last executing test programs: 25.527237442s ago: executing program 4 (id=1024): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 25.507724103s ago: executing program 4 (id=1027): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="7465642e5e11075e5b5d"]) 25.432069563s ago: executing program 4 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) 25.183897117s ago: executing program 4 (id=1043): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 25.143201317s ago: executing program 4 (id=1046): pipe(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 24.97649564s ago: executing program 4 (id=1051): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r0) 24.9260637s ago: executing program 32 (id=1051): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r0) 22.528026592s ago: executing program 5 (id=1086): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x10001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x2, 0x40, 0x0, 0x6}) 22.474501932s ago: executing program 5 (id=1088): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) close(r2) 22.447729203s ago: executing program 5 (id=1089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfff}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r2, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 22.347458464s ago: executing program 5 (id=1090): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x8d) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) sendfile(r0, r0, 0x0, 0x7a680000) 22.122676837s ago: executing program 5 (id=1093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x3}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 20.271780312s ago: executing program 5 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 20.264963492s ago: executing program 33 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 12.09782722s ago: executing program 2 (id=1391): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12.03575541s ago: executing program 2 (id=1400): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x19, 0xb7, 0xdc, {0x7, 0x25, 0x1, 0x1, 0xfa, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x40, 0x1, {0x7, 0x25, 0x1, 0x0, 0x81, 0x12}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 11.533914367s ago: executing program 1 (id=1424): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@barrier}, {@grpquota}, {@usrjquota}, {@jqfmt_vfsold}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000a00)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 11.439701558s ago: executing program 1 (id=1428): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/58, 0x3a}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0300"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 11.435380918s ago: executing program 2 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) 11.385790319s ago: executing program 2 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 11.385042649s ago: executing program 2 (id=1431): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 11.3104139s ago: executing program 1 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 11.30975907s ago: executing program 1 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 11.165674432s ago: executing program 2 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11.164665432s ago: executing program 1 (id=1447): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x101042, 0xa) chdir(&(0x7f0000000140)='./file0\x00') syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 11.151368672s ago: executing program 34 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10.807868267s ago: executing program 1 (id=1446): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 10.807119367s ago: executing program 35 (id=1446): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 3.467597804s ago: executing program 8 (id=1639): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f00000000c0)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@noquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x4) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x1000000004, 0x0, 0x0, 0x5}) 3.331404965s ago: executing program 8 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000002b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = eventfd(0x800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r2, &(0x7f0000000040), 0x8) 3.274695436s ago: executing program 8 (id=1647): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x110, 0x200, 0x200, 0x2e8, 0x110, 0x2e8, 0x4, 0x0, {[{{@arp={@loopback, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x196, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x55, 0x45833af92e4b39ff, 0x0) 3.170263958s ago: executing program 8 (id=1652): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 3.090082699s ago: executing program 8 (id=1655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0xff}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 3.065804369s ago: executing program 8 (id=1660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 1.42402482s ago: executing program 3 (id=1727): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b3}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) 1.283468512s ago: executing program 3 (id=1736): unshare(0x28020480) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 818.856249ms ago: executing program 6 (id=1755): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 809.126889ms ago: executing program 6 (id=1757): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 792.503479ms ago: executing program 6 (id=1758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) 723.86945ms ago: executing program 6 (id=1759): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000700)=[{&(0x7f0000000900)=""/231, 0xe7}]}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) 723.2635ms ago: executing program 6 (id=1760): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r2) 722.89572ms ago: executing program 6 (id=1761): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r1) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0x0, 0x0, 0x0, 0x100000040000}) 430.860354ms ago: executing program 0 (id=1772): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000f1ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 430.537624ms ago: executing program 3 (id=1773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000007887000c41000000030014"], 0x30}}, 0x0) 430.263314ms ago: executing program 0 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 430.020394ms ago: executing program 3 (id=1775): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000007c0)='\x00!', 0x2}], 0x1, 0x6ad6, 0x0) 429.722064ms ago: executing program 0 (id=1776): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r2, r2, 0x0, 0xfffe80) 379.904895ms ago: executing program 3 (id=1777): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000240)='smaps_rollup\x00') read$hiddev(r2, &(0x7f0000000100)=""/145, 0x91) 379.154024ms ago: executing program 0 (id=1778): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x218046, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000a, 0x13, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000a40)=ANY=[], 0x32600) 377.206144ms ago: executing program 0 (id=1779): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 353.314095ms ago: executing program 7 (id=1781): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 339.025655ms ago: executing program 0 (id=1782): socket$inet(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 287.698496ms ago: executing program 7 (id=1783): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x6966, 0x0, 0x3, 0x28b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 286.797205ms ago: executing program 7 (id=1784): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) dup3(r3, r2, 0x0) 286.296845ms ago: executing program 7 (id=1785): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) 159.720837ms ago: executing program 3 (id=1786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 79.455968ms ago: executing program 7 (id=1787): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) 0s ago: executing program 7 (id=1788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): dit: type=1326 audit(1746210180.096:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f9477ab39 code=0x7ffc0000 [ 43.485243][ T29] audit: type=1326 audit(1746210180.096:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 43.508568][ T29] audit: type=1326 audit(1746210180.096:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 43.572242][ T4391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.586603][ T4391] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.665433][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 43.707624][ T29] audit: type=1400 audit(1746210180.356:520): avc: denied { write } for pid=4404 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.846783][ T4391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.860721][ T4418] netlink: 'syz.4.413': attribute type 3 has an invalid length. [ 43.990142][ T4432] loop2: detected capacity change from 0 to 1024 [ 44.009147][ T4432] EXT4-fs: Ignoring removed bh option [ 44.024620][ T4435] netlink: 664 bytes leftover after parsing attributes in process `syz.4.425'. [ 44.035331][ T4432] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 44.081891][ T4432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.153525][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.310498][ T4459] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 44.610179][ T4475] loop2: detected capacity change from 0 to 512 [ 44.628558][ T4475] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 44.647233][ T4478] loop3: detected capacity change from 0 to 512 [ 44.653702][ T4475] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 44.663996][ T4475] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 44.674714][ T4475] EXT4-fs (loop2): 1 truncate cleaned up [ 44.680889][ T4475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.707421][ T4478] EXT4-fs: Ignoring removed orlov option [ 44.715871][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.750068][ T4478] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.444: corrupted in-inode xattr: invalid ea_ino [ 44.792692][ T4478] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.444: couldn't read orphan inode 15 (err -117) [ 44.834121][ T4478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.199254][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.519296][ T4543] loop0: detected capacity change from 0 to 512 [ 45.576730][ T4543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.603569][ T4543] ext4 filesystem being mounted at /94/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 45.636847][ T4543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.659460][ T4562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'. [ 45.801896][ T4577] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.470'. [ 45.814494][ T4583] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.875648][ T4586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.473'. [ 45.890215][ T4588] smc: net device bond0 erased user defined pnetid S [ 45.965249][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 45.999716][ T4592] loop4: detected capacity change from 0 to 8192 [ 46.026531][ T4594] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.081324][ T4601] xt_hashlimit: max too large, truncated to 1048576 [ 46.268015][ T4618] pimreg: entered allmulticast mode [ 46.292898][ T4618] pimreg: left allmulticast mode [ 46.309514][ T4622] loop1: detected capacity change from 0 to 128 [ 46.403401][ T4621] Falling back ldisc for ttyS3. [ 46.494545][ T3006] udevd[3006]: worker [3291] terminated by signal 33 (Unknown signal 33) [ 46.573494][ T2969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.581914][ T2969] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.593004][ T4653] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 46.698700][ T4668] loop0: detected capacity change from 0 to 512 [ 46.731783][ T4668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.756612][ T4668] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.779240][ T4668] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.510: corrupted inode contents [ 46.792659][ T4668] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.510: mark_inode_dirty error [ 46.815737][ T4668] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.510: corrupted inode contents [ 46.828984][ T4668] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.510: mark_inode_dirty error [ 46.871205][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.902680][ T4681] x_tables: duplicate underflow at hook 4 [ 47.006860][ T4696] netlink: 'syz.4.521': attribute type 13 has an invalid length. [ 47.052618][ T4696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.172639][ T4714] loop4: detected capacity change from 0 