op ffff888104d43580 conn xmit_rdma 0000000000000000 [ 32.855358][ T3869] loop0: detected capacity change from 0 to 512 [ 32.866918][ T3869] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.894120][ T3869] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 32.910201][ T3869] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.918191][ T3869] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.165: corrupted inode contents [ 32.930611][ T3869] EXT4-fs (loop0): Remounting filesystem read-only [ 32.937705][ T3869] EXT4-fs (loop0): 1 truncate cleaned up [ 32.943840][ T61] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.954572][ T61] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.965224][ T61] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 32.975758][ T3869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.005106][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.066170][ T3883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3883 comm=syz.2.170 [ 33.414399][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.421935][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.487585][ T3925] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 33.495711][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 33.598209][ T3941] netlink: 96 bytes leftover after parsing attributes in process `syz.3.199'. [ 33.611074][ T3942] Illegal XDP return value 3517074844 on prog (id 129) dev N/A, expect packet loss! [ 33.713968][ T3958] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 33.762446][ T3964] loop3: detected capacity change from 0 to 512 [ 33.799066][ T3964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.813714][ T3975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 33.822585][ T3964] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.838792][ T3975] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 33.855574][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.877312][ T3980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.218'. [ 34.085796][ T4003] loop2: detected capacity change from 0 to 128 [ 34.134596][ T4007] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 34.145127][ T4009] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.232'. [ 34.159067][ T4009] netlink: zone id is out of range [ 34.164261][ T4009] netlink: zone id is out of range [ 34.185059][ T4009] netlink: set zone limit has 8 unknown bytes [ 34.252692][ T4013] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.233'. [ 34.280746][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 34.280759][ T29] audit: type=1326 audit(1767264595.395:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.329076][ T29] audit: type=1326 audit(1767264595.435:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.352427][ T29] audit: type=1326 audit(1767264595.435:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.375734][ T29] audit: type=1326 audit(1767264595.435:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.399028][ T29] audit: type=1326 audit(1767264595.435:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.422351][ T29] audit: type=1326 audit(1767264595.435:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.445589][ T29] audit: type=1326 audit(1767264595.435:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.468916][ T29] audit: type=1326 audit(1767264595.435:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.492696][ T29] audit: type=1326 audit(1767264595.435:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.515921][ T29] audit: type=1326 audit(1767264595.435:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196ba0f749 code=0x7ffc0000 [ 34.566741][ T4024] loop0: detected capacity change from 0 to 128 [ 34.618007][ T4024] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.648620][ T4024] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.681165][ T4028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 34.689947][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.713894][ T4034] set_capacity_and_notify: 1 callbacks suppressed [ 34.713975][ T4034] loop3: detected capacity change from 0 to 1024 [ 34.733687][ T4028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.242: bg 0: block 88: padding at end of block bitmap is not set [ 34.757853][ T4034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.778928][ T4028] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 34.793498][ T4034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c01c, mo2=0003] [ 34.816629][ T4034] System zones: 0-1, 3-36 [ 34.822510][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.840484][ T4024] process 'syz.0.240' launched './file0' with NULL argv: empty string added [ 34.863561][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.881627][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.917960][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.050142][ T4068] vhci_hcd vhci_hcd.4: invalid port number 253 [ 35.052788][ T4072] loop1: detected capacity change from 0 to 512 [ 35.056493][ T4068] vhci_hcd vhci_hcd.4: default hub control req: 0011 v0102 i00fd l0 [ 35.077183][ T4072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.101370][ T4075] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 35.112893][ T4070] IPVS: stopping master sync thread 4075 ... [ 35.123415][ T4072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.157780][ T4072] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.321535][ T4092] 9p: Bad value for 'rfdno' [ 35.353800][ T4099] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 35.369854][ T4098] loop3: detected capacity change from 0 to 1024 [ 35.382810][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.400130][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 35.411201][ T4098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.446148][ T4098] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.489956][ T4098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.270: bg 0: block 112: padding at end of block bitmap is not set [ 35.563644][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.647012][ T4139] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 35.659172][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.666436][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.687785][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.694986][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.702487][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.709570][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.727365][ T4139] team0: Port device bridge0 added [ 35.954750][ T4183] loop2: detected capacity change from 0 to 128 [ 36.077539][ T4196] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 36.182570][ T4211] veth1_to_hsr: entered promiscuous mode [ 36.182646][ T4211] macvlan2: entered promiscuous mode [ 36.227857][ T4219] SELinux: policydb version 677937476 does not match my version range 15-35 [ 36.237271][ T4219] SELinux: failed to load policy [ 36.308458][ T4199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.335344][ T4199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.445322][ T4246] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 36.527805][ T4258] loop3: detected capacity change from 0 to 1764 [ 36.553044][ T4261] loop1: detected capacity change from 0 to 512 [ 36.618170][ T4261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.749816][ T4280] loop2: detected capacity change from 0 to 8192 [ 36.850378][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.903197][ T3494] kernel write not supported for file bpf-prog (pid: 3494 comm: kworker/1:7) [ 37.207421][ T4316] loop2: detected capacity change from 0 to 256 [ 37.562435][ T4349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.386'. [ 37.571437][ T4349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.386'. [ 37.580291][ T4349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.386'. [ 37.586955][ T4353] netlink: 'syz.0.390': attribute type 29 has an invalid length. [ 37.601749][ T4353] netlink: 'syz.0.390': attribute type 29 has an invalid length. [ 37.624571][ T4349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.386'. [ 37.626183][ T4353] netlink: 500 bytes leftover after parsing attributes in process `syz.0.390'. [ 37.693363][ T4365] Invalid ELF header magic: != ELF [ 37.771747][ T4373] ALSA: seq fatal error: cannot create timer (-19) [ 37.780395][ T4378] Zero length message leads to an empty skb [ 37.805465][ T4377] loop2: detected capacity change from 0 to 8192 [ 37.821305][ T4377] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.868230][ T4387] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 37.897381][ T3008] udevd[3008]: worker [3596] terminated by signal 33 (Unknown signal 33) [ 37.930488][ T3008] udevd[3008]: worker [3596] failed while handling '/devices/virtual/block/loop2' [ 37.945301][ T4384] loop1: detected capacity change from 0 to 8192 [ 37.952354][ T3008] udevd[3008]: worker [3597] terminated by signal 33 (Unknown signal 33) [ 37.960787][ T3008] udevd[3008]: worker [3597] failed while handling '/devices/virtual/block/loop4' [ 38.083965][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.097434][ T4406] bridge0: port 3(batadv1) entered blocking state [ 38.104032][ T4406] bridge0: port 3(batadv1) entered disabled state [ 38.114248][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.118928][ T4406] batadv1: entered allmulticast mode [ 38.133013][ T4406] batadv1: entered promiscuous mode [ 38.140680][ T4411] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 38.273420][ T4417] Cannot find add_set index 0 as target [ 38.602270][ T2338] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 38.611584][ T2338] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 38.682416][ T4483] SELinux: policydb version 280 does not match my version range 15-35 [ 38.690726][ T4483] SELinux: failed to load policy [ 38.891428][ T4519] --map-set only usable from mangle table [ 38.931124][ T4525] pim6reg1: entered promiscuous mode [ 38.936505][ T4525] pim6reg1: entered allmulticast mode [ 38.991228][ T4527] ref_ctr_offset mismatch. inode: 0x1d0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 39.013908][ T4529] xt_hashlimit: max too large, truncated to 1048576 [ 39.040276][ T4531] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 39.069507][ T4533] __nla_validate_parse: 6 callbacks suppressed [ 39.069521][ T4533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 39.279982][ T4558] ALSA: seq fatal error: cannot create timer (-19) [ 39.312589][ T29] kauditd_printk_skb: 716 callbacks suppressed [ 39.312603][ T29] audit: type=1326 audit(1767264600.435:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.343784][ T29] audit: type=1326 audit(1767264600.435:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.367284][ T29] audit: type=1326 audit(1767264600.435:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.390630][ T29] audit: type=1326 audit(1767264600.435:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.413945][ T29] audit: type=1326 audit(1767264600.435:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.437489][ T29] audit: type=1326 audit(1767264600.435:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.460872][ T29] audit: type=1326 audit(1767264600.465:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.484242][ T29] audit: type=1326 audit(1767264600.465:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.507584][ T29] audit: type=1326 audit(1767264600.465:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.531055][ T29] audit: type=1326 audit(1767264600.465:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 39.638098][ T4579] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.648266][ T4579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.719539][ T4586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 39.736110][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 39.746192][ T4592] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 39.800959][ T4600] loop3: detected capacity change from 0 to 512 [ 39.837215][ T4600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.873625][ T4600] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.906206][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.268824][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 40.277755][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 40.365191][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 40.378129][ T4688] SELinux: policydb version 1913023074 does not match my version range 15-35 [ 40.389163][ T4688] SELinux: failed to load policy [ 40.398679][ T4690] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 40.417800][ T4690] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.543805][ T4706] sctp: [Deprecated]: syz.0.550 (pid 4706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.543805][ T4706] Use struct sctp_sack_info instead [ 40.625222][ T4713] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.725561][ T4729] netlink: 'syz.4.563': attribute type 3 has an invalid length. [ 40.793325][ T4739] netlink: 115988 bytes leftover after parsing attributes in process `syz.2.568'. [ 40.823791][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.875552][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.937798][ T4762] loop4: detected capacity change from 0 to 512 [ 40.947381][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.961474][ T4762] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.577: invalid indirect mapped block 4294967295 (level 1) [ 40.984734][ T4762] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.577: invalid indirect mapped block 4294967295 (level 1) [ 41.012481][ T4762] EXT4-fs (loop4): 2 truncates cleaned up [ 41.018720][ T4762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.037603][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.049756][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.189011][ T4751] chnl_net:caif_netlink_parms(): no params data found [ 41.207706][ T52] bridge_slave_1: left allmulticast mode [ 41.213405][ T52] bridge_slave_1: left promiscuous mode [ 41.219209][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.227203][ T52] bridge_slave_0: left allmulticast mode [ 41.232898][ T52] bridge_slave_0: left promiscuous mode [ 41.238543][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.327852][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 41.450351][ T52] team0: Port device bridge0 removed [ 41.507850][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.532425][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.550846][ T52] bond0 (unregistering): Released all slaves [ 41.607363][ T52] hsr_slave_0: left promiscuous mode [ 41.615352][ T52] hsr_slave_1: left promiscuous mode [ 41.621115][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.628594][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.637850][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.645247][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.655948][ T52] veth1_macvtap: left promiscuous mode [ 41.661892][ T52] veth0_macvtap: left promiscuous mode [ 41.667485][ T52] veth1_vlan: left promiscuous mode [ 41.672821][ T52] veth0_vlan: left promiscuous mode [ 41.685391][ T4845] xt_hashlimit: max too large, truncated to 1048576 [ 41.770511][ T52] team0 (unregistering): Port device team_slave_1 removed [ 41.784116][ T52] team0 (unregistering): Port device team_slave_0 removed [ 41.833376][ T4846] syzkaller1: entered promiscuous mode [ 41.838872][ T4846] syzkaller1: entered allmulticast mode [ 41.855082][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.862200][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.869436][ T4751] bridge_slave_0: entered allmulticast mode [ 41.875761][ T4751] bridge_slave_0: entered promiscuous mode [ 41.882848][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.889920][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.898572][ T4751] bridge_slave_1: entered allmulticast mode [ 41.906553][ T4751] bridge_slave_1: entered promiscuous mode [ 41.925604][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.943483][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.989553][ T4751] team0: Port device team_slave_0 added [ 41.996508][ T4751] team0: Port device team_slave_1 added [ 42.041425][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.048396][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.074348][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.088685][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.095683][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.121738][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.156620][ T4751] hsr_slave_0: entered promiscuous mode [ 42.167425][ T4751] hsr_slave_1: entered promiscuous mode [ 42.173669][ T4751] debugfs: 'hsr0' already exists in 'hsr' [ 42.179404][ T4751] Cannot create hsr debugfs directory [ 42.313949][ T4751] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.335074][ T4751] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.349451][ T4914] xt_TCPMSS: Only works on TCP SYN packets [ 42.362034][ T4751] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.385359][ T4751] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.422061][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.429139][ T4751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.436535][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.443618][ T4751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.560537][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.593318][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.614233][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.637044][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.658896][ T4957] loop4: detected capacity change from 0 to 512 [ 42.668734][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.675808][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.703090][ T2338] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.710156][ T2338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.726900][ T4957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.763692][ T4957] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.784468][ T4751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.794847][ T4751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.831701][ T4976] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 42.863832][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.951464][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.978321][ T4992] tipc: Started in network mode [ 42.983254][ T4992] tipc: Node identity ac14140f, cluster identity 4711 [ 42.991821][ T4992] tipc: New replicast peer: 255.255.255.83 [ 42.997722][ T4992] tipc: Enabled bearer , priority 10 [ 43.023150][ T5002] hub 6-0:1.0: USB hub found [ 43.031477][ T5002] hub 6-0:1.0: 8 ports detected [ 43.161412][ T5021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 43.246747][ T4751] veth0_vlan: entered promiscuous mode [ 43.278449][ T4751] veth1_vlan: entered promiscuous mode [ 43.360779][ T4751] veth0_macvtap: entered promiscuous mode [ 43.383140][ T4751] veth1_macvtap: entered promiscuous mode [ 43.408724][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.435333][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.465865][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.488687][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.525274][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.559231][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.654643][ T5085] loop4: detected capacity change from 0 to 256 [ 43.827640][ T5104] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.684'. [ 43.837884][ T5104] netlink: zone id is out of range [ 43.843126][ T5104] netlink: zone id is out of range [ 43.845780][ T5104] netlink: zone id is out of range [ 43.879107][ T5104] netlink: set zone limit has 8 unknown bytes [ 43.887399][ T5110] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 43.918031][ T5112] atomic_op ffff888120a04928 conn xmit_atomic 0000000000000000 [ 43.964636][ T5118] loop1: detected capacity change from 0 to 128 [ 44.026415][ T5131] loop4: detected capacity change from 0 to 512 [ 44.038656][ T5131] EXT4-fs: Ignoring removed nobh option [ 44.051065][ T5131] EXT4-fs: Ignoring removed orlov option [ 44.071953][ T5131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.091613][ T5131] EXT4-fs (loop4): 1 truncate cleaned up [ 44.097586][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.111283][ T3494] tipc: Node number set to 2886997007 [ 44.171062][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.239724][ T5153] loop4: detected capacity change from 0 to 128 [ 44.330912][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 44.330927][ T29] audit: type=1400 audit(1767264605.435:1617): avc: denied { read } for pid=5160 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.357368][ T29] audit: type=1326 audit(1767264605.445:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0af15f749 code=0x7ffc0000 [ 44.380824][ T29] audit: type=1326 audit(1767264605.445:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0af15f749 code=0x7ffc0000 [ 44.404149][ T29] audit: type=1326 audit(1767264605.445:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0af15f749 code=0x7ffc0000 [ 44.427860][ T29] audit: type=1326 audit(1767264605.455:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 44.451184][ T29] audit: type=1326 audit(1767264605.455:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 44.474545][ T29] audit: type=1326 audit(1767264605.455:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 44.497865][ T29] audit: type=1326 audit(1767264605.455:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 44.521380][ T29] audit: type=1326 audit(1767264605.455:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 44.544859][ T29] audit: type=1326 audit(1767264605.455:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.0.