last executing test programs: 3.2317521s ago: executing program 0 (id=424): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)) 3.145206752s ago: executing program 0 (id=426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x5ad00ea84eb3ba9a, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.042707233s ago: executing program 0 (id=427): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x0, 0x56, 0x0, 0x3, 0xfffffffc, 0x0, @void, @value}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 2.564614251s ago: executing program 3 (id=431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 2.524775482s ago: executing program 3 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.673170594s ago: executing program 3 (id=435): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) 1.584678656s ago: executing program 0 (id=437): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = mq_open(&(0x7f0000001700)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0xe22, 0x7ffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000029000000390068fbbe8df9000032000203e1c2d5c18bd98ba745432474c23b563ac607aaf3202778ecee158caace8fee0ec61f8f4cad44725cb16a8536e1073e9133b2c05ae084c49c9888f305a2f114acc423ead72a7f09d6002bd24577b05221f9d515a527bfc99eac8c7435957f2ec69070631ef3cc9c620d639694e36734f831dfab96a910e3af052ccf7c8e0c222e1a075a53064c"], 0x18}}], 0x1, 0x6000080) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.492582447s ago: executing program 4 (id=439): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03000a", 0x18, 0x0, 0x0, @private0, @local, {[@hopopts={0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}]}]}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000000000007e000000330003006764c0b98823c5339b"], 0x1c}}, 0x4000054) 1.257127301s ago: executing program 4 (id=442): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) splice(r0, 0x0, r1, 0x0, 0x2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 948.513665ms ago: executing program 0 (id=448): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000030, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) mq_unlink(0x0) 851.228607ms ago: executing program 1 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 823.392867ms ago: executing program 1 (id=452): syz_emit_ethernet(0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x236, 0xffffffffffffff80, "904772f5"}}}}}}, 0x0) 789.137958ms ago: executing program 1 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) rename(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 788.357608ms ago: executing program 3 (id=454): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000540)={r1, r1, 0xc, 0x0, &(0x7f0000000480), 0x4, 0xd6, 0x2, 0x0, 0x4d6, 0x1, 0x10, 'syz0\x00'}) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x2000) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtclass={0x40, 0x28, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x9}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x9b}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xe8b}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) close_range(r0, r1, 0x0) 736.698929ms ago: executing program 1 (id=456): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d51ab3a0cc76f8c63aad4d76", @ANYRESDEC, @ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 704.742779ms ago: executing program 2 (id=457): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) 684.012ms ago: executing program 1 (id=458): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) close(r0) 642.45342ms ago: executing program 1 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001bc0)=""/152, 0x98}, {&(0x7f0000003140)=""/4104, 0x1008}, {&(0x7f0000002f40)=""/196, 0xc4}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001fc0)=""/189, 0xbd}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f00000020c0)=""/99, 0x63}], 0x9}, 0x3}], 0x1, 0x0, 0x0) 550.188212ms ago: executing program 3 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) 517.130553ms ago: executing program 2 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 466.530563ms ago: executing program 2 (id=462): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 444.826394ms ago: executing program 2 (id=463): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 395.920314ms ago: executing program 4 (id=464): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 345.926145ms ago: executing program 2 (id=465): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="020000008081000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 291.580156ms ago: executing program 4 (id=466): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) close(r0) 166.582688ms ago: executing program 4 (id=467): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x400000107ffff000, 0x0) 139.069128ms ago: executing program 2 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) 102.186928ms ago: executing program 4 (id=469): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r2, 0x101) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(0xffffffffffffffff, 0x0, 0x2) 63.174499ms ago: executing program 3 (id=470): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113480000000000bf1000000000000015000200091bfbff3d030100000000008701000257000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160302000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 0s ago: executing program 0 (id=471): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0xc) splice(r2, 0x0, r5, 0x0, 0x80, 0x7) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 34.770112][ T29] audit: type=1400 audit(1749179147.034:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.771453][ T3307] cgroup: Unknown subsys name 'net' [ 34.793478][ T29] audit: type=1400 audit(1749179147.034:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.821391][ T29] audit: type=1400 audit(1749179147.064:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.961410][ T3307] cgroup: Unknown subsys name 'cpuset' [ 34.967759][ T3307] cgroup: Unknown subsys name 'rlimit' [ 35.159827][ T29] audit: type=1400 audit(1749179147.424:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.183726][ T29] audit: type=1400 audit(1749179147.434:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.199006][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.204616][ T29] audit: type=1400 audit(1749179147.434:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.235255][ T29] audit: type=1400 audit(1749179147.434:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.249260][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.256296][ T29] audit: type=1400 audit(1749179147.434:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.292259][ T29] audit: type=1400 audit(1749179147.434:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.317468][ T29] audit: type=1400 audit(1749179147.494:71): avc: denied { relabelto } for pid=3310 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.073497][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 37.142316][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.150843][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.158984][ T3317] bridge_slave_0: entered allmulticast mode [ 37.166216][ T3317] bridge_slave_0: entered promiscuous mode [ 37.174135][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.181643][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.189470][ T3317] bridge_slave_1: entered allmulticast mode [ 37.196794][ T3317] bridge_slave_1: entered promiscuous mode [ 37.235000][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.249394][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.272031][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 