to 512 [ 47.192614][ T4714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.207236][ T4714] EXT4-fs (loop4): 1 truncate cleaned up [ 47.221811][ T4714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.288177][ T4733] netlink: '+}[@': attribute type 10 has an invalid length. [ 47.296874][ T4733] hsr_slave_0: left promiscuous mode [ 47.324431][ T4733] hsr_slave_1: left promiscuous mode [ 47.330140][ T4737] netlink: 204 bytes leftover after parsing attributes in process `syz.1.538'. [ 47.390611][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.480297][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 47.488087][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 47.517565][ T4755] netlink: 'syz.4.546': attribute type 9 has an invalid length. [ 47.525340][ T4755] netlink: 371 bytes leftover after parsing attributes in process `syz.4.546'. [ 47.576600][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.584475][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.592213][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.600000][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.607728][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.615471][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.623419][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.631104][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.638817][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.646515][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.654217][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.661951][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.669636][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.677360][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.685787][ T10] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 47.873745][ T4786] syz.2.560 (4786) used greatest stack depth: 9456 bytes left [ 47.981785][ T4803] loop4: detected capacity change from 0 to 512 [ 47.996018][ T4803] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 48.102820][ T4820] rdma_op ffff88811acf4180 conn xmit_rdma 0000000000000000 [ 48.115179][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 48.115196][ T29] audit: type=1400 audit(1746210184.766:724): avc: denied { read write } for pid=4821 comm="syz.3.576" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.183087][ T29] audit: type=1400 audit(1746210184.796:725): avc: denied { open } for pid=4821 comm="syz.3.576" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.207661][ T29] audit: type=1400 audit(1746210184.796:726): avc: denied { ioctl } for pid=4821 comm="syz.3.576" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.237057][ T4832] loop1: detected capacity change from 0 to 512 [ 48.245480][ T4832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.262853][ T29] audit: type=1400 audit(1746210184.886:727): avc: denied { mounton } for pid=4827 comm="syz.1.579" path="/108/bus" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.280898][ T4832] EXT4-fs (loop1): 1 truncate cleaned up [ 48.285265][ T29] audit: type=1400 audit(1746210184.896:728): avc: denied { mounton } for pid=4827 comm="syz.1.579" path="/108/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.293359][ T4832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.327739][ T4832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.354328][ T4835] SELinux: failed to load policy [ 48.363339][ T29] audit: type=1400 audit(1746210185.006:729): avc: denied { load_policy } for pid=4834 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.390366][ T29] audit: type=1400 audit(1746210185.036:730): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.412754][ T4842] netlink: 'syz.2.585': attribute type 9 has an invalid length. [ 48.420533][ T4842] netlink: 371 bytes leftover after parsing attributes in process `syz.2.585'. [ 48.528698][ T4857] loop1: detected capacity change from 0 to 4096 [ 48.536917][ T3378] IPVS: starting estimator thread 0... [ 48.555412][ T4857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.577538][ T4857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.637894][ T4874] SELinux: syz.4.600 (4874) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.672597][ T51] IPVS: stop unused estimator thread 0... [ 48.712992][ T29] audit: type=1400 audit(1746210185.356:731): avc: denied { getopt } for pid=4881 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.823128][ T4894] loop4: detected capacity change from 0 to 4096 [ 48.851486][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.860516][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.870858][ T4894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.886546][ T4894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.915288][ T29] audit: type=1400 audit(1746210185.566:732): avc: denied { setopt } for pid=4903 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.164208][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 49.222947][ T29] audit: type=1400 audit(1746210185.866:733): avc: denied { ioctl } for pid=4918 comm="syz.0.620" path="socket:[8876]" dev="sockfs" ino=8876 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 49.259940][ T4921] netlink: 'syz.0.621': attribute type 3 has an invalid length. [ 49.284438][ T4923] loop0: detected capacity change from 0 to 512 [ 49.290969][ T4923] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.297673][ T4923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.315077][ T4923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.327886][ T4923] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.383732][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.436425][ T4930] syz.3.625 (4930) used greatest stack depth: 8712 bytes left [ 49.458582][ T4938] loop2: detected capacity change from 0 to 2048 [ 49.484801][ T4938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.517083][ T4941] loop0: detected capacity change from 0 to 4096 [ 49.536808][ T4941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.551336][ T4941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.654125][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.740495][ T4973] netlink: 184 bytes leftover after parsing attributes in process `syz.2.649'. [ 49.879877][ T4983] loop1: detected capacity change from 0 to 512 [ 49.888599][ T4983] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 49.956804][ T4988] rdma_op ffff88810214a580 conn xmit_rdma 0000000000000000 [ 49.994768][ T4989] loop0: detected capacity change from 0 to 2048 [ 50.004671][ T4989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.132739][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.331173][ T5017] loop3: detected capacity change from 0 to 512 [ 50.338328][ T5017] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 50.480778][ T5025] loop4: detected capacity change from 0 to 2048 [ 50.491654][ T5029] netlink: '+}[@': attribute type 10 has an invalid length. [ 50.501610][ T5029] hsr_slave_0: left promiscuous mode [ 50.508060][ T5029] hsr_slave_1: left promiscuous mode [ 50.526375][ T5025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.655205][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.954760][ T5068] netlink: 184 bytes leftover after parsing attributes in process `syz.0.678'. [ 50.983584][ T5071] netlink: '+}[@': attribute type 10 has an invalid length. [ 50.991677][ T5071] hsr_slave_0: left promiscuous mode [ 51.001420][ T5071] hsr_slave_1: left promiscuous mode [ 51.024553][ T5073] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 51.058991][ T5077] loop3: detected capacity change from 0 to 2048 [ 51.076555][ T5077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.167772][ T5090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'. [ 51.181464][ T5090] bridge0: port 1(vlan2) entered blocking state [ 51.187968][ T5090] bridge0: port 1(vlan2) entered disabled state [ 51.196703][ T5090] vlan2: entered allmulticast mode [ 51.202048][ T5090] dummy0: entered allmulticast mode [ 51.208319][ T5090] vlan2: entered promiscuous mode [ 51.213478][ T5090] dummy0: entered promiscuous mode [ 51.220753][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.285074][ T5095] vlan3: entered allmulticast mode [ 51.378055][ T5102] netlink: 'syz.2.696': attribute type 3 has an invalid length. [ 51.529200][ T5119] netlink: '+}[@': attribute type 10 has an invalid length. [ 51.538379][ T5119] hsr_slave_0: left promiscuous mode [ 51.544811][ T5119] hsr_slave_1: left promiscuous mode [ 51.560407][ T5121] loop3: detected capacity change from 0 to 2048 [ 51.575076][ T5121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.622922][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 51.640025][ T5125] bond1: entered promiscuous mode [ 51.645208][ T5125] bond1: entered allmulticast mode [ 51.657327][ T5128] pim6reg: entered allmulticast mode [ 51.672717][ T5125] ip6gretap1: entered allmulticast mode [ 51.680628][ T5125] ip6gretap1: entered promiscuous mode [ 51.686449][ T5125] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 51.695616][ T5128] pim6reg: left allmulticast mode [ 51.702584][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.750132][ T5135] SELinux: syz.1.709 (5135) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 51.812590][ T5144] netlink: 176 bytes leftover after parsing attributes in process `syz.3.724'. [ 51.824149][ T5143] pim6reg: entered allmulticast mode [ 51.843002][ T5143] pim6reg: left allmulticast mode [ 52.158850][ T3378] IPVS: starting estimator thread 0... [ 52.229601][ T5166] netlink: 'syz.3.718': attribute type 3 has an invalid length. [ 52.263765][ T5161] IPVS: using max 2016 ests per chain, 100800 per kthread [ 52.296752][ T5170] loop2: detected capacity change from 0 to 2048 [ 52.303742][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 52.333207][ T5173] bond1: entered promiscuous mode [ 52.338442][ T5173] bond1: entered allmulticast mode [ 52.350795][ T5173] ip6gretap1: entered allmulticast mode [ 52.358552][ T5173] ip6gretap1: entered promiscuous mode [ 52.364331][ T5173] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 52.378205][ T5170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.396462][ T5182] netlink: 184 bytes leftover after parsing attributes in process `syz.3.722'. [ 52.434280][ T5186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.479803][ T5186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.516315][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.554930][ T5186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.626432][ T5186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.686863][ T5198] loop4: detected capacity change from 0 to 512 [ 52.702274][ T5198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.715950][ T5186] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.734805][ T5186] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.746684][ T5198] EXT4-fs (loop4): 1 truncate cleaned up [ 52.752779][ T5198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.770182][ T5186] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.794731][ T5186] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.804052][ T5198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.947568][ T3381] IPVS: starting estimator thread 0... [ 52.985358][ T5212] loop0: detected capacity change from 0 to 1024 [ 52.992310][ T5212] EXT4-fs: Ignoring removed orlov option [ 52.998242][ T5212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.025707][ T5212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.043508][ T5208] IPVS: using max 2496 ests per chain, 124800 per kthread [ 53.134402][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.149564][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 53.149607][ T29] audit: type=1326 audit(1746210189.796:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.2.742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbac1d9e969 code=0x0 [ 53.172219][ T37] IPVS: stop unused estimator thread 0... [ 53.212866][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 53.227487][ T5225] loop0: detected capacity change from 0 to 2048 [ 53.241612][ T5227] bridge0: port 3(gretap0) entered blocking state [ 53.248299][ T5227] bridge0: port 3(gretap0) entered disabled state [ 53.255941][ T5227] gretap0: entered allmulticast mode [ 53.261964][ T5227] gretap0: entered promiscuous mode [ 53.269399][ T5225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.284605][ T5227] bridge0: port 3(gretap0) entered blocking state [ 53.291170][ T5227] bridge0: port 3(gretap0) entered forwarding state [ 53.343589][ T5232] netlink: 'syz.3.746': attribute type 3 has an invalid length. [ 53.382983][ T5235] loop3: detected capacity change from 0 to 512 [ 53.390078][ T5235] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.403502][ T5237] netlink: 'syz.1.748': attribute type 13 has an invalid length. [ 53.422775][ T5235] EXT4-fs (loop3): 1 truncate cleaned up [ 