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917896f749 code=0x7ffc0000 [ 44.619087][ T5172] loop2: detected capacity change from 0 to 512 [ 44.642456][ T5167] loop4: detected capacity change from 0 to 512 [ 44.676701][ T5167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.723058][ T5172] EXT4-fs: Ignoring removed i_version option [ 44.729771][ T5167] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.749485][ T5172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.785129][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.811962][ T5184] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 44.862483][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.934859][ T5197] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 44.963703][ T5199] loop4: detected capacity change from 0 to 128 [ 45.007349][ T5199] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.050234][ T5199] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.259254][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.330998][ T5227] 9p: Bad value for 'rfdno' [ 45.490662][ T5252] loop2: detected capacity change from 0 to 1024 [ 45.530417][ T5252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.541471][ T5259] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.541623][ T5257] IPVS: stopping master sync thread 5259 ... [ 45.575443][ T5252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c01c, mo2=0003] [ 45.585265][ T5252] System zones: 0-1, 3-36 [ 45.593634][ T5252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.630450][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.673254][ T5268] vhci_hcd vhci_hcd.4: invalid port number 253 [ 45.679485][ T5268] vhci_hcd vhci_hcd.4: default hub control req: 0011 v0102 i00fd l0 [ 45.714305][ T5276] loop1: detected capacity change from 0 to 512 [ 45.767769][ T5276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.808729][ T5282] loop2: detected capacity change from 0 to 4096 [ 45.823943][ T5276] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.833335][ T5282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.867437][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.903384][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.920088][ T5294] loop5: detected capacity change from 0 to 1024 [ 45.935152][ T5296] 9p: Bad value for 'rfdno' [ 45.948879][ T5299] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 45.970185][ T5294] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.985205][ T5294] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c01c, mo2=0003] [ 46.006075][ T5294] System zones: 0-1, 3-36 [ 46.011768][ T5294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.069066][ T5310] __nla_validate_parse: 2 callbacks suppressed [ 46.069082][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 46.095478][ T4751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.147974][ T5318] vhci_hcd vhci_hcd.4: invalid port number 253 [ 46.154219][ T5318] vhci_hcd vhci_hcd.4: default hub control req: 0011 v0102 i00fd l0 [ 46.224044][ T5326] loop2: detected capacity change from 0 to 512 [ 46.247802][ T5326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.273466][ T5326] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.297093][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.367112][ T5338] loop1: detected capacity change from 0 to 1024 [ 46.377069][ T5338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.404198][ T5338] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c01c, mo2=0003] [ 46.451387][ T5338] System zones: 0-1, 3-36 [ 46.463945][ T5338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.539966][ T5349] loop2: detected capacity change from 0 to 1024 [ 46.555701][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.616277][ T5349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.631367][ T5361] vhci_hcd vhci_hcd.4: invalid port number 253 [ 46.637557][ T5361] vhci_hcd vhci_hcd.4: default hub control req: 0011 v0102 i00fd l0 [ 46.656398][ T5349] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.669017][ T5349] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.797: bg 0: block 112: padding at end of block bitmap is not set [ 46.704389][ T5366] loop4: detected capacity change from 0 to 1024 [ 46.711114][ T5366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.727786][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.757966][ T5366] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c01c, mo2=0003] [ 46.769219][ T5373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'. [ 46.781312][ T5366] System zones: 0-1, 3-36 [ 46.788535][ T5366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.872843][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.918776][ T5394] loop5: detected capacity change from 0 to 512 [ 46.925580][ T5394] EXT4-fs: Ignoring removed i_version option [ 46.941186][ T5394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.955416][ T5392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.972059][ T5397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.994682][ T5392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c01c, mo2=0003] [ 47.022688][ T5392] System zones: 0-1, 3-36 [ 47.028165][ T5392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.042866][ T5397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.068089][ T4751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.077321][ T5397] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.141631][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.343830][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.415014][ T5427] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 47.566444][ T5446] veth1_to_hsr: entered promiscuous mode [ 47.574162][ T5446] macvlan2: entered promiscuous mode [ 47.698079][ T5460] SELinux: policydb version 677937476 does not match my version range 15-35 [ 47.716051][ T5460] SELinux: failed to load policy [ 47.743600][ T5466] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 47.904636][ T5489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.932971][ T5489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.965846][ T5489] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.260494][ T4751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.315805][ T5531] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 48.323660][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 48.348415][ T5532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.555818][ T5547] 9p: Bad value for 'rfdno' [ 48.574281][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.629320][ T5552] rdma_op ffff888103b5d980 conn xmit_rdma 0000000000000000 [ 48.820355][ T5583] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5583 comm=syz.4.901 [ 49.247622][ T5594] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5594 comm=syz.1.917 [ 49.251099][ T5596] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 49.267827][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 49.323376][ T5601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.353718][ T5601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.397795][ T5601] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.548253][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.566658][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 49.566702][ T29] audit: type=1400 audit(1767264610.685:2006): avc: denied { sys_module } for pid=5620 comm="syz.1.928" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.581602][ T5622] Invalid ELF header magic: != ELF [ 49.594207][ T29] audit: type=1400 audit(1767264610.685:2007): avc: denied { module_load } for pid=5620 comm="syz.1.928" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 49.671313][ T29] audit: type=1400 audit(1767264610.755:2008): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.695643][ T29] audit: type=1400 audit(1767264610.755:2009): avc: denied { open } for pid=3323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.719771][ T29] audit: type=1400 audit(1767264610.755:2010): avc: denied { ioctl } for pid=3323 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.745494][ T29] audit: type=1400 audit(1767264610.785:2011): avc: denied { map_create } for pid=5625 comm="syz.2.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.764542][ T29] audit: type=1400 audit(1767264610.785:2012): avc: denied { map_read map_write } for pid=5625 comm="syz.2.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.784364][ T29] audit: type=1400 audit(1767264610.785:2013): avc: denied { prog_load } for pid=5625 comm="syz.2.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.803341][ T29] audit: type=1400 audit(1767264610.785:2014): avc: denied { bpf } for pid=5625 comm="syz.2.916" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.806471][ T5632] ALSA: seq fatal error: cannot create timer (-19) [ 49.823794][ T29] audit: type=1400 audit(1767264610.785:2015): avc: denied { perfmon } for pid=5625 comm="syz.2.916" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.953326][ T5640] ALSA: seq fatal error: cannot create timer (-19) [ 49.981535][ T5642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5642 comm=syz.5.921 [ 49.996498][ T5647] sch_tbf: burst 22 is lower than device lo mtu (65499) ! [ 50.019358][ T5647] sch_tbf: burst 22 is lower than device lo mtu (65499) ! [ 50.054776][ T5655] netlink: 'syz.5.927': attribute type 29 has an invalid length. [ 50.064069][ T5655] netlink: 'syz.5.927': attribute type 29 has an invalid length. [ 50.074284][ T5655] netlink: 500 bytes leftover after parsing attributes in process `syz.5.927'. [ 50.268561][ T5668] netlink: 'syz.5.939': attribute type 1 has an invalid length. [ 50.276251][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.939'. [ 50.405227][ T5679] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 50.480976][ T5685] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 50.762120][ T5709] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 50.829783][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.861120][ T5723] set_capacity_and_notify: 8 callbacks suppressed [ 50.861134][ T5723] loop2: detected capacity change from 0 to 1024 [ 50.891560][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.900081][ T5723] EXT4-fs: Ignoring removed nobh option [ 50.905693][ T5723] EXT4-fs: Ignoring removed bh option [ 50.951691][ T5723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.981840][ T5731] loop4: detected capacity change from 0 to 512 [ 50.983401][ T5723] EXT4-fs (loop2): pa ffff888107ea1770: logic 1, phys. 129, len 4 [ 50.995962][ T5723] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 51.013757][ T5731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.039245][ T5731] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.056376][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.092763][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.298911][ T5774] loop5: detected capacity change from 0 to 128 [ 51.384424][ T5790] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.995'. [ 51.393687][ T5790] netlink: zone id is out of range [ 51.398797][ T5790] netlink: zone id is out of range [ 51.407792][ T5788] loop2: detected capacity change from 0 to 1024 [ 51.414380][ T5790] netlink: set zone limit has 8 unknown bytes [ 51.428096][ T5788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 