last executing test programs: 17.993035577s ago: executing program 3 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 17.951754138s ago: executing program 3 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 17.885453798s ago: executing program 3 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x26, 0x200000b, r3}}], 0x20, 0x6044}, 0x6) 17.729620181s ago: executing program 3 (id=165): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x105042, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r2, 0x8, 0x4000, 0x4000) 17.627782202s ago: executing program 3 (id=169): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @dev}, 0x56) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1d, 0x2, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 15.402851836s ago: executing program 3 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.384050456s ago: executing program 32 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.97580067s ago: executing program 1 (id=548): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) 1.9594832s ago: executing program 1 (id=549): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.93484775s ago: executing program 1 (id=550): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x200000000000000, 0x8}) 1.867119831s ago: executing program 5 (id=551): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x9a0f6fe6c5672c07, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) inotify_init1(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.776856783s ago: executing program 5 (id=554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6"], 0x280) 1.774041813s ago: executing program 1 (id=555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 1.604465375s ago: executing program 5 (id=559): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@delalloc}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nogrpid}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0xf15}}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfd12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.603900995s ago: executing program 2 (id=560): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.542055186s ago: executing program 1 (id=562): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000202020", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) 1.541456086s ago: executing program 5 (id=563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011300000000850005002a0000797a5f74756e00"/31], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000002200)=""/4114, 0x1012}], 0x2, 0x800, 0x4000000) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYRES32=r4]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b70800c6937cf308ecd8e5ff00000000bfa1000000000000ee0f0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r2, @ANYRES32=0x0], &(0x7f0000000580)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[r3, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) tkill(r6, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 1.451588157s ago: executing program 2 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00\x00\x00\x00', @ANYBLOB="e3"], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f00000001c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x7d}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x5319, 0x0) socket(0xa, 0x3, 0x3a) r5 = socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x2000}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) socket$netlink(0x10, 0x3, 0x14) 1.207130761s ago: executing program 0 (id=572): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x5e9, &(0x7f0000000600)="$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") r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 884.394916ms ago: executing program 2 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 811.937737ms ago: executing program 0 (id=587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00\x00\x00\x00', @ANYBLOB="e3"], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f00000001c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x7d}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x5319, 0x0) socket(0xa, 0x3, 0x3a) r5 = socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) socket$netlink(0x10, 0x3, 0x14) 763.703838ms ago: executing program 2 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 700.970869ms ago: executing program 2 (id=579): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 665.92441ms ago: executing program 4 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x0, 0x1}, {0x5, 0x6, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 629.6573ms ago: executing program 5 (id=583): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2004, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000201b80000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x52b242d) 615.56736ms ago: executing program 1 (id=584): r0 = open(0x0, 0x14927e, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) 557.716501ms ago: executing program 4 (id=585): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) 547.000011ms ago: executing program 5 (id=586): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) creat(&(0x7f0000000300)='./file0\x00', 0xe5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 467.433942ms ago: executing program 4 (id=588): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000040)='./file0\x00') name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1400) 389.461074ms ago: executing program 4 (id=589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r0) 388.312554ms ago: executing program 0 (id=590): r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r0) 225.616126ms ago: executing program 4 (id=591): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_setup(0x5bd1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289, 0x0, r0}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 198.317357ms ago: executing program 4 (id=592): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x200000, &(0x7f0000000d00), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fallocate(r0, 0x0, 0x81, 0x80001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 184.456637ms ago: executing program 0 (id=593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000840)=0x24b5) shutdown(r0, 0x0) 39.311599ms ago: executing program 0 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) 38.924089ms ago: executing program 2 (id=595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011300000000850005002a0000797a5f74756e00"/31], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000002200)=""/4114, 0x1012}], 0x2, 0x800, 0x4000000) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYRES32=r4]) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b70800c6937cf308ecd8e5ff00000000bfa1000000000000ee0f0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r2, @ANYRES32=0x0], &(0x7f0000000580)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[r5, r3, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r8, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) tkill(r7, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 0s ago: executing program 0 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="184883b65e", 0x5}, {0x0}], 0x2}}], 0x2, 0x4040805) shutdown(r1, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 25.667596][ T29] audit: type=1400 audit(1746755202.762:65): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.668693][ T3302] cgroup: Unknown subsys name 'net' [ 25.690321][ T29] audit: type=1400 audit(1746755202.762:66): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.717666][ T29] audit: type=1400 audit(1746755202.792:67): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.878566][ T3302] cgroup: Unknown subsys name 'cpuset' [ 25.884683][ T3302] cgroup: Unknown subsys name 'rlimit' [ 26.015511][ T29] audit: type=1400 audit(1746755203.112:68): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.038833][ T29] audit: type=1400 audit(1746755203.112:69): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.059381][ T29] audit: type=1400 audit(1746755203.112:70): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.079727][ T29] audit: type=1400 audit(1746755203.112:71): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.086646][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.099968][ T29] audit: type=1400 audit(1746755203.122:72): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.133343][ T29] audit: type=1400 audit(1746755203.122:73): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.156617][ T29] audit: type=1400 audit(1746755203.212:74): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.183076][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.268785][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.341206][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.362531][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 27.378147][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.416495][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.423733][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.430981][ T3321] bridge_slave_0: entered allmulticast mode [ 27.437303][ T3321] bridge_slave_0: entered promiscuous mode [ 27.446365][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.463700][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.470810][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.478149][ T3321] bridge_slave_1: entered allmulticast mode [ 27.484413][ T3321] bridge_slave_1: entered promiscuous mode [ 27.524999][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.532120][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.539370][ T3313] bridge_slave_0: entered allmulticast mode [ 27.545594][ T3313] bridge_slave_0: entered promiscuous mode [ 27.553052][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.562145][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.569256][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.576328][ T3313] bridge_slave_1: entered allmulticast mode [ 27.582785][ T3313] bridge_slave_1: entered promiscuous mode [ 27.610806][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.639557][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.646628][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.653790][ T3323] bridge_slave_0: entered allmulticast mode [ 27.660141][ T3323] bridge_slave_0: entered promiscuous mode [ 27.674090][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.691273][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.698406][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.705488][ T3323] bridge_slave_1: entered allmulticast mode [ 27.711852][ T3323] bridge_slave_1: entered promiscuous mode [ 27.718771][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.734459][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.741561][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.748663][ T3312] bridge_slave_0: entered allmulticast mode [ 27.754961][ T3312] bridge_slave_0: entered promiscuous mode [ 27.761857][ T3321] team0: Port device team_slave_0 added [ 27.767652][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.774714][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.781855][ T3312] bridge_slave_1: entered allmulticast mode [ 27.788132][ T3312] bridge_slave_1: entered promiscuous mode [ 27.807625][ T3321] team0: Port device team_slave_1 added [ 27.826404][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.836105][ T3313] team0: Port device team_slave_0 added [ 27.855822][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.865651][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.875462][ T3313] team0: Port device team_slave_1 added [ 27.885480][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.892573][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.899676][ T3320] bridge_slave_0: entered allmulticast mode [ 27.906139][ T3320] bridge_slave_0: entered