53.429217][ T5235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.432954][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.456399][ T5235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.473384][ T29] audit: type=1326 audit(1746210190.116:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.496727][ T29] audit: type=1326 audit(1746210190.116:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.520217][ T29] audit: type=1326 audit(1746210190.116:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.543610][ T29] audit: type=1326 audit(1746210190.116:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.566891][ T29] audit: type=1326 audit(1746210190.116:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.590301][ T29] audit: type=1326 audit(1746210190.116:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.613624][ T29] audit: type=1326 audit(1746210190.116:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.636888][ T29] audit: type=1326 audit(1746210190.116:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.660280][ T29] audit: type=1326 audit(1746210190.116:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 53.685464][ T5237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.807965][ T5247] netlink: 'syz.3.752': attribute type 2 has an invalid length. [ 53.815759][ T5247] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 53.823441][ T5247] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.752'. [ 53.882039][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 53.889841][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 53.907837][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.915718][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.923468][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.931207][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.939068][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.947004][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.954937][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.962622][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.970334][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.978070][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.985792][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 53.993625][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 54.001316][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 54.009022][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 54.017468][ T36] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 54.081739][ T5262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.116624][ T3381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.149798][ T5269] loop3: detected capacity change from 0 to 512 [ 54.159050][ T5269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.172560][ T5262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.193770][ T5269] EXT4-fs (loop3): 1 truncate cleaned up [ 54.225035][ T5262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.277820][ T5285] loop3: detected capacity change from 0 to 512 [ 54.292088][ T5285] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.314559][ T5262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.330495][ T5285] EXT4-fs (loop3): 1 truncate cleaned up [ 54.360325][ T5290] netlink: 'syz.0.765': attribute type 13 has an invalid length. [ 54.417444][ T5294] loop4: detected capacity change from 0 to 512 [ 54.440760][ T5294] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.451165][ T5290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.470227][ T5294] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 54.517609][ T5294] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.767: inode #15: comm syz.4.767: iget: illegal inode # [ 54.520689][ T5262] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.531398][ T5294] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.767: couldn't read orphan inode 15 (err -117) [ 54.544015][ T5262] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.565340][ T5262] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.579776][ T5262] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.627691][ T5304] loop3: detected capacity change from 0 to 512 [ 54.643753][ T5304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.652410][ T5308] loop0: detected capacity change from 0 to 128 [ 54.677567][ T5304] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.818425][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 54.969349][ T5351] vlan2: entered allmulticast mode [ 55.068655][ T5357] loop4: detected capacity change from 0 to 512 [ 55.084723][ T5359] loop0: detected capacity change from 0 to 512 [ 55.091334][ T5357] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.092965][ T5359] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 55.108123][ T5357] EXT4-fs (loop4): mount failed [ 55.115144][ T5359] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 55.130708][ T5359] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 55.141433][ T5359] EXT4-fs (loop0): 1 truncate cleaned up [ 55.199531][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 55.213047][ T5371] ref_ctr increment failed for inode: 0x37e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881040cd800 [ 55.225523][ T5370] uprobe: syz.4.801:5370 failed to unregister, leaking uprobe [ 55.589750][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 55.601459][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 55.707363][ T5407] loop1: detected capacity change from 0 to 512 [ 55.738824][ T5407] ext4 filesystem being mounted at /153/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 55.815201][ T5421] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.826545][ T5421] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.845459][ T5425] loop4: detected capacity change from 0 to 128 [ 55.932351][ T5433] loop2: detected capacity change from 0 to 8192 [ 56.020675][ T5448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.834'. [ 56.042244][ T5445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.059981][ T5448] loop2: detected capacity change from 0 to 1024 [ 56.087513][ T5448] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 56.097360][ T5448] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 56.109908][ T5448] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.141790][ T5448] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.834: unexpected bad inode w/o EXT4_IGET_BAD [ 56.143920][ T5445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.168586][ T5448] EXT4-fs (loop2): no journal found [ 56.173967][ T5448] EXT4-fs (loop2): can't get journal size [ 56.202715][ T5448] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.834: Invalid block bitmap block 0 in block_group 0 [ 56.254885][ T5445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.265398][ T5456] loop0: detected capacity change from 0 to 512 [ 56.265790][ T5456] EXT4-fs: Ignoring removed orlov option [ 56.289272][ T5458] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 56.309080][ T5456] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.839: corrupted in-inode xattr: invalid ea_ino [ 56.332856][ T5456] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.839: couldn't read orphan inode 15 (err -117) [ 56.364501][ T5445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.465454][ T2969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.474188][ T2969] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.491129][ T5445] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.506126][ T5445] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.536249][ T5445] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.553430][ T5445] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.561821][ T5484] loop3: detected capacity change from 0 to 512 [ 56.576546][ T5484] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.601193][ T5484] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.852: corrupted inode contents [ 56.621261][ T5484] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.852: mark_inode_dirty error [ 56.637549][ T5484] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.852: corrupted inode contents [ 56.651721][ T5484] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.852: mark_inode_dirty error [ 56.669931][ T5494] loop2: detected capacity change from 0 to 128 [ 56.726383][ T5503] gretap0: left allmulticast mode [ 56.731577][ T5503] gretap0: left promiscuous mode [ 56.736949][ T5503] bridge0: port 3(gretap0) entered disabled state [ 56.771357][ T5503] bridge_slave_0: left allmulticast mode [ 56.777298][ T5503] bridge_slave_0: left promiscuous mode [ 56.783003][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.805443][ T5503] bridge_slave_1: left allmulticast mode [ 56.811153][ T5503] bridge_slave_1: left promiscuous mode [ 56.816998][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.855757][ T5503] bond0: (slave bond_slave_0): Releasing backup interface [ 56.869798][ T5503] bond0: (slave bond_slave_1): Releasing backup interface [ 56.882278][ T5503] team0: Port device team_slave_0 removed [ 56.891525][ T5503] team0: Port device team_slave_1 removed [ 56.898645][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.906148][ T5503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.916190][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.923824][ T5503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.945828][ T5503] team0: Port device ip6gretap1 removed [ 56.951959][ T5503] batadv1: left allmulticast mode [ 56.957061][ T5503] batadv1: left promiscuous mode [ 56.962190][ T5503] bridge0: port 4(batadv1) entered disabled state [ 57.059420][ T5520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.105757][ T5520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.146396][ T5520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.226176][ T5520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.280586][ T5520] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.292287][ T5520] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.304520][ T5520] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.317931][ T5520] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.335760][ T5524] loop1: detected capacity change from 0 to 512 [ 57.337028][ T5528] loop0: detected capacity change from 0 to 128 [ 57.356180][ T5529] loop2: detected capacity change from 0 to 512 [ 57.357096][ T5524] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.384620][ T5524] EXT4-fs (loop1): 1 truncate cleaned up [ 57.416024][ T5529] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.495405][ T5529] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.869: corrupted inode contents [ 57.532028][ T5529] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.869: mark_inode_dirty error [ 57.549449][ T5546] loop1: detected capacity change from 0 to 512 [ 57.587673][ T5546] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.604002][ T5555] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.616200][ T5529] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.869: corrupted inode contents [ 57.627217][ T5546] EXT4-fs (loop1): mount failed [ 57.637459][ T5529] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.869: mark_inode_dirty error [ 57.687936][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 57.695990][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.765099][ T5566] loop3: detected capacity change from 0 to 128 [ 57.805557][ T5572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.868079][ T5586] ref_ctr increment failed for inode: 0x3a8 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104987900 [ 57.881056][ T5585] uprobe: syz.0.890:5585 failed to unregister, leaking uprobe [ 57.891366][ T5572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.957914][ T5572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.017291][ T5572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.094993][ T5572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.107242][ T5572] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.119333][ T5572] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.135579][ T5572] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.572542][ T5622] Falling back ldisc for ttyS3. [ 58.771480][ T5603] Set syz1 is full, maxelem 65536 reached [ 58.888058][ T5639] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.891284][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 58.891303][ T29] audit: type=1400 audit(1746210195.536:945): avc: denied { setopt } for pid=5618 comm="syz.4.