51.454072][ T5798] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1009'. [ 51.457767][ T5788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.486485][ T5788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1006: bg 0: block 88: padding at end of block bitmap is not set [ 51.496544][ T5798] netlink: zone id is out of range [ 51.505812][ T5798] netlink: zone id is out of range [ 51.532510][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.558757][ T5798] netlink: set zone limit has 8 unknown bytes [ 51.629862][ T5819] pim6reg1: entered promiscuous mode [ 51.635438][ T5819] pim6reg1: entered allmulticast mode [ 51.726475][ T5835] loop5: detected capacity change from 0 to 1024 [ 51.752496][ T5835] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 51.767854][ T5835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.812089][ T5835] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1016: bg 0: block 88: padding at end of block bitmap is not set [ 51.884262][ T4751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.914080][ T5858] ================================================================== [ 51.922193][ T5858] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 51.929242][ T5858] [ 51.931568][ T5858] write to 0xffff88810417e8c8 of 8 bytes by task 3322 on cpu 1: [ 51.939193][ T5858] release_task+0x76f/0xb60 [ 51.943716][ T5858] wait_consider_task+0x114a/0x1660 [ 51.948923][ T5858] __do_wait+0xfa/0x510 [ 51.953082][ T5858] do_wait+0xb7/0x250 [ 51.957065][ T5858] kernel_wait4+0x16b/0x1e0 [ 51.961561][ T5858] __x64_sys_wait4+0x91/0x120 [ 51.966232][ T5858] x64_sys_call+0x28ec/0x3000 [ 51.970912][ T5858] do_syscall_64+0xca/0x2b0 [ 51.975423][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.981314][ T5858] [ 51.983628][ T5858] read to 0xffff88810417e300 of 3264 bytes by task 5858 on cpu 0: [ 51.991420][ T5858] memcpy_and_pad+0x48/0x80 [ 51.995935][ T5858] arch_dup_task_struct+0x2c/0x40 [ 52.000958][ T5858] dup_task_struct+0x6e/0x950 [ 52.005627][ T5858] copy_process+0x37d/0x1ef0 [ 52.010267][ T5858] kernel_clone+0x16c/0x5c0 [ 52.014786][ T5858] __se_sys_clone3+0x1c2/0x200 [ 52.019538][ T5858] __x64_sys_clone3+0x31/0x40 [ 52.024202][ T5858] x64_sys_call+0x2c0f/0x3000 [ 52.028873][ T5858] do_syscall_64+0xca/0x2b0 [ 52.033372][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.039270][ T5858] [ 52.041584][ T5858] Reported by Kernel Concurrency Sanitizer on: [ 52.047719][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.0.1027 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.058995][ T5858] Tainted: [W]=WARN [ 52.062794][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.072844][ T5858] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 52.096769][ T5862] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 52.294337][ T803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.365315][ T803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.423323][ T803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.443678][ T803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.494719][ T803] bridge_slave_1: left allmulticast mode [ 52.500362][ T803] bridge_slave_1: left promiscuous mode [ 52.506041][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.513714][ T803] bridge_slave_0: left allmulticast mode [ 52.519348][ T803] bridge_slave_0: left promiscuous mode [ 52.525055][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.623440][ T803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.633331][ T803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.642691][ T803] bond0 (unregistering): Released all slaves [ 52.684593][ T803] hsr_slave_0: left promiscuous mode [ 52.690168][ T803] hsr_slave_1: left promiscuous mode [ 52.695737][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.703152][ T803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.710654][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.718172][ T803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.728191][ T803] veth1_to_hsr: left promiscuous mode [ 52.733704][ T803] veth1_macvtap: left promiscuous mode [ 52.739160][ T803] veth0_macvtap: left promiscuous mode [ 52.744824][ T803] veth1_vlan: left promiscuous mode [ 52.750055][ T803] veth0_vlan: left promiscuous mode [ 52.808033][ T803] team0 (unregistering): Port device team_slave_1 removed [ 52.818377][ T803] team0 (unregistering): Port device team_slave_0 removed [ 53.077245][ T803] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.144064][ T803] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.184011][ T803] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.233663][ T803] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.305632][ T803] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.353978][ T803] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.414386][ T803] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.453490][ T803] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.505441][ T803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.563702][ T803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.604573][ T803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.664136][ T803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.714899][ T803] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.763290][ T803] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.814003][ T803] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.873633][ T803] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.954366][ T803] bridge_slave_1: left allmulticast mode [ 53.960005][ T803] bridge_slave_1: left promiscuous mode [ 53.965845][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.973639][ T803] bridge_slave_0: left allmulticast mode [ 53.979292][ T803] bridge_slave_0: left promiscuous mode [ 53.985009][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.993110][ T803] bridge_slave_1: left allmulticast mode [ 53.998729][ T803] bridge_slave_1: left promiscuous mode [ 54.004417][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.011986][ T803] bridge_slave_0: left allmulticast mode [ 54.017675][ T803] bridge_slave_0: left promiscuous mode [ 54.025571][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.033777][ T803] bridge_slave_1: left allmulticast mode [ 54.039469][ T803] bridge_slave_1: left promiscuous mode [ 54.045169][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.053004][ T803] bridge_slave_0: left allmulticast mode [ 54.058629][ T803] bridge_slave_0: left promiscuous mode [ 54.064491][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.072671][ T803] batadv1: left allmulticast mode [ 54.077687][ T803] batadv1: left promiscuous mode [ 54.082753][ T803] bridge0: port 3(batadv1) entered disabled state [ 54.089618][ T803] bridge_slave_1: left allmulticast mode [ 54.095439][ T803] bridge_slave_1: left promiscuous mode [ 54.101153][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.109128][ T803] bridge_slave_0: left allmulticast mode [ 54.114825][ T803] bridge_slave_0: left promiscuous mode [ 54.120558][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.243478][ T803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.253516][ T803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.263006][ T803] bond0 (unregistering): Released all slaves [ 54.322924][ T803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.332939][ T803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.342516][ T803] bond0 (unregistering): Released all slaves [ 54.394099][ T803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.403814][ T803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.413507][ T803] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 54.422533][ T803] bond0 (unregistering): Released all slaves [ 54.483328][ T803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.493569][ T803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.503013][ T803] bond0 (unregistering): Released all slaves [ 54.537288][ T803] tipc: Disabling bearer [ 54.542303][ T803] tipc: Left network mode [ 54.552140][ T803] hsr_slave_0: left promiscuous mode [ 54.558009][ T803] hsr_slave_1: left promiscuous mode [ 54.563837][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.571219][ T803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.578926][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.586481][ T803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.596199][ T803] hsr_slave_0: left promiscuous mode [ 54.602114][ T803] hsr_slave_1: left promiscuous mode [ 54.607643][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.615118][ T803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.622553][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.629926][ T803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.639391][ T803] hsr_slave_0: left promiscuous mode [ 54.644998][ T803] hsr_slave_1: left promiscuous mode [ 54.650600][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.658026][ T803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.665467][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.672872][ T803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.681909][ T803] hsr_slave_0: left promiscuous mode [ 54.687616][ T803] hsr_slave_1: left promiscuous mode [ 54.693340][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.700719][ T803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.708232][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.715636][ T803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.730409][ T803] veth1_macvtap: left promiscuous mode [ 54.735991][ T803] veth0_macvtap: left promiscuous mode [ 54.741522][ T803] veth1_vlan: left promiscuous mode [ 54.746716][ T803] veth0_vlan: left promiscuous mode [ 54.752364][ T803] veth1_macvtap: left promiscuous mode [ 54.757904][ T803] veth0_macvtap: left promiscuous mode [ 54.763396][ T803] veth1_vlan: left promiscuous mode [ 54.768607][ T803] veth0_vlan: left promiscuous mode [ 54.774579][ T803] veth1_to_hsr: left promiscuous mode [ 54.779945][ T803] veth1_macvtap: left promiscuous mode [ 54.785443][ T803] veth0_macvtap: left promiscuous mode [ 54.790929][ T803] veth1_vlan: left promiscuous mode [ 54.796305][ T803] veth0_vlan: left promiscuous mode [ 54.802176][ T803] veth1_macvtap: left promiscuous mode [ 54.807630][ T803] veth0_macvtap: left promiscuous mode [ 54.813154][ T803] veth1_vlan: left promiscuous mode [ 54.818354][ T803] veth0_vlan: left promiscuous mode [ 54.960423][ T803] team0 (unregistering): Port device team_slave_1 removed [ 54.970815][ T803] team0 (unregistering): Port device team_slave_0 removed [ 55.022300][ T803] team0 (unregistering): Port device team_slave_1 removed [ 55.031772][ T803] team0 (unregistering): Port device team_slave_0 removed [ 55.078668][ T803] team0 (unregistering): Port device team_slave_1 removed [ 55.088967][ T803] team0 (unregistering): Port device team_slave_0 removed [ 55.138798][ T803] team0 (unregistering): Port device team_slave_1 removed [ 55.147895][ T803] team0 (unregistering): Port device team_slave_0 removed [ 55.176769][ T3402] infiniband syz1: ib_query_port failed (-19)