promiscuous mode [ 27.912729][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.919792][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.945689][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.957044][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.964004][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.989916][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.001501][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.023221][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.030347][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.038152][ T3320] bridge_slave_1: entered allmulticast mode [ 28.044523][ T3320] bridge_slave_1: entered promiscuous mode [ 28.067652][ T3323] team0: Port device team_slave_0 added [ 28.073540][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.080650][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.106537][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.118126][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.125084][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.150991][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.171375][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.181029][ T3312] team0: Port device team_slave_0 added [ 28.187362][ T3323] team0: Port device team_slave_1 added [ 28.203729][ T3312] team0: Port device team_slave_1 added [ 28.210326][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.228858][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.235803][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.261791][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.290292][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.297243][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.323174][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.340080][ T3313] hsr_slave_0: entered promiscuous mode [ 28.346091][ T3313] hsr_slave_1: entered promiscuous mode [ 28.354065][ T3321] hsr_slave_0: entered promiscuous mode [ 28.360265][ T3321] hsr_slave_1: entered promiscuous mode [ 28.366055][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.373664][ T3321] Cannot create hsr debugfs directory [ 28.384074][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.391083][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.417004][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.438469][ T3320] team0: Port device team_slave_0 added [ 28.444421][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.451398][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.477299][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.494771][ T3320] team0: Port device team_slave_1 added [ 28.532419][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.539388][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.565355][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.578023][ T3323] hsr_slave_0: entered promiscuous mode [ 28.583975][ T3323] hsr_slave_1: entered promiscuous mode [ 28.589850][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.597385][ T3323] Cannot create hsr debugfs directory [ 28.610509][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.617460][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.643488][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.692206][ T3312] hsr_slave_0: entered promiscuous mode [ 28.698357][ T3312] hsr_slave_1: entered promiscuous mode [ 28.704221][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.711867][ T3312] Cannot create hsr debugfs directory [ 28.741494][ T3320] hsr_slave_0: entered promiscuous mode [ 28.747466][ T3320] hsr_slave_1: entered promiscuous mode [ 28.753426][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.761021][ T3320] Cannot create hsr debugfs directory [ 28.881744][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.896197][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.904558][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.919525][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.942498][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.950741][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.959526][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.971412][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.001086][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.012032][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.024842][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.033319][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.052881][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.069245][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.077878][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.087279][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.104998][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.133852][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.142644][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.152016][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.162459][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.173444][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.188590][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.195633][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.205148][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.212251][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.265279][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.279948][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.291313][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.300105][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.308728][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.328524][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.337096][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.344249][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.355988][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.363030][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.373067][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.400763][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.407873][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.419947][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.427100][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.444394][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.451448][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.467649][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.478103][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.495743][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.506461][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.513548][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.539423][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.554585][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.566314][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.573383][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.594187][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.601272][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.629793][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.659260][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.722839][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.762058][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.804682][ T3321] veth0_vlan: entered promiscuous mode [ 29.823491][ T3321] veth1_vlan: entered promiscuous mode [ 29.829919][ T3313] veth0_vlan: entered promiscuous mode [ 29.855167][ T3312] veth0_vlan: entered promiscuous mode [ 29.863016][ T3313] veth1_vlan: entered promiscuous mode [ 29.880539][ T3312] veth1_vlan: entered promiscuous mode [ 29.895572][ T3313] veth0_macvtap: entered promiscuous mode [ 29.902565][ T3321] veth0_macvtap: entered promiscuous mode [ 29.913338][ T3321] veth1_macvtap: entered promiscuous mode [ 29.927766][ T3320] veth0_vlan: entered promiscuous mode [ 29.934011][ T3313] veth1_macvtap: entered promiscuous mode [ 29.943047][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.954585][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.965112][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.976956][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.990967][ T3323] veth0_vlan: entered promiscuous mode [ 29.998495][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.010432][ T3320] veth1_vlan: entered promiscuous mode [ 30.016981][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.027438][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.037773][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.046869][ T3312] veth0_macvtap: entered promiscuous mode [ 30.054104][ T3312] veth1_macvtap: entered promiscuous mode [ 30.060550][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.069373][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.078093][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.086846][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.097268][ T3323] veth1_vlan: entered promiscuous mode [ 30.105131][ T3321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.114022][ T3321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.122789][ T3321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.131620][ T3321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.151661][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.162161][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.172041][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.182574][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.193199][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.210693][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.221208][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.231046][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.241526][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.252405][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.261449][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.270194][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.278947][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.287767][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.303342][ T3323] veth0_macvtap: entered promiscuous mode [ 30.314758][ T3320] veth0_macvtap: entered promiscuous mode [ 30.330521][ T3323] veth1_macvtap: entered promiscuous mode [ 30.337620][ T3320] veth1_macvtap: entered promiscuous mode [ 30.346481][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.366596][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.377126][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.387028][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.397464][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.407332][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.417791][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.432657][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.443618][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.454129][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.464035][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.474496][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.484317][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.494882][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.504720][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.515186][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.526084][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.550593][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.561085][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.570998][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.581433][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.591259][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.601814][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.613069][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.624110][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.634670][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.644572][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.655036][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.664859][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.667874][ T3459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6'. [ 30.675327][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.685799][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 30.685812][ T29] audit: type=1400 audit(1746755207.762:102): avc: denied { create } for pid=3456 comm="syz.1.