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.025022][ T29] audit: type=1400 audit(1746210195.676:946): avc: denied { read } for pid=5640 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.107618][ T5649] vhci_hcd: invalid port number 96 [ 59.112892][ T5649] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 59.152642][ T5657] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 59.164103][ T5656] IPVS: stopping backup sync thread 5657 ... [ 59.210707][ T29] audit: type=1326 audit(1746210195.856:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.234939][ T29] audit: type=1326 audit(1746210195.856:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.259054][ T29] audit: type=1326 audit(1746210195.856:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.282458][ T29] audit: type=1326 audit(1746210195.856:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.306046][ T29] audit: type=1326 audit(1746210195.856:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.329371][ T29] audit: type=1326 audit(1746210195.856:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.352671][ T29] audit: type=1326 audit(1746210195.856:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.375962][ T29] audit: type=1326 audit(1746210195.856:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad41be969 code=0x7ffc0000 [ 59.403504][ T3378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.516986][ T5680] loop3: detected capacity change from 0 to 512 [ 59.549246][ T5680] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.564003][ T5680] EXT4-fs (loop3): 1 truncate cleaned up [ 59.570044][ T5690] loop0: detected capacity change from 0 to 512 [ 59.576875][ T5690] EXT4-fs: Ignoring removed nobh option [ 59.593338][ T5690] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 59.607906][ T5690] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.940: attempt to clear invalid blocks 2 len 1 [ 59.627940][ T3378] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 59.637819][ T3378] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 59.652748][ T5690] EXT4-fs (loop0): Remounting filesystem read-only [ 59.660583][ T5690] EXT4-fs (loop0): 1 truncate cleaned up [ 59.715853][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 59.741658][ T5714] rdma_op ffff88811e941180 conn xmit_rdma 0000000000000000 [ 59.791453][ T5718] ALSA: seq fatal error: cannot create timer (-19) [ 59.821359][ T5728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 59.830394][ T5728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 59.864153][ T793] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.885475][ T5731] loop3: detected capacity change from 0 to 164 [ 59.892672][ T5731] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.904177][ T5731] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.912644][ T5731] Symlink component flag not implemented [ 59.918471][ T5731] Symlink component flag not implemented [ 59.925993][ T5731] Symlink component flag not implemented (7) [ 59.932070][ T5731] Symlink component flag not implemented (116) [ 60.092950][ T5745] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 60.271093][ T5751] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 60.298091][ T3378] Process accounting resumed [ 60.328853][ T5758] loop3: detected capacity change from 0 to 512 [ 60.336349][ T5758] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.346739][ T5758] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 60.355010][ T5758] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 60.365057][ T5758] EXT4-fs (loop3): 1 truncate cleaned up [ 60.376925][ T5758] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 60.474274][ T5758] EXT4-fs (loop3): Remounting filesystem read-only [ 60.504746][ T3378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.575922][ T5770] loop1: detected capacity change from 0 to 2048 [ 60.591623][ T5774] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.591623][ T5774] program syz.3.976 not setting count and/or reply_len properly [ 60.615890][ T5770] GPT:first_usable_lbas don't match. [ 60.621237][ T5770] GPT:34 != 290 [ 60.624789][ T5770] GPT: Use GNU Parted to correct GPT errors. [ 60.631006][ T5770] loop1: p1 p2 p3 [ 60.681894][ T5787] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 60.692214][ T5785] IPVS: stopping backup sync thread 5787 ... [ 60.771327][ T5796] ALSA: seq fatal error: cannot create timer (-19) [ 60.880019][ T5816] loop1: detected capacity change from 0 to 512 [ 60.906602][ T5816] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.985416][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 61.187381][ T5864] netlink: 'syz.3.999': attribute type 16 has an invalid length. [ 61.195258][ T5864] netlink: 'syz.3.999': attribute type 17 has an invalid length. [ 61.218927][ T5866] loop2: detected capacity change from 0 to 164 [ 61.243581][ T5866] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.254904][ T5875] msdos: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 61.264617][ T5866] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.272999][ T5864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.289777][ T5866] Symlink component flag not implemented [ 61.295559][ T5866] Symlink component flag not implemented [ 61.309797][ T5866] Symlink component flag not implemented (7) [ 61.315976][ T5866] Symlink component flag not implemented (116) [ 61.350047][ T5881] loop3: detected capacity change from 0 to 512 [ 61.370010][ T5881] EXT4-fs: Ignoring removed nobh option [ 61.390882][ T5881] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 61.399978][ T5881] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1003: attempt to clear invalid blocks 2 len 1 [ 61.414665][ T5881] EXT4-fs (loop3): Remounting filesystem read-only [ 61.422663][ T5881] EXT4-fs (loop3): 1 truncate cleaned up [ 61.538571][ T5910] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 61.539789][ T5906] SELinux: failed to load policy [ 61.554193][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 61.591809][ T5912] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 61.655309][ T5920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'. [ 61.716246][ T5933] loop2: detected capacity change from 0 to 512 [ 61.734337][ T5933] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.744469][ T5933] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 61.752543][ T5933] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 61.766893][ T5933] EXT4-fs (loop2): 1 truncate cleaned up [ 61.779454][ T5933] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 61.798396][ T5933] EXT4-fs (loop2): Remounting filesystem read-only [ 61.820118][ T5949] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 61.894262][ T5962] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 61.894262][ T5962] program syz.2.1026 not setting count and/or reply_len properly [ 62.204446][ T6003] loop2: detected capacity change from 0 to 164 [ 62.234393][ T6003] bio_check_eod: 59 callbacks suppressed [ 62.234411][ T6003] syz.2.1041: attempt to access beyond end of device [ 62.234411][ T6003] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.256175][ T6003] syz.2.1041: attempt to access beyond end of device [ 62.256175][ T6003] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.384774][ T6034] loop0: detected capacity change from 0 to 512 [ 62.396189][ T6034] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 62.406775][ T6034] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 62.415625][ T6034] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 62.426524][ T6034] EXT4-fs (loop0): 1 truncate cleaned up [ 62.436055][ T37] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.453587][ T6034] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 62.469369][ T6034] EXT4-fs (loop0): Remounting filesystem read-only [ 62.506227][ T37] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.540524][ T6053] C: renamed from team_slave_0 [ 62.554994][ T6053] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 62.562931][ T6053] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1054'. [ 62.572035][ T6053] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 62.590359][ T37] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.639098][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.650795][ T37] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.665484][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.751097][ T37] bridge_slave_1: left allmulticast mode [ 62.756866][ T37] bridge_slave_1: left promiscuous mode [ 62.762544][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.779387][ T37] bridge_slave_0: left promiscuous mode [ 62.785440][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.828283][ T6075] loop3: detected capacity change from 0 to 512 [ 62.857610][ T6075] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.898685][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.911938][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.925393][ T37] bond0 (unregistering): Released all slaves [ 62.961728][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 62.974570][ T37] hsr_slave_0: left promiscuous mode [ 62.980418][ T37] hsr_slave_1: left promiscuous mode [ 62.986090][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.993556][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.001281][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.008793][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.019877][ T37] veth1_macvtap: left promiscuous mode [ 63.025399][ T37] veth0_macvtap: left promiscuous mode [ 63.030935][ T37] veth1_vlan: left promiscuous mode [ 63.036319][ T37] veth0_vlan: left promiscuous mode [ 63.110635][ T37] team0 (unregistering): Port device team_slave_1 removed [ 63.121101][ T37] team0 (unregistering): Port device team_slave_0 removed [ 63.186857][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.194094][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.202072][ T6055] bridge_slave_0: entered allmulticast mode [ 63.208754][ T6055] bridge_slave_0: entered promiscuous mode [ 63.215902][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.223149][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.230629][ T6055] bridge_slave_1: entered allmulticast mode [ 63.237310][ T6055] bridge_slave_1: entered promiscuous mode [ 63.264286][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.276828][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.308168][ T6055] team0: Port device team_slave_0 added [ 63.317954][ T6055] team0: Port device team_slave_1 added [ 63.357571][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.364632][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.368002][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 63.390626][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.393462][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.417217][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.443387][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.499239][ T6055] hsr_slave_0: entered promiscuous mode [ 63.506751][ T6055] hsr_slave_1: entered promiscuous mode [ 63.693086][ T6055] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.702741][ T6055] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.713394][ T6055] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.723174][ T6055] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.765336][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.784797][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.796189][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.803382][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.825985][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.833237][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.900021][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.022399][ T6055] veth0_vlan: entered promiscuous mode [ 64.033864][ T6055] veth1_vlan: entered promiscuous mode [ 64.051164][ T6055] veth0_macvtap: entered promiscuous mode [ 64.061323][ T6055] veth1_macvtap: entered promiscuous mode [ 64.072836][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.083370][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.093225][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.103751][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.115803][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.126808][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.137472][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.147344][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.157899][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.168969][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.182397][ T6055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.191277][ T6055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.200184][ T6055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.209054][ T6055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.245423][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 64.245441][ T29] audit: type=1326 audit(1746210200.896:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.275286][ T29] audit: type=1326 audit(1746210200.896:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.306624][ T29] audit: type=1326 audit(1746210200.896:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.330160][ T29] audit: type=1326 audit(1746210200.896:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.353823][ T29] audit: type=1326 audit(1746210200.896:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.377319][ T29] audit: type=1326 audit(1746210200.946:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.400854][ T29] audit: type=1326 audit(1746210200.946:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.424297][ T29] audit: type=1326 audit(1746210200.946:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.447714][ T29] audit: type=1326 audit(1746210200.946:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.471141][ T29] audit: type=1326 audit(1746210200.946:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.3.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 64.555601][ T6207] SELinux: syz.5.1072 (6207) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.644004][ T6216] vlan2: entered allmulticast mode [ 64.649248][ T6216] bridge_slave_0: entered allmulticast mode [ 64.694804][ T6195] chnl_net:caif_netlink_parms(): no params data found [ 64.762270][ T6228] ip6tnl1: entered promiscuous mode [ 64.769188][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.776393][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.777896][ T6228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.786613][ T6195] bridge_slave_0: entered allmulticast mode [ 64.813540][ T6195] bridge_slave_0: entered promiscuous mode [ 64.823003][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.830217][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.837896][ T6195] bridge_slave_1: entered allmulticast mode [ 64.844751][ T6195] bridge_slave_1: entered promiscuous mode [ 64.883740][ T6195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.904692][ T6195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.914073][ T793] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.958742][ T6195] team0: Port device team_slave_0 added [ 64.983196][ T6195] team0: Port device team_slave_1 added [ 65.036937][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.044051][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.046827][ T6249] loop5: detected capacity change from 0 to 2048 [ 65.070393][ T6195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.131750][ T6253] loop1: detected capacity change from 0 to 4096 [ 65.140085][ T6195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.147145][ T6195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.173101][ T6195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.203350][ T6249] loop5: detected capacity change from 2048 to 0 [ 65.212758][ T6195] hsr_slave_0: entered promiscuous mode [ 65.219043][ T6195] hsr_slave_1: entered promiscuous mode [ 65.225301][ T6195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.233078][ T6195] Cannot create hsr debugfs directory [ 65.238832][ C1] I/O error, dev loop5, sector 384 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 65.248596][ T6255] syz.5.1090: attempt to access beyond end of device [ 65.248596][ T6255] loop5: rw=0, sector=384, nr_sectors = 8 limit=0 [ 65.272473][ T6055] syz-executor: attempt to access beyond end of device [ 65.272473][ T6055] loop5: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 65.287801][ T6055] syz-executor: attempt to access beyond end of device [ 65.287801][ T6055] loop5: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 65.301502][ T6055] syz-executor: attempt to access beyond end of device [ 65.301502][ T6055] loop5: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 65.327999][ T6055] syz-executor: attempt to access beyond end of device [ 65.327999][ T6055] loop5: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 65.353347][ T6055] syz-executor: attempt to access beyond end of device [ 65.353347][ T6055] loop5: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 65.367139][ T6055] syz-executor: attempt to access beyond end of device [ 65.367139][ T6055] loop5: rw=12288, sector=16, nr_sectors = 4 limit=0 [ 65.380642][ T6055] EXT4-fs error (device loop5): ext4_get_inode_loc:4588: inode #2: block 4: comm syz-executor: unable to read itable block [ 65.393745][ T6055] syz-executor: attempt to access beyond end of device [ 65.393745][ T6055] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 65.395865][ T6195] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.407234][ T6055] buffer_io_error: 54 callbacks suppressed [ 65.407248][ T6055] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 65.431117][ T6055] EXT4-fs (loop5): I/O error while writing superblock [ 65.438248][ T6055] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: IO failure [ 65.447119][ T6055] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 65.457310][ T6055] EXT4-fs (loop5): I/O error while writing superblock [ 65.464178][ T6055] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz-executor: mark_inode_dirty error [ 65.476818][ T6195] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.479847][ T6055] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 65.495267][ T6055] EXT4-fs (loop5): I/O error while writing superblock [ 65.513160][ T793] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4573: inode #2: block 4: comm kworker/u8:5: unable to read itable block [ 65.527282][ T793] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 65.536792][ T6195] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.543384][ T793] EXT4-fs (loop5): I/O error while writing superblock [ 65.567589][ T6055] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 65.576443][ T6055] EXT4-fs (loop5): I/O error while writing superblock [ 65.585869][ T6267] ALSA: seq fatal error: cannot create timer (-22) [ 65.592484][ T6250] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 65.606854][ T6195] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.715566][ T6195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.724804][ T6195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.735541][ T6195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.745117][ T6195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.799545][ T6195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.810691][ T6195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.824565][ T793] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.831806][ T793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.845047][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.852175][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.956126][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.096021][ T6195] veth0_vlan: entered promiscuous mode [ 66.115728][ T6195] veth1_vlan: entered promiscuous mode [ 66.146690][ T6195] veth0_macvtap: entered promiscuous mode [ 66.157323][ T6195] veth1_macvtap: entered promiscuous mode [ 66.180550][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.191232][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.201086][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.211590][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.221566][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.232132][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.286091][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.310364][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.320869][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.330740][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.341247][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.351188][ T6195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.361715][ T6195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.407071][ T6195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.432335][ T6309] vlan2: entered allmulticast mode [ 66.454677][ T6195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.463455][ T6195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.472274][ T6195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.481122][ T6195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.947891][ T6335] hub 2-0:1.0: USB hub found [ 66.952603][ T6335] hub 2-0:1.0: 8 ports detected [ 66.982262][ T6339] vhci_hcd: invalid port number 236 [ 67.108418][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.357888][ T6396] loop3: detected capacity change from 0 to 512 [ 67.370534][ T6396] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.383805][ T6396] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1148: bad orphan inode 13 [ 67.406736][ T6396] ext4_test_bit(bit=12, block=18) = 1 [ 67.412248][ T6396] is_bad_inode(inode)=0 [ 67.416559][ T6396] NEXT_ORPHAN(inode)=2130706432 [ 67.421540][ T6396] max_ino=32 [ 67.424856][ T6396] i_nlink=1 [ 67.487607][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 67.614554][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.621691][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.652552][ T6374] bridge_slave_0: entered allmulticast mode [ 67.659815][ T6374] bridge_slave_0: entered promiscuous mode [ 67.666958][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.674108][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.681547][ T6374] bridge_slave_1: entered allmulticast mode [ 67.688651][ T6374] bridge_slave_1: entered promiscuous mode [ 67.732616][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.773627][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.858177][ T6374] team0: Port device team_slave_0 added [ 67.865359][ T6374] team0: Port device team_slave_1 added [ 67.912660][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.919704][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.946086][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.959297][ T6444] __nla_validate_parse: 1 callbacks suppressed [ 67.959313][ T6444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1166'. [ 68.024305][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.031409][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.057522][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.149538][ T6374] hsr_slave_0: entered promiscuous mode [ 68.184913][ T6374] hsr_slave_1: entered promiscuous mode [ 68.203940][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.223593][ T6374] Cannot create hsr debugfs directory [ 68.231696][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.248207][ T6464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6464 comm=syz.3.1176 [ 68.260794][ T6464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6464 comm=syz.3.1176 [ 68.338214][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.397386][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.471102][ T6374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.500564][ T6374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.527052][ T6374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.542233][ T6374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.567251][ T6488] capability: warning: `syz.3.1194' uses 32-bit capabilities (legacy support in use) [ 68.590197][ T37] bridge_slave_1: left allmulticast mode [ 68.596043][ T37] bridge_slave_1: left promiscuous mode [ 68.601780][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.619207][ T37] bridge_slave_0: left allmulticast mode [ 68.624968][ T37] bridge_slave_0: left promiscuous mode [ 68.630695][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.658380][ T6490] loop1: detected capacity change from 0 to 512 [ 68.678406][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1185'. [ 68.702557][ T6490] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.739267][ T6490] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1184: bad orphan inode 13 [ 68.764365][ T6490] ext4_test_bit(bit=12, block=18) = 1 [ 68.769867][ T6490] is_bad_inode(inode)=0 [ 68.774421][ T6490] NEXT_ORPHAN(inode)=2130706432 [ 68.779295][ T6490] max_ino=32 [ 68.782512][ T6490] i_nlink=1 [ 68.791442][ T6490] EXT4-fs mount: 44 callbacks suppressed [ 68.791459][ T6490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.816119][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.827957][ T1040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.840414][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.852559][ T37] bond0 (unregistering): Released all slaves [ 68.921934][ T37] hsr_slave_0: left promiscuous mode [ 68.930113][ T37] hsr_slave_1: left promiscuous mode [ 68.938171][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.945703][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.956078][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.963577][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.993512][ T37] veth1_macvtap: left promiscuous mode [ 68.999161][ T37] veth0_macvtap: left promiscuous mode [ 69.006754][ T37] veth1_vlan: left promiscuous mode [ 69.006894][ T6504] loop3: detected capacity