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.693730][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.699825][ T29] audit: type=1400 audit(1746755207.762:103): avc: denied { write } for pid=3456 comm="syz.1.2" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.720125][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.730543][ T29] audit: type=1400 audit(1746755207.762:104): avc: denied { open } for pid=3456 comm="syz.1.2" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.754963][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.762234][ T29] audit: type=1400 audit(1746755207.762:105): avc: denied { ioctl } for pid=3456 comm="syz.1.2" path="/0/file0" dev="tmpfs" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.788222][ T3323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.791490][ T29] audit: type=1400 audit(1746755207.762:106): avc: denied { create } for pid=3458 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.815030][ T3323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.823783][ T29] audit: type=1400 audit(1746755207.762:107): avc: denied { write } for pid=3458 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.843991][ T3323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.844057][ T3323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.908630][ T3320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.917338][ T3320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.917955][ T29] audit: type=1400 audit(1746755208.002:108): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.926069][ T3320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.957120][ T3320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.960094][ T3461] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 30.985676][ T3461] batman_adv: batadv0: Adding interface: team0 [ 30.991952][ T3461] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.017178][ T3461] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 31.028761][ T3463] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 31.036333][ T3463] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7'. [ 31.050952][ T3463] team0: entered promiscuous mode [ 31.055989][ T3463] team_slave_0: entered promiscuous mode [ 31.061765][ T3463] team_slave_1: entered promiscuous mode [ 31.069765][ T3463] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.076763][ T3463] batman_adv: batadv0: Interface activated: team0 [ 31.083228][ T3463] batman_adv: batadv0: Interface deactivated: team0 [ 31.089839][ T3463] batman_adv: batadv0: Removing interface: team0 [ 31.097505][ T29] audit: type=1326 audit(1746755208.172:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276276e969 code=0x7ffc0000 [ 31.120698][ T29] audit: type=1326 audit(1746755208.172:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f276276e969 code=0x7ffc0000 [ 31.143657][ T29] audit: type=1326 audit(1746755208.182:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276276e969 code=0x7ffc0000 [ 31.171820][ T3463] bridge0: port 3(team0) entered blocking state [ 31.178119][ T3463] bridge0: port 3(team0) entered disabled state [ 31.184703][ T3463] team0: entered allmulticast mode [ 31.189864][ T3463] team_slave_0: entered allmulticast mode [ 31.195599][ T3463] team_slave_1: entered allmulticast mode [ 31.202465][ T3463] bridge0: port 3(team0) entered blocking state [ 31.208763][ T3463] bridge0: port 3(team0) entered forwarding state [ 31.224390][ T3463] syz.1.7 (3463) used greatest stack depth: 11048 bytes left [ 31.493020][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 31.547730][ T3512] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.20'. [ 31.621240][ T3508] ipvlan2: entered promiscuous mode [ 31.626527][ T3508] ipvlan2: entered allmulticast mode [ 31.632004][ T3508] hsr0: entered allmulticast mode [ 31.637108][ T3508] hsr_slave_0: entered allmulticast mode [ 31.642820][ T3508] hsr_slave_1: entered allmulticast mode [ 31.844935][ T3528] bridge0: port 3(vlan2) entered blocking state [ 31.851368][ T3528] bridge0: port 3(vlan2) entered disabled state [ 31.863580][ T3528] vlan2: entered allmulticast mode [ 31.868752][ T3528] bridge0: entered allmulticast mode [ 31.878085][ T3528] vlan2: left allmulticast mode [ 31.883045][ T3528] bridge0: left allmulticast mode [ 31.893705][ T3536] loop2: detected capacity change from 0 to 512 [ 31.908807][ T3536] EXT4-fs: Ignoring removed bh option [ 31.923454][ T3536] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 31.948032][ T3540] loop4: detected capacity change from 0 to 128 [ 31.960909][ T3540] ======================================================= [ 31.960909][ T3540] WARNING: The mand mount option has been deprecated and [ 31.960909][ T3540] and is ignored by this kernel. Remove the mand [ 31.960909][ T3540] option from the mount to silence this warning. [ 31.960909][ T3540] ======================================================= [ 32.013794][ T3536] EXT4-fs (loop2): 1 truncate cleaned up [ 32.024492][ T3540] syz.4.30: attempt to access beyond end of device [ 32.024492][ T3540] loop4: rw=2049, sector=201, nr_sectors = 1 limit=128 [ 32.030071][ T3550] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.051892][ T3536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.150492][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.154112][ T3556] loop4: detected capacity change from 0 to 1024 [ 32.185026][ T3556] EXT4-fs: Ignoring removed oldalloc option [ 32.198456][ T3560] vlan2: entered allmulticast mode [ 32.203659][ T3560] bond0: entered allmulticast mode [ 32.208877][ T3560] bond_slave_0: entered allmulticast mode [ 32.214763][ T3560] bond_slave_1: entered allmulticast mode [ 32.224950][ T3556] EXT4-fs: Ignoring removed orlov option [ 32.238134][ T3556] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 32.267355][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.316092][ T3556] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 32.348191][ T3556] EXT4-fs (loop4): Remounting filesystem read-only [ 32.365945][ T3566] IPv4: Oversized IP packet from 127.202.26.0 [ 32.372394][ T3556] syz.4.36 (3556) used greatest stack depth: 11008 bytes left [ 32.381857][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.440141][ T3570] netlink: 'syz.4.40': attribute type 13 has an invalid length. [ 32.463301][ T3574] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 32.469851][ T3574] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 32.477327][ T3574] vhci_hcd vhci_hcd.0: Device attached [ 32.489114][ T3573] loop1: detected capacity change from 0 to 2048 [ 32.495948][ T3578] loop2: detected capacity change from 0 to 2048 [ 32.502985][ T3574] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 32.509514][ T3574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 32.517034][ T3574] vhci_hcd vhci_hcd.0: Device attached [ 32.524128][ T3573] loop1: p1 < > p4 [ 32.526490][ T3574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 32.529575][ T3573] loop1: p4 size 8388608 extends beyond EOD, truncated [ 32.539929][ T3303] Alternate GPT is invalid, using primary GPT. [ 32.549353][ T3303] loop2: p1 p2 p3 [ 32.570427][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.577753][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.585579][ T3574] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 32.592117][ T3574] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 32.595323][ T3578] Alternate GPT is invalid, using primary GPT. [ 32.599558][ T3574] vhci_hcd vhci_hcd.0: Device attached [ 32.605861][ T3578] loop2: p1 p2 p3 [ 32.624747][ T3574] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 32.631364][ T3574] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 32.632821][ T3004] loop1: p1 < > p4 [ 32.638964][ T3574] vhci_hcd vhci_hcd.0: Device attached [ 32.650588][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 32.663265][ T3574] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 32.669951][ T3574] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 32.677656][ T3574] vhci_hcd vhci_hcd.0: Device attached [ 32.688277][ T3451] vhci_hcd: vhci_device speed not set [ 32.698286][ T3574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 32.707218][ T3574] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 32.713830][ T3574] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 32.721969][ T3574] vhci_hcd vhci_hcd.0: Device attached [ 32.722588][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.733743][ T3589] vhci_hcd: connection closed [ 32.735126][ T3585] vhci_hcd: connection closed [ 32.742964][ T31] vhci_hcd: stop threads [ 32.743938][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.747652][ T31] vhci_hcd: release socket [ 32.753446][ T3583] vhci_hcd: connection closed [ 32.759421][ T31] vhci_hcd: disconnect device [ 32.763914][ T3579] vhci_hcd: connection closed [ 32.768719][ T3451] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 32.773993][ T3575] vhci_hcd: connection closed [ 32.778365][ T3581] vhci_hcd: connection closed [ 32.790236][ T3576] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 32.817675][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.827638][ T31] vhci_hcd: stop threads [ 32.827676][ T3588] ALSA: seq fatal error: cannot create timer (-19) [ 32.831919][ T31] vhci_hcd: release socket [ 32.831932][ T31] vhci_hcd: disconnect device [ 32.849558][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 32.853025][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.874005][ T31] vhci_hcd: stop threads [ 32.878274][ T31] vhci_hcd: release socket [ 32.882685][ T31] vhci_hcd: disconnect device [ 32.899134][ T3593] udevd[3593]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.912857][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 32.923541][ T31] vhci_hcd: stop threads [ 32.927239][ T3593] udevd[3593]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 32.927776][ T31] vhci_hcd: release socket [ 32.940026][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.941910][ T31] vhci_hcd: disconnect device [ 32.962108][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.984100][ T3570] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.993218][ T3570] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.002198][ T3570] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.007871][ T31] vhci_hcd: stop threads [ 33.011076][ T3570] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.024317][ T31] vhci_hcd: release socket [ 33.028807][ T31] vhci_hcd: disconnect device [ 33.043915][ T31] vhci_hcd: stop threads [ 33.048279][ T31] vhci_hcd: release socket [ 33.052701][ T31] vhci_hcd: disconnect device [ 33.071863][ T3597] Zero length message leads to an empty skb [ 33.153768][ T3570] syz.4.40 (3570) used greatest stack depth: 10712 bytes left [ 33.168410][ T3613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 33.188253][ C1] hrtimer: interrupt took 48847 ns [ 33.230339][ T3619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.57'. [ 33.256163][ T3615] loop1: detected capacity change from 0 to 512 [ 33.279055][ T3615] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.295526][ T3615] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.327084][ T3615] EXT4-fs (loop1): 1 truncate cleaned up [ 33.342934][ T3615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.439077][ T3635] loop3: detected capacity change from 0 to 256 [ 33.532840][ T3644] loop4: detected capacity change from 0 to 1024 [ 33.545999][ T3644] EXT4-fs: Ignoring removed nobh option [ 33.551632][ T3644] EXT4-fs: Ignoring removed bh option [ 33.568439][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.590933][ T3644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.669168][ T3651] futex_wake_op: syz.3.70 tries to shift op by 144; fix this program [ 33.932715][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.991037][ T3667] loop4: detected capacity change from 0 to 512 [ 34.023985][ T3667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.026985][ T3657] mmap: syz.3.72 (3657) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.055197][ T3667] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.120177][ T3677] loop1: detected capacity change from 0 to 512 [ 34.180151][ T3677] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 34.197082][ T3677] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 34.207717][ T3677] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 34.218163][ T3677] EXT4-fs (loop1): 1 truncate cleaned up [ 34.224264][ T3677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.246796][ T3677] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 34.311413][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.329664][ T3689] loop3: detected capacity change from 0 to 2048 [ 34.332176][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.361229][ T3689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.600713][ T3689] syz.3.86 (3689) used greatest stack depth: 10232 bytes left [ 34.640801][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.670562][ T3713] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 34.695008][ T3713] loop4: detected capacity change from 0 to 512 [ 34.711878][ T3713] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.723961][ T3713] EXT4-fs (loop4): 1 truncate cleaned up [ 34.730114][ T3713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.755279][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 34.764038][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 34.773490][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 34.791452][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 34.898650][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.952318][ T3728] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 34.963086][ T3728] loop2: detected capacity change from 0 to 512 [ 34.973763][ T3728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.984868][ T3728] EXT4-fs (loop2): 1 truncate cleaned up [ 34.991017][ T3728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.147734][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.642866][ T3749] loop2: detected capacity change from 0 to 2048 [ 35.673907][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.797612][ T3755] loop4: detected capacity change from 0 to 2048 [ 35.811222][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 35.811235][ T29] audit: type=1326 audit(1746755212.912:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd688aee969 code=0x7ffc0000 [ 35.852634][ T29] audit: type=1326 audit(1746755212.912:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fd688aee969 code=0x7ffc0000 [ 35.854890][ T3755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.875926][ T29] audit: type=1326 audit(1746755212.912:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd688aee969 code=0x7ffc0000 [ 35.903612][ T3759] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 35.923446][ T3759] loop3: detected capacity change from 0 to 512 [ 35.943668][ T3759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.951153][ T3763] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 35.961866][ T3755] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.983084][ T3763] netlink: 'syz.1.110': attribute type 4 has an invalid length. [ 35.991293][ T3759] EXT4-fs (loop3): 1 truncate cleaned up [ 35.997377][ T3759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.009754][ T3755] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 36.022252][ T3755] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.022252][ T3755] [ 36.031939][ T3755] EXT4-fs (loop4): Total free blocks count 0 [ 36.037255][ T3765] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.038103][ T3755] EXT4-fs (loop4): Free/Dirty block details [ 36.050251][ T3765] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.050251][ T3765] [ 36.056117][ T3755] EXT4-fs (loop4): free_blocks=2415919104 [ 36.065819][ T3765] EXT4-fs (loop4): Total free blocks count 0 [ 36.071536][ T3755] EXT4-fs (loop4): dirty_blocks=32 [ 36.074095][ T29] audit: type=1400 audit(1746755213.132:253): avc: denied { remove_name } for pid=3754 comm="syz.4.107" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.078782][ T3759] __nla_validate_parse: 14 callbacks suppressed [ 36.078796][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.082699][ T29] audit: type=1400 audit(1746755213.132:254): avc: denied { rename } for pid=3754 comm="syz.4.107" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.105343][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.111392][ T29] audit: type=1400 audit(1746755213.132:255): avc: denied { unlink } for pid=3754 comm="syz.4.107" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.128332][ T3755] syz.4.107 (3755) used greatest stack depth: 10184 bytes left [ 36.165028][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.224837][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.233709][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.245355][ T3771] loop4: detected capacity change from 0 to 512 [ 36.256661][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.276985][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.282915][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.294788][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.303836][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.313818][ T3771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.330898][ T3771] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.345410][ T3778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 36.350589][ T3771] EXT4-fs (loop4): shut down requested (2) [ 36.351924][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 36.365236][ T3778] vhci_hcd vhci_hcd.0: Device attached [ 36.368006][ T29] audit: type=1400 audit(1746755213.442:256): avc: denied { append } for pid=3770 comm="syz.4.112" path="/26/bus/pids.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.393757][ T29] audit: type=1400 audit(1746755213.442:257): avc: denied { ioctl } for pid=3770 comm="syz.4.112" path="/26/bus/file1" dev="loop4" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.394909][ T3778] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 36.417818][ T29] audit: type=1400 audit(1746755213.442:258): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.424279][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 36.424374][ T3778] vhci_hcd vhci_hcd.0: Device attached [ 36.446257][ T29] audit: type=1400 audit(1746755213.442:259): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.454473][ T3783] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.490090][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.518895][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.531769][ T3778] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(7) [ 36.538295][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 36.545812][ T3778] vhci_hcd vhci_hcd.0: Device attached [ 36.558069][ T3389] vhci_hcd: vhci_device speed not set [ 36.563940][ T3778] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 36.570652][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 36.578644][ T3778] vhci_hcd vhci_hcd.0: Device attached [ 36.586993][ T3790] netlink: 96 bytes leftover after parsing attributes in process `syz.3.116'. [ 36.592515][ T3778] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.608024][ T3778] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 36.614652][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 36.619590][ T3389] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 36.622238][ T3778] vhci_hcd vhci_hcd.0: Device attached [ 36.644777][ T3799] tipc: Started in network mode [ 36.649860][ T3799] tipc: Node identity ac14140f, cluster identity 4711 [ 36.651451][ T3778] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 36.661852][ T3799] tipc: New replicast peer: 255.255.255.255 [ 36.663178][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 36.669204][ T3799] tipc: Enabled bearer , priority 10 [ 36.676687][ T3778] vhci_hcd vhci_hcd.0: Device attached [ 36.694108][ T3801] loop3: detected capacity change from 0 to 128 [ 36.714299][ T3801] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 36.722148][ T3801] FAT-fs (loop3): Filesystem has been set read-only [ 36.727328][ T3781] vhci_hcd: connection closed [ 36.728974][ T3794] vhci_hcd: connection closed [ 36.729042][ T3786] vhci_hcd: connection closed [ 36.738758][ T3788] vhci_hcd: connection closed [ 36.739202][ T3797] vhci_hcd: connection closed [ 36.750818][ T12] vhci_hcd: stop threads [ 36.752531][ T3801] syz.3.119: attempt to access beyond end of device [ 36.752531][ T3801] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 36.755628][ T12] vhci_hcd: release socket [ 36.755643][ T12] vhci_hcd: disconnect device [ 36.759902][ T3801] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 36.790572][ T3801] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 36.791830][ T3779] vhci_hcd: connection reset by peer [ 36.806497][ T12] vhci_hcd: stop threads [ 36.810782][ T12] vhci_hcd: release socket [ 36.815204][ T12] vhci_hcd: disconnect device [ 36.821284][ T12] vhci_hcd: stop threads [ 36.825526][ T12] vhci_hcd: release socket [ 36.830056][ T12] vhci_hcd: disconnect device [ 36.835395][ T12] vhci_hcd: stop threads [ 36.839693][ T12] vhci_hcd: release socket [ 36.844122][ T12] vhci_hcd: disconnect device [ 36.849185][ T12] vhci_hcd: stop threads [ 36.853564][ T12] vhci_hcd: release socket [ 36.858144][ T12] vhci_hcd: disconnect device [ 36.863415][ T12] vhci_hcd: stop threads [ 36.867850][ T12] vhci_hcd: release socket [ 36.872427][ T12] vhci_hcd: disconnect device [ 37.017630][ T3813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.100380][ T3813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.171481][ T3816] netlink: 'syz.4.124': attribute type 3 has an invalid length. [ 37.221194][ T3813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.282886][ T3813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.352383][ T3813] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.367331][ T3813] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.385598][ T3813] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.435132][ T3813] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.448621][ T3822] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 37.469102][ T3822] batman_adv: batadv0: Adding interface: team0 [ 37.475288][ T3822] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.500518][ T3822] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 37.553444][ T3822] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 37.570309][ T3822] team0: entered promiscuous mode [ 37.575376][ T3822] team_slave_0: entered promiscuous mode [ 37.581274][ T3822] team_slave_1: entered promiscuous mode [ 37.589862][ T3822] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.596902][ T3822] batman_adv: batadv0: Interface activated: team0 [ 37.603408][ T3822] batman_adv: batadv0: Interface deactivated: team0 [ 37.610068][ T3822] batman_adv: batadv0: Removing interface: team0 [ 37.619643][ T3822] bridge0: port 3(team0) entered blocking state [ 37.625924][ T3822] bridge0: port 3(team0) entered disabled state [ 37.632598][ T3822] team0: entered allmulticast mode [ 37.637785][ T3822] team_slave_0: entered allmulticast mode [ 37.643602][ T3822] team_slave_1: entered allmulticast mode [ 37.652209][ T3822] bridge0: port 3(team0) entered blocking state [ 37.658564][ T3822] bridge0: port 3(team0) entered forwarding state [ 37.689487][ T3837] loop2: detected capacity change from 0 to 128 [ 37.707609][ T3837] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.715484][ T3837] FAT-fs (loop2): Filesystem has been set read-only [ 37.723625][ T3837] syz.2.132: attempt to access beyond end of device [ 37.723625][ T3837] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 37.737358][ T3837] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.745256][ T3837] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.777990][ T10] tipc: Node number set to 2886997007 [ 37.787373][ T3840] loop2: detected capacity change from 0 to 512 [ 37.801423][ T3840] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.814352][ T3840] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.133: bad orphan inode 13 [ 37.824501][ T3840] ext4_test_bit(bit=12, block=18) = 1 [ 37.830132][ T3840] is_bad_inode(inode)=0 [ 37.834283][ T3840] NEXT_ORPHAN(inode)=2130706432 [ 37.839156][ T3840] max_ino=32 [ 37.842349][ T3840] i_nlink=1 [ 37.857711][ T3451] usb 7-1: enqueue for inactive port 0 [ 37.863940][ T3451] usb 7-1: enqueue for inactive port 0 [ 37.871945][ T3840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.889702][ T3840] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 37.892984][ T3844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 37.911510][ T3844] loop3: detected capacity change from 0 to 512 [ 37.928005][ T3844] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.937969][ T3451] vhci_hcd: vhci_device speed not set [ 37.943144][ T3840] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.133: bg 0: block 248: padding at end of block bitmap is not set [ 37.958862][ T3844] EXT4-fs (loop3): 1 truncate cleaned up [ 37.959306][ T3840] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.133: Failed to acquire dquot type 1 [ 37.964892][ T3844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.988075][ T3840] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.009766][ T3840] syz.2.133 (3840) used greatest stack depth: 9480 bytes left [ 38.020972][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.156746][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.231942][ T3876] loop3: detected capacity change from 0 to 164 [ 38.242671][ T3878] process 'syz.2.149' launched './file1' with NULL argv: empty string added [ 38.257219][ T3876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.268520][ T3876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.276837][ T3876] Symlink component flag not implemented [ 38.282615][ T3876] Symlink component flag not implemented [ 38.290441][ T3876] Symlink component flag not implemented (7) [ 38.296471][ T3876] Symlink component flag not implemented (116) [ 38.303722][ T3876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.434374][ T3897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.470356][ T3897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.540938][ T3897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.590505][ T3897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.644852][ T3897] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.656120][ T3897] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.667398][ T3897] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.678805][ T3897] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.811155][ T3908] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 38.829672][ T3908] loop4: detected capacity change from 0 to 512 [ 38.840247][ T3908] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.849701][ T3913] loop1: detected capacity change from 0 to 512 [ 38.852083][ T3908] EXT4-fs (loop4): 1 truncate cleaned up [ 38.862611][ T3908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.883417][ T3913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.896194][ T3913] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.943941][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.956565][ T3923] loop3: detected capacity change from 0 to 512 [ 38.987339][ T3923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.003128][ T3923] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.034168][ T3930] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 39.064006][ T3933] IPVS: stopping master sync thread 3930 ... [ 39.091897][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.575814][ T3950] netlink: 'syz.2.176': attribute type 3 has an invalid length. [ 39.599822][ T3952] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 39.610179][ T3952] batman_adv: batadv0: Adding interface: team0 [ 39.616592][ T3952] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.644321][ T3952] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 39.660750][ T3952] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 39.668750][ T3952] team0: entered promiscuous mode [ 39.673786][ T3952] team_slave_0: entered promiscuous mode [ 39.679657][ T3952] team_slave_1: entered promiscuous mode [ 39.686994][ T3952] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.695585][ T3952] batman_adv: batadv0: Interface activated: team0 [ 39.702091][ T3952] batman_adv: batadv0: Interface deactivated: team0 [ 39.708784][ T3952] batman_adv: batadv0: Removing interface: team0 [ 39.720901][ T3952] bridge0: port 3(team0) entered blocking state [ 39.727211][ T3952] bridge0: port 3(team0) entered disabled state [ 39.734357][ T3952] team0: entered allmulticast mode [ 39.739521][ T3952] team_slave_0: entered allmulticast mode [ 39.745252][ T3952] team_slave_1: entered allmulticast mode [ 39.755954][ T3952] bridge0: port 3(team0) entered blocking state [ 39.762252][ T3952] bridge0: port 3(team0) entered forwarding state [ 39.796712][ T3965] loop0: detected capacity change from 0 to 1024 [ 39.804816][ T3965] EXT4-fs: Ignoring removed nobh option [ 39.831410][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.846054][ T3965] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.184: Allocating blocks 385-513 which overlap fs metadata [ 39.864341][ T3965] EXT4-fs (loop0): pa ffff88810722f150: logic 16, phys. 129, len 24 [ 39.872436][ T3965] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 39.893106][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.923484][ T3974] loop0: detected capacity change from 0 to 128 [ 39.955878][ T3974] syz.0.187: attempt to access beyond end of device [ 39.955878][ T3974] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 40.076122][ T3982] 9pnet_virtio: no channels available for device 127.0.0.1 [ 40.085847][ T3330] kworker/u8:6: attempt to access beyond end of device [ 40.085847][ T3330] loop0: rw=1, sector=145, nr_sectors = 73 limit=128 [ 40.152994][ T3990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.679216][ T4030] loop4: detected capacity change from 0 to 8192 [ 41.292056][ T3931] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.346814][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 41.346826][ T29] audit: type=1400 audit(1746755218.442:328): avc: denied { execmem } for pid=4038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.399787][ T4040] 9pnet_virtio: no channels available for device 127.0.0.1 [ 41.407517][ T29] audit: type=1400 audit(1746755218.492:329): avc: denied { mounton } for pid=4039 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 41.432332][ T3423] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.469433][ T3423] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.521359][ T3423] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.581610][ T3423] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.587654][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119697400: rx timeout, send abort [ 41.599721][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119697400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.659813][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 41.688355][ T3389] usb 5-1: enqueue for inactive port 0 [ 41.695395][ T3389] usb 5-1: enqueue for inactive port 0 [ 41.735612][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.742697][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.749979][ T4039] bridge_slave_0: entered allmulticast mode [ 41.756200][ T4039] bridge_slave_0: entered promiscuous mode [ 41.769296][ T3389] vhci_hcd: vhci_device speed not set [ 41.779842][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.781902][ T29] audit: type=1400 audit(1746755218.882:330): avc: denied { search } for pid=3043 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.786987][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.808173][ T29] audit: type=1400 audit(1746755218.882:331): avc: denied { read } for pid=3043 comm="dhcpcd" name="n26" dev="tmpfs" ino=1730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.836798][ T29] audit: type=1400 audit(1746755218.882:332): avc: denied { open } for pid=3043 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.859742][ T29] audit: type=1400 audit(1746755218.882:333): avc: denied { getattr } for pid=3043 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.893961][ T4039] bridge_slave_1: entered allmulticast mode [ 41.900531][ T4039] bridge_slave_1: entered promiscuous mode [ 41.907098][ T3423] bridge_slave_1: left allmulticast mode [ 41.912860][ T3423] bridge_slave_1: left promiscuous mode [ 41.918568][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.937745][ T3423] bridge_slave_0: left allmulticast mode [ 41.943451][ T3423] bridge_slave_0: left promiscuous mode [ 41.949139][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.994980][ T4068] 9pnet_virtio: no channels available for device 127.0.0.1 [ 42.040308][ T3423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.050137][ T3423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.061662][ T3423] bond0 (unregistering): Released all slaves [ 42.074340][ T29] audit: type=1400 audit(1746755219.172:334): avc: denied { allowed } for pid=4073 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.095867][ T29] audit: type=1400 audit(1746755219.172:335): avc: denied { bind } for pid=4073 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.115298][ T29] audit: type=1400 audit(1746755219.202:336): avc: denied { write } for pid=4073 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.142911][ T3423] hsr_slave_0: left promiscuous mode [ 42.148619][ T3423] hsr_slave_1: left promiscuous mode [ 42.154100][ T3423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.161660][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.170008][ T3423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.177487][ T3423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.188672][ T3423] veth1_macvtap: left promiscuous mode [ 42.194229][ T3423] veth0_macvtap: left promiscuous mode [ 42.200037][ T3423] veth1_vlan: left promiscuous mode [ 42.205443][ T3423] veth0_vlan: left promiscuous mode [ 42.299364][ T3423] team0 (unregistering): Port device team_slave_1 removed [ 42.309701][ T3423] team0 (unregistering): Port device team_slave_0 removed [ 42.347350][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.360150][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.400125][ T4039] team0: Port device team_slave_0 added [ 42.419064][ T4039] team0: Port device team_slave_1 added [ 42.447212][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.454284][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.473095][ T29] audit: type=1400 audit(1746755219.552:337): avc: denied { mount } for pid=4087 comm="syz.4.228" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.480238][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.481764][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.520780][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.546719][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.604707][ T4039] hsr_slave_0: entered promiscuous mode [ 42.610893][ T4039] hsr_slave_1: entered promiscuous mode [ 42.616764][ T4039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.624372][ T4039] Cannot create hsr debugfs directory [ 42.768064][ T4039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.794363][ T4039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.810880][ T4039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.819815][ T4118] futex_wake_op: syz.0.234 tries to shift op by -1; fix this program [ 42.829628][ T4039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.885886][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 42.893655][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 42.910094][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.913924][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.924418][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.932130][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.939399][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.939800][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.954053][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.961755][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.969446][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.977188][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.984864][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 42.992523][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.000256][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.008094][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.015736][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.023400][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 43.033078][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.040220][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.067195][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.074404][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.092488][ T10] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 43.144406][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.239068][ T4142] fido_id[4142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.326851][ T4166] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 43.371611][ T4166] loop4: detected capacity change from 0 to 512 [ 43.424431][ T4166] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.429005][ T4039] veth0_vlan: entered promiscuous mode [ 43.455699][ T4166] EXT4-fs (loop4): 1 truncate cleaned up [ 43.457164][ T4039] veth1_vlan: entered promiscuous mode [ 43.473771][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.528277][ T4039] veth0_macvtap: entered promiscuous mode [ 43.536265][ T4039] veth1_macvtap: entered promiscuous mode [ 43.560697][ T4166] __nla_validate_parse: 21 callbacks suppressed [ 43.560765][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.566692][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.567077][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.575844][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.575855][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.575867][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.575875][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.618975][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.625459][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.640696][ T4188] rdma_op ffff8881030fcd80 conn xmit_rdma 0000000000000000 [ 43.713277][ T4199] loop0: detected capacity change from 0 to 512 [ 43.739550][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.743163][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.748431][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.790662][ T4199] EXT4-fs (loop0): 1 orphan inode deleted [ 43.796712][ T4199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.800561][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.819586][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.829425][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.839853][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.840327][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.849676][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.849692][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.879911][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.887539][ T3423] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 43.888142][ T4039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.900482][ T4199] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.907599][ T4039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.926705][ T4039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.935521][ T4039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.987229][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.996177][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 44.035619][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.048105][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 44.076436][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.214'. [ 44.094560][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.102035][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.120444][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.127875][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.162428][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.190192][ T4226] netem: incorrect gi model size [ 44.195225][ T4226] netem: change failed [ 44.419765][ T4252] loop4: detected capacity change from 0 to 512 [ 44.441479][ T4252] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 44.472602][ T4252] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.479300][ T4252] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.495434][ T4252] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 44.505329][ T4252] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.252: invalid fast symlink length 9000 [ 44.517761][ T4252] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.252: couldn't read orphan inode 16 (err -117) [ 44.540503][ T4252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.603192][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.736143][ T4284] openvswitch: netlink: Message has 6 unknown bytes. [ 45.022352][ T4316] loop5: detected capacity change from 0 to 1024 [ 45.062358][ T4320] loop0: detected capacity change from 0 to 1024 [ 45.081961][ T4316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.104496][ T4320] EXT4-fs: Ignoring removed nobh option [ 45.131838][ T4320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.222378][ T4320] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.265: Allocating blocks 385-513 which overlap fs metadata [ 45.233810][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.250652][ T4320] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.265: Allocating blocks 385-513 which overlap fs metadata [ 45.279458][ T4320] EXT4-fs (loop0): pa ffff88810722f150: logic 16, phys. 129, len 24 [ 45.287549][ T4320] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 45.349994][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.444711][ T4339] rdma_op ffff888119d81980 conn xmit_rdma 0000000000000000 [ 45.470502][ T4339] loop5: detected capacity change from 0 to 512 [ 45.499029][ T4339] EXT4-fs (loop5): 1 orphan inode deleted [ 45.501567][ T4337] loop0: detected capacity change from 0 to 8192 [ 45.515588][ T4339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.544108][ T4337] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.554772][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 45.620247][ T4339] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.724071][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.082062][ T4366] 9pnet_fd: Insufficient options for proto=fd [ 46.451030][ T4389] ref_ctr increment failed for inode: 0x63 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810a430580 [ 46.466071][ T4388] uprobe: syz.5.290:4388 failed to unregister, leaking uprobe [ 46.474958][ T4391] netem: change failed [ 46.503288][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 46.503374][ T29] audit: type=1400 audit(1746755223.602:390): avc: denied { watch watch_reads } for pid=4394 comm="syz.1.293" path="/40" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.535184][ T29] audit: type=1326 audit(1746755223.632:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.558559][ T29] audit: type=1326 audit(1746755223.632:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.581881][ T29] audit: type=1326 audit(1746755223.632:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.608832][ T29] audit: type=1326 audit(1746755223.712:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.632196][ T29] audit: type=1326 audit(1746755223.712:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.684230][ T29] audit: type=1400 audit(1746755223.762:396): avc: denied { create } for pid=4393 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 46.684590][ T4402] Driver unsupported XDP return value 0 on prog (id 210) dev N/A, expect packet loss! [ 46.703664][ T29] audit: type=1326 audit(1746755223.762:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.736526][ T29] audit: type=1326 audit(1746755223.762:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.759768][ T29] audit: type=1326 audit(1746755223.762:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c67b7e969 code=0x7ffc0000 [ 46.972908][ T4420] geneve0: entered allmulticast mode [ 47.036989][ T4428] atomic_op ffff888119d82528 conn xmit_atomic 0000000000000000 [ 47.112919][ T4441] bridge0: entered promiscuous mode [ 47.128101][ T4441] macvlan2: entered promiscuous mode [ 47.135512][ T4441] bridge0: port 4(macvlan2) entered blocking state [ 47.142079][ T4441] bridge0: port 4(macvlan2) entered disabled state [ 47.154253][ T4441] macvlan2: entered allmulticast mode [ 47.159819][ T4441] bridge0: entered allmulticast mode [ 47.168591][ T4441] macvlan2: left allmulticast mode [ 47.173722][ T4441] bridge0: left allmulticast mode [ 47.179860][ T4441] bridge0: left promiscuous mode [ 47.425578][ T4472] loop4: detected capacity change from 0 to 1024 [ 47.449799][ T4472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.466311][ T4472] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.326: Allocating blocks 385-513 which overlap fs metadata [ 47.481627][ T4472] EXT4-fs (loop4): pa ffff8881071d0000: logic 16, phys. 129, len 24 [ 47.489657][ T4472] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 47.511126][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.550466][ T4481] loop4: detected capacity change from 0 to 164 [ 47.557090][ T4481] iso9660: Bad value for 'mode' [ 47.569555][ T4485] IPv4: Oversized IP packet from 127.202.26.0 [ 47.593417][ T4487] loop4: detected capacity change from 0 to 512 [ 47.601958][ T4487] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.639544][ T4487] EXT4-fs (loop4): 1 truncate cleaned up [ 47.651304][ T4487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.780726][ T4501] loop1: detected capacity change from 0 to 2048 [ 47.822906][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.939068][ T4519] syz.2.342 uses obsolete (PF_INET,SOCK_PACKET) [ 48.093198][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.125963][ T4537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.132040][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.167724][ T4541] loop5: detected capacity change from 0 to 512 [ 48.177559][ T4541] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 48.188736][ T4541] EXT4-fs (loop5): invalid journal inode [ 48.196051][ T4541] EXT4-fs (loop5): can't get journal size [ 48.208208][ T4541] EXT4-fs (loop5): 1 truncate cleaned up [ 48.218787][ T4548] 9pnet_virtio: no channels available for device 127.0.0.1 [ 48.237221][ T4541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.274200][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.281987][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.289802][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.297568][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.305314][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.313089][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.320887][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.328655][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.336392][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.344147][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.351989][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.352427][ T4556] tipc: Started in network mode [ 48.359767][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.359870][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.364665][ T4556] tipc: Node identity 4, cluster identity 4711 [ 48.372361][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.380085][ T4556] tipc: Node number set to 4 [ 48.398881][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.406669][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.414479][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.422230][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.429974][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.437716][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.445489][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.453245][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.460989][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.468794][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.476527][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.484267][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.492165][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.500093][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.507817][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.515559][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.523291][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.531068][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.538826][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.546539][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.554275][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.562040][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.569870][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.577640][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.585441][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.593176][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.600913][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.608699][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.616434][ T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 48.624836][ T10] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.625429][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.677800][ T4566] __nla_validate_parse: 19 callbacks suppressed [ 48.677830][ T4566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.363'. [ 48.867367][ T4592] loop5: detected capacity change from 0 to 128 [ 48.921875][ T4592] syz.5.372: attempt to access beyond end of device [ 48.921875][ T4592] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 49.007181][ T51] kworker/u8:3: attempt to access beyond end of device [ 49.007181][ T51] loop5: rw=1, sector=145, nr_sectors = 73 limit=128 [ 49.108477][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.117293][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.127567][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.168517][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.177363][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.196997][ T4628] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 49.203541][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.282285][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.291278][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.317661][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 49.372516][ T4646] 9pnet_virtio: no channels available for device 127.0.0.1 [ 49.398432][ T4648] loop1: detected capacity change from 0 to 128 [ 49.707165][ T4673] loop9: detected capacity change from 0 to 7 [ 49.719870][ T4673] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.721308][ T4677] loop5: detected capacity change from 0 to 1024 [ 49.734142][ T4673] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.734162][ T4673] loop9: unable to read partition table [ 49.734180][ T4673] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 49.734180][ T4673] U) failed (rc=-5) [ 49.762196][ T4677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.794982][ T4677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.846046][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 49.864007][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 49.870802][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 49.896902][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.912400][ T4687] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.934303][ T4687] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.956522][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 49.964136][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 49.970472][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 49.977028][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 49.983373][ T4687] hsr0 speed is unknown, defaulting to 1000 [ 50.058993][ T4698] loop5: detected capacity change from 0 to 128 [ 50.103299][ T4702] loop4: detected capacity change from 0 to 2048 [ 50.148867][ T4702] loop4: p1 < > p4 [ 50.158052][ T4702] loop4: p4 size 8388608 extends beyond EOD, truncated [ 50.324656][ T4717] loop0: detected capacity change from 0 to 512 [ 50.344963][ T4714] hsr0 speed is unknown, defaulting to 1000 [ 50.355072][ T4717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.361766][ T4717] EXT4-fs: Ignoring removed oldalloc option [ 50.408578][ T4724] loop5: detected capacity change from 0 to 512 [ 50.416702][ T4717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.468950][ T4717] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.493214][ T4724] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 50.501327][ T4724] System zones: 0-2, 18-18, 34-35 [ 50.509737][ T4724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.578298][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.590384][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.642592][ T4732] 9pnet_virtio: no channels available for device 127.0.0.1 [ 50.699785][ T4736] loop0: detected capacity change from 0 to 128 [ 50.706615][ T4736] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.720237][ T4736] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.752561][ T3423] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.768290][ T4744] loop1: detected capacity change from 0 to 128 [ 50.778326][ T4744] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.794285][ T4744] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.852342][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.964812][ T4774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4774 comm=syz.1.439 [ 50.977997][ T4774] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 51.016732][ T4774] bond1: (slave gretap1): making interface the new active one [ 51.029142][ T4774] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 51.069793][ T4779] SELinux: failed to load policy [ 51.082535][ T4774] syz.1.439 (4774) used greatest stack depth: 9448 bytes left [ 51.119803][ T4783] smc: net device bond0 applied user defined pnetid SYZ0 [ 51.127218][ T4783] smc: net device bond0 erased user defined pnetid SYZ0 [ 51.151198][ T4785] loop5: detected capacity change from 0 to 512 [ 51.162479][ T4785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.176745][ T4785] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.187098][ T4788] wireguard0: entered promiscuous mode [ 51.192724][ T4788] wireguard0: entered allmulticast mode [ 51.202839][ T4785] random: crng reseeded on system resumption [ 51.322345][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.341947][ T4803] tipc: Started in network mode [ 51.346969][ T4803] tipc: Node identity ac14140f, cluster identity 4711 [ 51.354909][ T4803] tipc: New replicast peer: 255.255.255.255 [ 51.361116][ T4803] tipc: Enabled bearer , priority 10 [ 51.389261][ T4807] loop5: detected capacity change from 0 to 512 [ 51.400118][ T4807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.419360][ T4807] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.476136][ T4815] loop1: detected capacity change from 0 to 512 [ 51.484468][ T4815] batman_adv: batadv0: Adding interface: dummy0 [ 51.490914][ T4815] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.516428][ T4815] batman_adv: batadv0: Interface activated: dummy0 [ 51.545368][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.567755][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 51.567769][ T29] audit: type=1400 audit(1746755228.662:696): avc: denied { validate_trans } for pid=4826 comm="syz.5.459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.617548][ T4832] syz.1.462: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 51.632261][ T4832] CPU: 0 UID: 0 PID: 4832 Comm: syz.1.462 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 51.632289][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.632303][ T4832] Call Trace: [ 51.632309][ T4832] [ 51.632381][ T4832] __dump_stack+0x1d/0x30 [ 51.632466][ T4832] dump_stack_lvl+0xe8/0x140 [ 51.632484][ T4832] dump_stack+0x15/0x1b [ 51.632558][ T4832] warn_alloc+0x12b/0x1a0 [ 51.632619][ T4832] ? update_curr+0x16e/0x320 [ 51.632642][ T4832] ? enqueue_task_fair+0x6c3/0x990 [ 51.632741][ T4832] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 51.632766][ T4832] ? probe_sched_wakeup+0x85/0xa0 [ 51.632786][ T4832] ? ttwu_do_activate+0x1cf/0x210 [ 51.632813][ T4832] ? __rcu_read_unlock+0x4f/0x70 [ 51.632889][ T4832] ? avc_has_perm_noaudit+0x1b1/0x200 [ 51.632945][ T4832] ? should_fail_ex+0x30/0x280 [ 51.632970][ T4832] ? xskq_create+0x36/0xe0 [ 51.632991][ T4832] ? should_failslab+0x8c/0xb0 [ 51.633015][ T4832] vmalloc_user_noprof+0x59/0x70 [ 51.633120][ T4832] ? xskq_create+0x80/0xe0 [ 51.633146][ T4832] xskq_create+0x80/0xe0 [ 51.633232][ T4832] xsk_init_queue+0x95/0xf0 [ 51.633254][ T4832] xsk_setsockopt+0x3de/0x510 [ 51.633274][ T4832] ? __pfx_xsk_setsockopt+0x10/0x10 [ 51.633294][ T4832] __sys_setsockopt+0x181/0x200 [ 51.633391][ T4832] ? fpregs_restore_userregs+0xbb/0x190 [ 51.633493][ T4832] __x64_sys_setsockopt+0x64/0x80 [ 51.633546][ T4832] x64_sys_call+0x2bd5/0x2fb0 [ 51.633568][ T4832] do_syscall_64+0xd0/0x1a0 [ 51.633630][ T4832] ? clear_bhb_loop+0x25/0x80 [ 51.633652][ T4832] ? clear_bhb_loop+0x25/0x80 [ 51.633675][ T4832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.633699][ T4832] RIP: 0033:0x7fd59c13e969 [ 51.633718][ T4832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.633737][ T4832] RSP: 002b:00007fd59a7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.633756][ T4832] RAX: ffffffffffffffda RBX: 00007fd59c365fa0 RCX: 00007fd59c13e969 [ 51.633770][ T4832] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 51.633801][ T4832] RBP: 00007fd59c1c0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 51.633811][ T4832] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 51.633821][ T4832] R13: 0000000000000000 R14: 00007fd59c365fa0 R15: 00007fffa682d668 [ 51.633836][ T4832] [ 51.633906][ T4832] Mem-Info: [ 51.838905][ T4838] netlink: 'syz.0.461': attribute type 3 has an invalid length. [ 51.846480][ T4832] active_anon:7109 inactive_anon:0 isolated_anon:0 [ 51.846480][ T4832] active_file:16358 inactive_file:2200 isolated_file:0 [ 51.846480][ T4832] unevictable:0 dirty:206 writeback:0 [ 51.846480][ T4832] slab_reclaimable:3049 slab_unreclaimable:30420 [ 51.846480][ T4832] mapped:31706 shmem:3096 pagetables:983 [ 51.846480][ T4832] sec_pagetables:0 bounce:0 [ 51.846480][ T4832] kernel_misc_reclaimable:0 [ 51.846480][ T4832] free:1811084 free_pcp:58062 free_cma:0 [ 51.929461][ T4832] Node 0 active_anon:28436kB inactive_anon:0kB active_file:65432kB inactive_file:8800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126824kB dirty:824kB writeback:0kB shmem:12384kB writeback_tmp:0kB kernel_stack:2976kB pagetables:3932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 51.958279][ T4832] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 51.985241][ T4832] lowmem_reserve[]: 0 2884 7863 7863 [ 51.990580][ T4832] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 52.019266][ T4832] lowmem_reserve[]: 0 0 4978 4978 [ 52.024321][ T4832] Node 0 Normal free:4278940kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:28436kB inactive_anon:0kB active_file:65432kB inactive_file:8800kB unevictable:0kB writepending:824kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:228716kB local_pcp:223468kB free_cma:0kB [ 52.054720][ T4832] lowmem_reserve[]: 0 0 0 0 [ 52.059278][ T4832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 52.072156][ T4832] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 52.088454][ T4832] Node 0 Normal: 922*4kB (UME) 391*8kB (UM) 608*16kB (UME) 187*32kB (UME) 322*64kB (UME) 111*128kB (UME) 75*256kB (UME) 72*512kB (UME) 58*1024kB (UM) 35*2048kB (UME) 985*4096kB (UM) = 4279040kB [ 52.107848][ T4832] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 52.117165][ T4832] 21655 total pagecache pages [ 52.121872][ T4832] 0 pages in swap cache [ 52.126038][ T4832] Free swap = 124996kB [ 52.130219][ T4832] Total swap = 124996kB [ 52.134382][ T4832] 2097051 pages RAM [ 52.138230][ T4832] 0 pages HighMem/MovableOnly [ 52.142968][ T4832] 80258 pages reserved [ 52.394776][ T4877] loop5: detected capacity change from 0 to 256 [ 52.488152][ T3373] tipc: Node number set to 2886997007 [ 52.570165][ T29] audit: type=1400 audit(1746755229.672:697): avc: denied { mounton } for pid=4885 comm="syz.0.485" path="/proc/151/task" dev="proc" ino=8090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 52.571168][ T4890] IPv4: Oversized IP packet from 127.202.26.0 [ 52.670472][ T4906] syz.5.493 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.807389][ T4922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.827442][ T4920] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 52.853085][ T4925] loop0: detected capacity change from 0 to 512 [ 52.860898][ T4925] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.868127][ T4925] EXT4-fs (loop0): 1 orphan inode deleted [ 52.873903][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.883686][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 52.895790][ T4925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.920634][ T4922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.955503][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.965232][ T29] audit: type=1400 audit(1746755230.042:698): avc: denied { read write } for pid=4924 comm="syz.0.502" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.989308][ T29] audit: type=1400 audit(1746755230.042:699): avc: denied { open } for pid=4924 comm="syz.0.502" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.017320][ T4927] netlink: 'syz.5.495': attribute type 3 has an invalid length. [ 53.074874][ T4922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.149697][ T4922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.239515][ T4935] netlink: 'syz.1.505': attribute type 6 has an invalid length. [ 53.296744][ T4922] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.391031][ T4922] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.399629][ T29] audit: type=1400 audit(1746755230.462:700): avc: denied { bind } for pid=4944 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.427014][ T4922] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.451530][ T4922] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.563696][ T4966] loop1: detected capacity change from 0 to 1024 [ 53.572507][ T4966] EXT4-fs error (device loop1): __ext4_fill_super:5502: comm syz.1.519: inode #2: comm syz.1.519: iget: illegal inode # [ 53.588262][ T4966] EXT4-fs (loop1): get root inode failed [ 53.593928][ T4966] EXT4-fs (loop1): mount failed [ 53.649419][ T29] audit: type=1326 audit(1746755230.752:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03c0fe969 code=0x7ffc0000 [ 53.672892][ T29] audit: type=1326 audit(1746755230.752:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03c0fe969 code=0x7ffc0000 [ 53.701021][ T29] audit: type=1326 audit(1746755230.792:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb03c0fe969 code=0x7ffc0000 [ 53.708758][ T4979] loop0: detected capacity change from 0 to 2048 [ 53.724274][ T29] audit: type=1326 audit(1746755230.792:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03c0fe969 code=0x7ffc0000 [ 53.802563][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.827833][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.128033][ T5020] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 54.304922][ T5026] netlink: 'syz.5.533': attribute type 3 has an invalid length. [ 54.465640][ T5030] __nla_validate_parse: 12 callbacks suppressed [ 54.465661][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.480850][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.518186][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.553516][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.562398][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.602331][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.674798][ T5045] 9pnet_virtio: no channels available for device 127.0.0.1 [ 54.692083][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.700993][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.716191][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 54.779418][ T5052] loop1: detected capacity change from 0 to 512 [ 54.794092][ T5052] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.803227][ T5052] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 54.818461][ T5052] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 54.845599][ T5052] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 54.854033][ T5052] System zones: 0-2, 18-18, 34-34 [ 54.859682][ T5052] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.876397][ T5052] EXT4-fs (loop1): 1 truncate cleaned up [ 54.883000][ T5052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.960062][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.990881][ T5064] loop4: detected capacity change from 0 to 1024 [ 55.014194][ T5064] EXT4-fs: Ignoring removed nobh option [ 55.019929][ T5064] EXT4-fs: Ignoring removed bh option [ 55.032648][ T5064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.087099][ T5078] loop5: detected capacity change from 0 to 1024 [ 55.094636][ T5078] EXT4-fs: Ignoring removed bh option [ 55.107592][ T5080] syz_tun: entered allmulticast mode [ 55.109525][ T5078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.122227][ T5080] dvmrp1: entered allmulticast mode [ 55.155199][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.176299][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.196150][ T5079] syz_tun: left allmulticast mode [ 55.205265][ T5087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.561'. [ 55.291011][ T5104] loop4: detected capacity change from 0 to 128 [ 55.300969][ T5107] 9pnet_virtio: no channels available for device 127.0.0.1 [ 55.369323][ T5116] IPv4: Oversized IP packet from 127.202.26.0 [ 55.410649][ T5124] capability: warning: `syz.0.570' uses deprecated v2 capabilities in a way that may be insecure [ 55.446692][ T5126] netlink: 'syz.1.562': attribute type 3 has an invalid length. [ 55.536979][ T5134] loop0: detected capacity change from 0 to 2048 [ 55.690320][ T5134] loop0: unable to read partition table [ 55.702118][ T5141] loop4: detected capacity change from 0 to 1024 [ 55.713205][ T5134] loop0: partition table beyond EOD, truncated [ 55.719426][ T5134] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 55.731259][ T5141] EXT4-fs: Ignoring removed bh option [ 55.792824][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.897414][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.917394][ T5154] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.932613][ T5154] loop0: detected capacity change from 0 to 512 [ 55.946707][ T5154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.983509][ T5154] EXT4-fs (loop0): 1 truncate cleaned up [ 55.994210][ T5154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.270611][ T5183] loop1: detected capacity change from 0 to 8192 [ 56.322141][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.534381][ T5226] loop4: detected capacity change from 0 to 1024 [ 56.643421][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.711448][ T5195] Set syz1 is full, maxelem 65536 reached [ 56.718424][ T1892] ================================================================== [ 56.726539][ T1892] BUG: KCSAN: data-race in copy_page_from_iter_atomic / fat16_ent_put [ 56.734718][ T1892] [ 56.736602][ T5252] 9pnet_virtio: no channels available for device 127.0.0.1 [ 56.737038][ T1892] write to 0xffff8881060225fe of 2 bytes by task 5183 on cpu 1: [ 56.737058][ T1892] fat16_ent_put+0x28/0x60 [ 56.756279][ T1892] fat_alloc_clusters+0x4ce/0xa80 [ 56.761326][ T1892] fat_get_block+0x258/0x5e0 [ 56.765955][ T1892] __block_write_begin_int+0x419/0xf70 [ 56.771440][ T1892] cont_write_begin+0x5a3/0x8e0 [ 56.776315][ T1892] fat_write_begin+0x4f/0xe0 [ 56.780910][ T1892] generic_perform_write+0x181/0x490 [ 56.786225][ T1892] __generic_file_write_iter+0x9e/0x120 [ 56.791791][ T1892] generic_file_write_iter+0x8d/0x2f0 [ 56.797189][ T1892] vfs_write+0x49d/0x8d0 [ 56.801453][ T1892] ksys_write+0xda/0x1a0 [ 56.805719][ T1892] __x64_sys_write+0x40/0x50 [ 56.810322][ T1892] x64_sys_call+0x2cdd/0x2fb0 [ 56.815016][ T1892] do_syscall_64+0xd0/0x1a0 [ 56.819540][ T1892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.825454][ T1892] [ 56.827791][ T1892] read to 0xffff888106022400 of 512 bytes by task 1892 on cpu 0: [ 56.835533][ T1892] copy_page_from_iter_atomic+0x77f/0xff0 [ 56.841297][ T1892] generic_perform_write+0x2c2/0x490 [ 56.846614][ T1892] shmem_file_write_iter+0xc5/0xf0 [ 56.851741][ T1892] lo_rw_aio+0x5f7/0x7c0 [ 56.856007][ T1892] loop_process_work+0x52d/0xa60 [ 56.860960][ T1892] loop_workfn+0x31/0x40 [ 56.865227][ T1892] process_scheduled_works+0x4cb/0x9d0 [ 56.870700][ T1892] worker_thread+0x582/0x770 [ 56.875304][ T1892] kthread+0x486/0x510 [ 56.879387][ T1892] ret_from_fork+0x4b/0x60 [ 56.883819][ T1892] ret_from_fork_asm+0x1a/0x30 [ 56.888596][ T1892] [ 56.890917][ T1892] Reported by Kernel Concurrency Sanitizer on: [ 56.897067][ T1892] CPU: 0 UID: 0 PID: 1892 Comm: kworker/u8:5 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 56.909652][ T1892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 56.919719][ T1892] Workqueue: loop1 loop_workfn [ 56.924513][ T1892] ================================================================== [ 56.948311][ T5226] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 56.960859][ T5226] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.960859][ T5226] [ 56.970524][ T5226] EXT4-fs (loop4): Total free blocks count 0 [ 56.976512][ T5226] EXT4-fs (loop4): Free/Dirty block details [ 56.982432][ T5226] EXT4-fs (loop4): free_blocks=0 [ 56.987445][ T5226] EXT4-fs (loop4): dirty_blocks=0 [ 56.992504][ T5226] EXT4-fs (loop4): Block reservation details [ 56.998507][ T5226] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 57.073264][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.