change from 0 to 8192 [ 69.012122][ T37] veth0_vlan: left promiscuous mode [ 69.025992][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.067474][ T6504] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 69.076241][ T6504] FAT-fs (loop3): Filesystem has been set read-only [ 69.165166][ T37] team0 (unregistering): Port device team_slave_1 removed [ 69.186764][ T37] team0 (unregistering): Port device team_slave_0 removed [ 69.212012][ T6515] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 69.299819][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.338785][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.360934][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.368156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.399363][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 69.424448][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.431794][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.483019][ T6519] loop0: detected capacity change from 0 to 512 [ 69.509875][ T6519] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.529957][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.550344][ T6519] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 69.577439][ T6519] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1201: attempt to clear invalid blocks 2 len 1 [ 69.627833][ T6519] EXT4-fs (loop0): Remounting filesystem read-only [ 69.636245][ T6545] hsr0: entered promiscuous mode [ 69.649242][ T6519] EXT4-fs (loop0): 1 truncate cleaned up [ 69.657223][ T6519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.674595][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 69.674612][ T29] audit: type=1400 audit(1746210206.326:1242): avc: denied { quotaon } for pid=6518 comm="syz.0.1201" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.721451][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.778348][ T6555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6555 comm=syz.2.1209 [ 69.791135][ T6555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6555 comm=syz.2.1209 [ 69.809228][ T6560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1210'. [ 69.861947][ T6374] veth0_vlan: entered promiscuous mode [ 69.870894][ T6374] veth1_vlan: entered promiscuous mode [ 69.920388][ T6374] veth0_macvtap: entered promiscuous mode [ 69.933230][ T6374] veth1_macvtap: entered promiscuous mode [ 69.972730][ T6570] syzkaller0: entered promiscuous mode [ 69.978313][ T6570] syzkaller0: entered allmulticast mode [ 70.006693][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.017203][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.027216][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.037753][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.047737][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.058496][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.072176][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.123862][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.134638][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.144525][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.155075][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.164949][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.175452][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.232863][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.247395][ T6374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.256407][ T6374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.265171][ T6374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.273984][ T6374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.297066][ T6593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6593 comm=syz.1.1225 [ 70.309782][ T6593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6593 comm=syz.1.1225 [ 70.337340][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1224'. [ 70.419377][ T29] audit: type=1326 audit(1746210207.056:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 70.423761][ T6602] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1226'. [ 70.442853][ T29] audit: type=1326 audit(1746210207.056:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 70.475691][ T29] audit: type=1326 audit(1746210207.056:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.3.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f947de969 code=0x7ffc0000 [ 70.502369][ T29] audit: type=1400 audit(1746210207.126:1246): avc: denied { read } for pid=6603 comm="syz.3.1229" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 70.505730][ T6597] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1226'. [ 70.525474][ T29] audit: type=1400 audit(1746210207.126:1247): avc: denied { open } for pid=6603 comm="syz.3.1229" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 70.607301][ T29] audit: type=1326 audit(1746210207.256:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11562e969 code=0x7ffc0000 [ 70.630937][ T29] audit: type=1326 audit(1746210207.256:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11562e969 code=0x7ffc0000 [ 70.658507][ T29] audit: type=1400 audit(1746210207.256:1250): avc: denied { setopt } for pid=6616 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.682524][ T29] audit: type=1326 audit(1746210207.326:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb11562e969 code=0x7ffc0000 [ 70.743798][ T793] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 70.801372][ T6632] xt_hashlimit: max too large, truncated to 1048576 [ 70.831921][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.891534][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.020426][ T6653] loop2: detected capacity change from 0 to 8192 [ 71.046614][ T6653] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 71.055352][ T6653] FAT-fs (loop2): Filesystem has been set read-only [ 71.130895][ T6665] SELinux: failed to load policy [ 71.216299][ T6677] loop6: detected capacity change from 0 to 2048 [ 71.281728][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'. [ 71.313886][ T6677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.339580][ T6677] EXT4-fs (loop6): shut down requested (2) [ 71.384102][ T6374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.762892][ T6722] loop6: detected capacity change from 0 to 512 [ 71.780184][ T6722] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.808468][ T6722] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 71.825589][ T6722] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1274: attempt to clear invalid blocks 2 len 1 [ 71.861650][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 71.887309][ T6722] EXT4-fs (loop6): Remounting filesystem read-only [ 71.913476][ T6722] EXT4-fs (loop6): 1 truncate cleaned up [ 71.919818][ T6722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.026299][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 72.057556][ T6374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.071417][ T23] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.298940][ T6761] vhci_hcd: default hub control req: 0000 vfffc i0000 l0 [ 72.740027][ T6783] xt_hashlimit: max too large, truncated to 1048576 [ 72.792597][ T6786] hub 9-0:1.0: USB hub found [ 72.853540][ T6786] hub 9-0:1.0: 8 ports detected [ 73.039785][ T6805] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1308'. [ 73.056374][ T6802] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1308'. [ 73.443521][ T6831] vhci_hcd: default hub control req: 0000 vfffc i0000 l0 [ 73.464755][ T6837] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1322'. [ 73.483340][ T6833] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1322'. [ 73.527232][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'. [ 73.580379][ T6842] syzkaller0: entered promiscuous mode [ 73.585941][ T6842] syzkaller0: entered allmulticast mode [ 73.702969][ T6850] loop0: detected capacity change from 0 to 2048 [ 73.745105][ T6850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.780928][ T6860] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 73.817307][ T6850] EXT4-fs (loop0): shut down requested (2) [ 73.889611][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.910425][ T1040] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 73.940065][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 73.959837][ T1040] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.026615][ T6872] vhci_hcd: default hub control req: 0000 vfffc i0000 l0 [ 74.065270][ T6877] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 74.149276][ T6888] hub 9-0:1.0: USB hub found [ 74.154155][ T6888] hub 9-0:1.0: 8 ports detected [ 74.250124][ T6896] mmap: +}[@ (6896) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.275106][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1348'. [ 74.491133][ T6927] hub 9-0:1.0: USB hub found [ 74.497160][ T6927] hub 9-0:1.0: 8 ports detected [ 74.547392][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1366'. [ 74.564093][ T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 74.579724][ T23] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.599521][ T6938] 9pnet_fd: Insufficient options for proto=fd [ 74.681189][ T6943] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 74.804698][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 74.824066][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 74.824083][ T29] audit: type=1400 audit(1746210211.476:1372): avc: denied { connect } for pid=6956 comm="syz.6.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.839924][ T6960] loop1: detected capacity change from 0 to 2048 [ 74.875075][ T6960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.924383][ T29] audit: type=1400 audit(1746210211.566:1373): avc: denied { read } for pid=6959 comm="syz.1.1378" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 74.955984][ T29] audit: type=1400 audit(1746210211.606:1374): avc: denied { override_creds } for pid=6968 comm="syz.2.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.981869][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.016689][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 75.030941][ T6978] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 75.042123][ T29] audit: type=1400 audit(1746210211.686:1375): avc: denied { bind } for pid=6973 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.082574][ T6987] loop1: detected capacity change from 0 to 512 [ 75.097028][ T6987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.109759][ T6987] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.122918][ T29] audit: type=1326 audit(1746210211.756:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 75.146575][ T29] audit: type=1326 audit(1746210211.756:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 75.170342][ T29] audit: type=1326 audit(1746210211.756:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 75.194196][ T29] audit: type=1326 audit(1746210211.766:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 75.217899][ T29] audit: type=1400 audit(1746210211.826:1380): avc: denied { setattr } for pid=6982 comm="syz.1.1394" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.240103][ T29] audit: type=1400 audit(1746210211.856:1381): avc: denied { setopt } for pid=6993 comm="syz.6.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.240471][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.291236][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.337880][ T7006] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 75.445195][ T7021] syz.6.1403 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.541107][ T7037] netlink: 'syz.0.1410': attribute type 13 has an invalid length. [ 75.564723][ T7037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.864297][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.898280][ T7066] loop1: detected capacity change from 0 to 512 [ 75.917050][ T7066] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.1424: corrupted in-inode xattr: invalid ea_ino [ 75.936121][ T7066] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1424: couldn't read orphan inode 15 (err -117) [ 75.949707][ T7066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.987392][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.124802][ T7091] vlan2: entered allmulticast mode [ 76.247326][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.308768][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.357674][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.401310][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.501263][ T7113] vhci_hcd: invalid port number 96 [ 76.506537][ T7113] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 76.521757][ T7097] chnl_net:caif_netlink_parms(): no params data found [ 76.549264][ T37] bridge_slave_1: left allmulticast mode [ 76.555038][ T37] bridge_slave_1: left promiscuous mode [ 76.560668][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.571730][ T37] bridge_slave_0: left allmulticast mode [ 76.577525][ T37] bridge_slave_0: left promiscuous mode [ 76.583401][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.735455][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.746154][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.756584][ T37] bond0 (unregistering): Released all slaves [ 76.817149][ T37] hsr_slave_0: left promiscuous mode [ 76.823756][ T37] hsr_slave_1: left promiscuous mode [ 76.829810][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.837513][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.845175][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.852615][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.864009][ T37] veth1_macvtap: left promiscuous mode [ 76.869617][ T37] veth0_macvtap: left promiscuous mode [ 76.875242][ T37] veth1_vlan: left promiscuous mode [ 76.880552][ T37] veth0_vlan: left promiscuous mode [ 76.944578][ T37] team0 (unregistering): Port device team_slave_1 removed [ 76.954429][ T37] team0 (unregistering): Port device team_slave_0 removed [ 76.986728][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.993967][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.001261][ T7097] bridge_slave_0: entered allmulticast mode [ 77.007850][ T7097] bridge_slave_0: entered promiscuous mode [ 77.015347][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.022618][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.029979][ T7097] bridge_slave_1: entered allmulticast mode [ 77.036588][ T7097] bridge_slave_1: entered promiscuous mode [ 77.055735][ T7097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.067141][ T7097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.098442][ T7097] team0: Port device team_slave_0 added [ 77.109494][ T7097] team0: Port device team_slave_1 added [ 77.128324][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.135425][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.161508][ T7097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.173364][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.180345][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.206477][ T7097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.248674][ T7097] hsr_slave_0: entered promiscuous mode [ 77.256234][ T7097] hsr_slave_1: entered promiscuous mode [ 77.273685][ T3380] Process accounting resumed [ 77.317436][ T7127] chnl_net:caif_netlink_parms(): no params data found [ 77.430669][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.437830][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.445148][ T7127] bridge_slave_0: entered allmulticast mode [ 77.451806][ T7127] bridge_slave_0: entered promiscuous mode [ 77.468662][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.475875][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.483305][ T7127] bridge_slave_1: entered allmulticast mode [ 77.494242][ T7127] bridge_slave_1: entered promiscuous mode [ 77.509621][ T37] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.531552][ T7097] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 77.542720][ T7127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.552343][ T7097] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 77.571869][ T37] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.586563][ T7127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.598531][ T7097] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 77.615015][ T7097] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 77.630138][ T7176] SELinux: ebitmap: truncated map [ 77.636890][ T7176] SELinux: failed to load policy [ 77.646636][ T37] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.661895][ T7127] team0: Port device team_slave_0 added [ 77.670985][ T7127] team0: Port device team_slave_1 added [ 77.695427][ T37] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.720813][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.727919][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.754118][ T7127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.765704][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.772656][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.798662][ T7127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.865945][ T7127] hsr_slave_0: entered promiscuous mode [ 77.872097][ T7127] hsr_slave_1: entered promiscuous mode [ 77.879965][ T7127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.887582][ T7127] Cannot create hsr debugfs directory [ 77.900643][ T37] gretap0: left allmulticast mode [ 77.905777][ T37] gretap0: left promiscuous mode [ 77.910885][ T37] bridge0: port 3(gretap0) entered disabled state [ 77.924589][ T37] bridge_slave_1: left allmulticast mode [ 77.930293][ T37] bridge_slave_1: left promiscuous mode [ 77.936015][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.954630][ T37] bridge_slave_0: left promiscuous mode [ 77.960352][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.040490][ T37] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 78.053445][ T37] ip6gretap1 (unregistering): left promiscuous mode [ 78.197152][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.207240][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.218054][ T3306] cgroup: fork rejected by pids controller in /syz3 [ 78.225878][ T37] bond0 (unregistering): Released all slaves [ 78.244592][ T37] bond1 (unregistering): Released all slaves [ 78.369729][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.377226][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.404535][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.412049][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.428589][ T37] veth1_macvtap: left promiscuous mode [ 78.435560][ T37] veth0_macvtap: left promiscuous mode [ 78.441251][ T37] veth1_vlan: left promiscuous mode [ 78.447294][ T37] veth0_vlan: left promiscuous mode [ 78.539510][ T37] team0 (unregistering): Port device team_slave_1 removed [ 78.554395][ T37] team0 (unregistering): Port device team_slave_0 removed [ 78.598341][ T7229] netem: incorrect ge model size [ 78.603379][ T7229] netem: change failed [ 78.619104][ T7235] loop6: detected capacity change from 0 to 512 [ 78.627006][ T7235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.642631][ T7097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.656129][ T7235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.672376][ T7097] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.682367][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.689479][ T1929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.697939][ T7235] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.710915][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.718036][ T1929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.748659][ T6374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.750832][ T7097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.768117][ T7097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.781697][ T7244] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 78.803751][ T7127] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.825616][ T7127] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.835175][ T7127] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.848864][ T7127] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.861591][ T7250] __nla_validate_parse: 5 callbacks suppressed [ 78.861610][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 78.907826][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 78.911409][ T7097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.954491][ T7127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.990667][ T7127] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.015241][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.022355][ T1929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.044495][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.051637][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.112498][ T793] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.142592][ T7127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.175926][ T793] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.220863][ T7097] veth0_vlan: entered promiscuous mode [ 79.235849][ T793] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.265785][ T7097] veth1_vlan: entered promiscuous mode [ 79.301734][ T793] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.346669][ T7127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.358842][ T7097] veth0_macvtap: entered promiscuous mode [ 79.381859][ T7097] veth1_macvtap: entered promiscuous mode [ 79.438715][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.449210][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.459105][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.469587][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.480575][ T7097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.636829][ T793] bond0 (unregistering): Released all slaves [ 79.651593][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.662187][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.674814][ T7097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.690722][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 79.701962][ T7097] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.711066][ T7097] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.719923][ T7097] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.728766][ T7097] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.758815][ T793] veth1_macvtap: left promiscuous mode [ 79.766886][ T793] veth0_macvtap: left promiscuous mode [ 79.772708][ T793] veth1_vlan: left promiscuous mode [ 79.778193][ T793] veth0_vlan: left promiscuous mode [ 79.954227][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.961365][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.971275][ T7266] bridge_slave_0: entered allmulticast mode [ 79.978307][ T7266] bridge_slave_0: entered promiscuous mode [ 79.995567][ T7127] veth0_vlan: entered promiscuous mode [ 80.005698][ T7335] Driver unsupported XDP return value 0 on prog (id 1207) dev N/A, expect packet loss! [ 80.007153][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.022654][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.043376][ T7266] bridge_slave_1: entered allmulticast mode [ 80.052039][ T7266] bridge_slave_1: entered promiscuous mode [ 80.065801][ T7127] veth1_vlan: entered promiscuous mode [ 80.083178][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.099094][ T7127] veth0_macvtap: entered promiscuous mode [ 80.111922][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.125111][ T7127] veth1_macvtap: entered promiscuous mode [ 80.143923][ T7266] team0: Port device team_slave_0 added [ 80.151599][ T7266] team0: Port device team_slave_1 added [ 80.161905][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 80.161922][ T29] audit: type=1400 audit(1746210216.806:1466): avc: denied { connect } for pid=7342 comm="syz.7.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.199635][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.210257][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.220156][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.231115][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.241026][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.251483][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.262410][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.271845][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.278981][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.305069][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.325303][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.336044][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.346285][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.356786][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.381850][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.400108][ T7127] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.409052][ T7127] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.417845][ T7127] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.426673][ T7127] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.439173][ T29] audit: type=1400 audit(1746210217.076:1467): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.463576][ T29] audit: type=1400 audit(1746210217.076:1468): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.487789][ T29] audit: type=1400 audit(1746210217.076:1469): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.517425][ T29] audit: type=1400 audit(1746210217.096:1470): avc: denied { map_create } for pid=7353 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.519804][ T7354] loop0: detected capacity change from 0 to 1024 [ 80.536821][ T29] audit: type=1400 audit(1746210217.096:1471): avc: denied { perfmon } for pid=7353 comm="syz.0.1522" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.543611][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.564242][ T29] audit: type=1400 audit(1746210217.096:1472): avc: denied { map_read map_write } for pid=7353 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.571173][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.591037][ T29] audit: type=1400 audit(1746210217.106:1473): avc: denied { prog_load } for pid=7353 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.591063][ T29] audit: type=1400 audit(1746210217.106:1474): avc: denied { bpf } for pid=7353 comm="syz.0.1522" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.616970][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.636026][ T29] audit: type=1400 audit(1746210217.106:1475): avc: denied { prog_run } for pid=7353 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.649986][ T7354] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.697383][ T7354] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.710201][ T7356] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 80.711053][ T7354] JBD2: no valid journal superblock found [ 80.724487][ T7354] EXT4-fs (loop0): Could not load journal inode [ 80.761984][ T7354] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 80.810464][ T793] IPVS: stop unused estimator thread 0... [ 80.831524][ T7266] hsr_slave_0: entered promiscuous mode [ 80.839040][ T7266] hsr_slave_1: entered promiscuous mode [ 80.845045][ T7266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.852692][ T7266] Cannot create hsr debugfs directory [ 81.345408][ T7398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.475935][ T7266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.486477][ T7266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.495168][ T7266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.504291][ T7266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.546753][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.560217][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.570111][ T793] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.577262][ T793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.589589][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.596674][ T1929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.664805][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.751600][ T7266] veth0_vlan: entered promiscuous mode [ 81.760833][ T7266] veth1_vlan: entered promiscuous mode [ 81.771331][ T7427] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 81.790057][ T7266] veth0_macvtap: entered promiscuous mode [ 81.797976][ T7266] veth1_macvtap: entered promiscuous mode [ 81.815780][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.826412][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.836312][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.846762][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.856637][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.861600][ T7429] loop8: detected capacity change from 0 to 512 [ 81.867128][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.883332][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.886217][ T7429] EXT4-fs (loop8): orphan cleanup on readonly fs [ 81.893774][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.895322][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.905571][ T7429] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1547: bg 0: block 248: padding at end of block bitmap is not set [ 81.911468][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.931839][ T7429] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.1547: Failed to acquire dquot type 1 [ 81.942143][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.942160][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.942174][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.942189][ T7266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.956674][ T7429] EXT4-fs (loop8): 1 truncate cleaned up [ 81.963354][ T7266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.964473][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.017859][ T7429] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.027116][ T7266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.039037][ T7266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047874][ T7266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.056797][ T7266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068626][ T7127] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.196405][ T7445] vhci_hcd: invalid port number 96 [ 82.201656][ T7445] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 82.341129][ T7461] loop6: detected capacity change from 0 to 1024 [ 82.358679][ T7461] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 82.358792][ T7457] vhci_hcd: invalid port number 96 [ 82.369896][ T7461] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.373524][ T7457] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 82.385990][ T7461] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #32: comm syz.6.1562: iget: special inode unallocated [ 82.406750][ T7461] EXT4-fs (loop6): no journal found [ 82.411999][ T7461] EXT4-fs (loop6): can't get journal size [ 82.439672][ T7461] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.1562: iget: special inode unallocated [ 82.459787][ T7461] EXT4-fs (loop6): get root inode failed [ 82.465632][ T7461] EXT4-fs (loop6): mount failed [ 82.604363][ T7482] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 82.684144][ T7486] tipc: Failed to remove unknown binding: 66,3,3/0:966056110/966056111 [ 82.855448][ T7500] random: crng reseeded on system resumption [ 82.912540][ T7508] loop6: detected capacity change from 0 to 128 [ 83.165842][ T7551] loop8: detected capacity change from 0 to 128 [ 83.212349][ T7551] bio_check_eod: 10 callbacks suppressed [ 83.212372][ T7551] kfree: attempt to access beyond end of device [ 83.212372][ T7551] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 83.220381][ T7557] bridge0: port 3(vlan2) entered blocking state [ 83.237632][ T7557] bridge0: port 3(vlan2) entered disabled state [ 83.245858][ T7557] vlan2: entered allmulticast mode [ 83.251045][ T7557] bridge0: entered allmulticast mode [ 83.258240][ T7557] vlan2: left allmulticast mode [ 83.258367][ T793] kworker/u8:5: attempt to access beyond end of device [ 83.258367][ T793] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 83.263196][ T7557] bridge0: left allmulticast mode [ 83.313804][ T7564] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.407090][ T7564] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.458121][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1616'. [ 83.471095][ T7564] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.482756][ T7578] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1616'. [ 83.492072][ T7578] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1616'. [ 83.516792][ T7564] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.566181][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1617'. [ 83.611813][ T7564] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.623205][ T7564] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.636116][ T7564] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.647472][ T7564] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.966335][ T7629] loop8: detected capacity change from 0 to 2048 [ 83.985133][ T7629] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 83.994145][ T7629] System zones: 0-7 [ 84.010710][ T7629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.034807][ T7629] EXT4-fs (loop8): Online defrag not supported with bigalloc [ 84.054803][ T7127] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.098799][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 84.113740][ T7648] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 84.151159][ T7652] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 84.215575][ T7660] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 84.239005][ T7658] hub 2-0:1.0: USB hub found [ 84.245364][ T7658] hub 2-0:1.0: 8 ports detected [ 84.322765][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1657'. [ 84.384707][ T7685] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 84.396865][ T7687] loop3: detected capacity change from 0 to 512 [ 84.416841][ T7687] EXT4-fs (loop3): 1 orphan inode deleted [ 84.423197][ T7687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.436732][ T158] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 84.449563][ T7687] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.452092][ T7693] ip6gretap2: entered allmulticast mode [ 84.481288][ T7266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.580417][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 84.622535][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 84.958550][ T7748] loop6: detected capacity change from 0 to 512 [ 84.965850][ T7748] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.982345][ T7748] EXT4-fs (loop6): 1 truncate cleaned up [ 85.004707][ T7748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.071651][ T7758] netlink: 'syz.7.1695': attribute type 4 has an invalid length. [ 85.146622][ T6374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.199537][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 85.199555][ T29] audit: type=1400 audit(1746210221.846:1754): avc: denied { write } for pid=7763 comm="syz.7.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.225396][ T29] audit: type=1400 audit(1746210221.846:1755): avc: denied { read } for pid=7763 comm="syz.7.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.276821][ T29] audit: type=1326 audit(1746210221.916:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.300546][ T29] audit: type=1326 audit(1746210221.916:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.324279][ T29] audit: type=1326 audit(1746210221.916:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.348136][ T29] audit: type=1326 audit(1746210221.916:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.371642][ T29] audit: type=1326 audit(1746210221.916:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.395162][ T29] audit: type=1326 audit(1746210221.916:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.418608][ T29] audit: type=1326 audit(1746210221.916:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.442108][ T29] audit: type=1326 audit(1746210221.916:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a34be969 code=0x7ffc0000 [ 85.635976][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1711'. [ 85.810314][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1718'. [ 86.636648][ T7891] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.758261][ T7903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7903 comm=syz.7.1763 [ 86.770958][ T7903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7903 comm=syz.7.1763 [ 86.909558][ T7915] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 87.291012][ T7954] bond1: entered promiscuous mode [ 87.296231][ T7954] bond1: entered allmulticast mode [ 87.332178][ T7954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.347567][ T7954] bond1 (unregistering): Released all slaves [ 87.393727][ T7950] ================================================================== [ 87.401956][ T7950] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 87.410673][ T7950] [ 87.413014][ T7950] write to 0xffff88811e9070a8 of 8 bytes by task 7943 on cpu 1: [ 87.420768][ T7950] shmem_file_splice_read+0x444/0x5d0 [ 87.426179][ T7950] splice_direct_to_actor+0x26c/0x680 [ 87.431593][ T7950] do_splice_direct+0xda/0x150 [ 87.436467][ T7950] do_sendfile+0x380/0x640 [ 87.440913][ T7950] __x64_sys_sendfile64+0x105/0x150 [ 87.446141][ T7950] x64_sys_call+0xb39/0x2fb0 [ 87.450757][ T7950] do_syscall_64+0xd0/0x1a0 [ 87.455276][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.461190][ T7950] [ 87.463524][ T7950] write to 0xffff88811e9070a8 of 8 bytes by task 7950 on cpu 0: [ 87.471169][ T7950] shmem_file_splice_read+0x444/0x5d0 [ 87.476572][ T7950] splice_direct_to_actor+0x26c/0x680 [ 87.481971][ T7950] do_splice_direct+0xda/0x150 [ 87.486763][ T7950] do_sendfile+0x380/0x640 [ 87.491196][ T7950] __x64_sys_sendfile64+0x105/0x150 [ 87.496418][ T7950] x64_sys_call+0xb39/0x2fb0 [ 87.501030][ T7950] do_syscall_64+0xd0/0x1a0 [ 87.505562][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.511483][ T7950] [ 87.513817][ T7950] value changed: 0x0000000000002c2a -> 0x0000000000002c2c [ 87.520941][ T7950] [ 87.523268][ T7950] Reported by Kernel Concurrency Sanitizer on: [ 87.529482][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.0.1782 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 87.541914][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.551986][ T7950] ==================================================================