37.312022][ T3317] team0: Port device team_slave_0 added [ 37.343425][ T3317] team0: Port device team_slave_1 added [ 37.375600][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 37.404369][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.411521][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.418967][ T3321] bridge_slave_0: entered allmulticast mode [ 37.425613][ T3321] bridge_slave_0: entered promiscuous mode [ 37.434015][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.441262][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.448700][ T3321] bridge_slave_1: entered allmulticast mode [ 37.455373][ T3321] bridge_slave_1: entered promiscuous mode [ 37.474240][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.481462][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.508199][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.519335][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 37.537785][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 37.547662][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.554808][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.581359][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.600748][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.624256][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.677447][ T3321] team0: Port device team_slave_0 added [ 37.690041][ T3317] hsr_slave_0: entered promiscuous mode [ 37.697289][ T3317] hsr_slave_1: entered promiscuous mode [ 37.709396][ T3321] team0: Port device team_slave_1 added [ 37.728236][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.735513][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.742919][ T3323] bridge_slave_0: entered allmulticast mode [ 37.749568][ T3323] bridge_slave_0: entered promiscuous mode [ 37.777256][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.784902][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.792666][ T3323] bridge_slave_1: entered allmulticast mode [ 37.800689][ T3323] bridge_slave_1: entered promiscuous mode [ 37.807780][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.815335][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.843117][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.855586][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.862835][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.870242][ T3331] bridge_slave_0: entered allmulticast mode [ 37.878030][ T3331] bridge_slave_0: entered promiscuous mode [ 37.890789][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.898550][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.907047][ T3325] bridge_slave_0: entered allmulticast mode [ 37.914665][ T3325] bridge_slave_0: entered promiscuous mode [ 37.921899][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.929254][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.937535][ T3325] bridge_slave_1: entered allmulticast mode [ 37.944202][ T3325] bridge_slave_1: entered promiscuous mode [ 37.956614][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.964681][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.992351][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.004370][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.012069][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.020048][ T3331] bridge_slave_1: entered allmulticast mode [ 38.026602][ T3331] bridge_slave_1: entered promiscuous mode [ 38.046827][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.078981][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.103235][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.113713][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.140705][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.151298][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.170270][ T3321] hsr_slave_0: entered promiscuous mode [ 38.176541][ T3321] hsr_slave_1: entered promiscuous mode [ 38.182527][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.190093][ T3321] Cannot create hsr debugfs directory [ 38.196527][ T3323] team0: Port device team_slave_0 added [ 38.203229][ T3323] team0: Port device team_slave_1 added [ 38.225293][ T3325] team0: Port device team_slave_0 added [ 38.252169][ T3325] team0: Port device team_slave_1 added [ 38.265487][ T3331] team0: Port device team_slave_0 added [ 38.288547][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.295771][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.323997][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.336513][ T3331] team0: Port device team_slave_1 added [ 38.358312][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.365359][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.392279][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.430857][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.437947][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.464491][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.476627][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.483653][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.510625][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.522554][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.531003][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.559596][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.574416][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.581601][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.610413][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.674592][ T3325] hsr_slave_0: entered promiscuous mode [ 38.681494][ T3325] hsr_slave_1: entered promiscuous mode [ 38.687452][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.695348][ T3325] Cannot create hsr debugfs directory [ 38.702914][ T3323] hsr_slave_0: entered promiscuous mode [ 38.709140][ T3323] hsr_slave_1: entered promiscuous mode [ 38.715290][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.723187][ T3323] Cannot create hsr debugfs directory [ 38.751795][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.762754][ T3331] hsr_slave_0: entered promiscuous mode [ 38.768785][ T3331] hsr_slave_1: entered promiscuous mode [ 38.774927][ T3331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.782709][ T3331] Cannot create hsr debugfs directory [ 38.793621][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.822499][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.847439][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.880583][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.902899][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.914513][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.941313][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.012550][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.022658][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.033736][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.055953][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.096066][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.110510][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.121278][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.134256][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.146100][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.157568][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.172749][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.188692][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.203581][ T3331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.212714][ T3331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.234369][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.241904][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.252092][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.259287][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.271717][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.279005][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.287189][ T3331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.305361][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.314656][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.328102][ T3331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.367272][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.402450][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.417379][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.451812][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.465345][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.472560][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.481740][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.488912][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.501334][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.510479][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.535911][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.546732][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.555716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.574272][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.605733][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.617330][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.665608][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.672912][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.685279][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.692596][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.780502][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.813784][ T3317] veth0_vlan: entered promiscuous mode [ 39.828931][ T3321] veth0_vlan: entered promiscuous mode [ 39.838854][ T3317] veth1_vlan: entered promiscuous mode [ 39.864303][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.873015][ T3321] veth1_vlan: entered promiscuous mode [ 39.886243][ T3317] veth0_macvtap: entered promiscuous mode [ 39.895635][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.907144][ T3317] veth1_macvtap: entered promiscuous mode [ 39.925959][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.946730][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.980302][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.989728][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.999175][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.009031][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.041603][ T3325] veth0_vlan: entered promiscuous mode [ 40.052797][ T3321] veth0_macvtap: entered promiscuous mode [ 40.060583][ T3321] veth1_macvtap: entered promiscuous mode [ 40.086385][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.086403][ T29] audit: type=1400 audit(1749179152.344:81): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.b2ROuM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.120950][ T29] audit: type=1400 audit(1749179152.344:82): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.145786][ T29] audit: type=1400 audit(1749179152.354:83): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.b2ROuM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.146048][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.172967][ T29] audit: type=1400 audit(1749179152.354:84): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.173003][ T29] audit: type=1400 audit(1749179152.354:85): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.b2ROuM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.192284][ T3325] veth1_vlan: entered promiscuous mode [ 40.202120][ T29] audit: type=1400 audit(1749179152.354:86): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.b2ROuM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.263208][ T29] audit: type=1400 audit(1749179152.354:87): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.286937][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.297651][ T29] audit: type=1400 audit(1749179152.354:88): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.322490][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.325600][ T29] audit: type=1400 audit(1749179152.354:89): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.348497][ T3325] veth0_macvtap: entered promiscuous mode [ 40.380591][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.389618][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.398379][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.407208][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.419768][ T3331] veth0_vlan: entered promiscuous mode [ 40.429200][ T3325] veth1_macvtap: entered promiscuous mode [ 40.439201][ T29] audit: type=1400 audit(1749179152.704:90): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.474576][ T3331] veth1_vlan: entered promiscuous mode [ 40.484772][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.502640][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.515880][ T3323] veth0_vlan: entered promiscuous mode [ 40.536005][ T3325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.544864][ T3325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.553781][ T3325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.562761][ T3325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.582351][ T3323] veth1_vlan: entered promiscuous mode [ 40.627154][ T3323] veth0_macvtap: entered promiscuous mode [ 40.657311][ T3331] veth0_macvtap: entered promiscuous mode [ 40.668881][ T3323] veth1_macvtap: entered promiscuous mode [ 40.678886][ T3331] veth1_macvtap: entered promiscuous mode [ 40.703364][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.725321][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.748094][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.760222][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.770028][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.778943][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.787971][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.808658][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.833339][ T3331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.842431][ T3331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.851679][ T3331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.860420][ T3331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.193105][ T3531] loop1: detected capacity change from 0 to 512 [ 41.200425][ T3533] loop0: detected capacity change from 0 to 512 [ 41.253260][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.326688][ T3540] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 41.379132][ T3533] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.387945][ T3540] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 41.466872][ T3540] syz.1.11 (3540) used greatest stack depth: 10752 bytes left [ 41.508994][ C0] hrtimer: interrupt took 28976 ns [ 41.514954][ T3544] infiniband syz1: set active [ 41.519705][ T3544] infiniband syz1: added syz_tun [ 41.532027][ T3544] RDS/IB: syz1: added [ 41.536171][ T3544] smc: adding ib device syz1 with port count 1 [ 41.542725][ T3544] smc: ib device syz1 port 1 has pnetid [ 41.606464][ T3554] loop1: detected capacity change from 0 to 512 [ 41.617034][ T3554] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.653484][ T3554] EXT4-fs (loop1): 1 orphan inode deleted [ 41.660772][ T2890] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 41.661469][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.683108][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.709566][ T3554] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.064927][ T3544] syz.2.12 (3544) used greatest stack depth: 10616 bytes left [ 42.119555][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.188215][ T3576] syzkaller0: entered promiscuous mode [ 42.193817][ T3576] syzkaller0: entered allmulticast mode [ 42.248187][ T3580] loop0: detected capacity change from 0 to 1024 [ 42.264937][ T3580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.352314][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.587986][ T3594] loop0: detected capacity change from 0 to 512 [ 42.605247][ T3594] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.623420][ T3594] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.640712][ T3594] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 42.647970][ T3594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.30: bg 0: block 248: padding at end of block bitmap is not set [ 42.670691][ T3594] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 42.679896][ T3594] EXT4-fs (loop0): 1 orphan inode deleted [ 42.686623][ T3594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.770134][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.820525][ T3601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.866435][ T3604] loop0: detected capacity change from 0 to 164 [ 42.890124][ T3604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.956715][ T3611] loop2: detected capacity change from 0 to 512 [ 42.965504][ T3612] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.979522][ T3611] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.987765][ T3612] Symlink component flag not implemented [ 42.993686][ T3612] Symlink component flag not implemented [ 43.002643][ T3612] Symlink component flag not implemented (7) [ 43.008683][ T3612] Symlink component flag not implemented (116) [ 43.016066][ T3611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.029202][ T3611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 43.038350][ T3611] System zones: 1-12 [ 43.058547][ T3611] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.072028][ T3611] EXT4-fs (loop2): 1 truncate cleaned up [ 43.078259][ T3611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.106661][ T3616] loop0: detected capacity change from 0 to 128 [ 43.201224][ T3621] loop0: detected capacity change from 0 to 2048 [ 43.313267][ T3311] loop0: p1 < > p4 [ 43.336228][ T3627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.361119][ T3311] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.508836][ T3621] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 44.153884][ T3633] loop3: detected capacity change from 0 to 164 [ 44.160810][ T3633] ======================================================= [ 44.160810][ T3633] WARNING: The mand mount option has been deprecated and [ 44.160810][ T3633] and is ignored by this kernel. Remove the mand [ 44.160810][ T3633] option from the mount to silence this warning. [ 44.160810][ T3633] ======================================================= [ 44.337500][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.349266][ T3633] isofs_fill_super: root inode is not a directory. Corrupted media? [ 44.448509][ T3007] loop0: p1 < > p4 [ 44.491063][ T3007] loop0: p4 size 8388608 extends beyond EOD, truncated [ 44.566064][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.579373][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.606915][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.617132][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.735125][ T3652] loop1: detected capacity change from 0 to 512 [ 44.749213][ T3652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.782314][ T3652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.807212][ T3659] loop4: detected capacity change from 0 to 1024 [ 44.829719][ T3652] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.893479][ T3367] Process accounting resumed [ 44.903719][ T3659] EXT4-fs: Ignoring removed orlov option [ 44.909450][ T3659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.996131][ T3652] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 9 with error 122 [ 45.009200][ T3652] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.009200][ T3652] [ 45.142192][ T3669] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 45.163350][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 45.163365][ T29] audit: type=1400 audit(1749179157.434:318): avc: denied { read write } for pid=3670 comm="syz.3.56" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.193745][ T29] audit: type=1400 audit(1749179157.434:319): avc: denied { open } for pid=3670 comm="syz.3.56" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.225550][ T3671] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 45.225550][ T3671] program syz.3.56 not setting count and/or reply_len properly [ 45.254302][ T3669] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 45.275434][ T3659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.309447][ T29] audit: type=1400 audit(1749179157.494:320): avc: denied { bind } for pid=3670 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.339731][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 45.382242][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.394215][ T29] audit: type=1400 audit(1749179157.664:321): avc: denied { create } for pid=3676 comm="syz.0.57" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.469530][ T29] audit: type=1400 audit(1749179157.694:322): avc: denied { mounton } for pid=3676 comm="syz.0.57" path="/17/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.492643][ T29] audit: type=1400 audit(1749179157.694:323): avc: denied { write } for pid=3676 comm="syz.0.57" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.514266][ T29] audit: type=1400 audit(1749179157.694:324): avc: denied { open } for pid=3676 comm="syz.0.57" path="/17/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.537047][ T29] audit: type=1400 audit(1749179157.734:325): avc: denied { unlink } for pid=3325 comm="syz-executor" name="file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.573658][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.583821][ T29] audit: type=1400 audit(1749179157.784:326): avc: denied { write } for pid=3679 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.602783][ T29] audit: type=1400 audit(1749179157.814:327): avc: denied { read } for pid=3681 comm="syz.0.60" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.659598][ T3686] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.677388][ T3688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 45.694301][ T3688] veth0: entered promiscuous mode [ 45.699686][ T3688] veth0: entered allmulticast mode [ 45.728193][ T3692] loop4: detected capacity change from 0 to 1024 [ 45.760487][ T3692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.795352][ T3688] syz.2.62 (3688) used greatest stack depth: 10560 bytes left [ 45.813537][ T3699] capability: warning: `syz.0.66' uses deprecated v2 capabilities in a way that may be insecure [ 45.855911][ T3699] loop0: detected capacity change from 0 to 512 [ 45.863077][ T3699] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.893832][ T3699] EXT4-fs (loop0): 1 truncate cleaned up [ 45.918262][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.987346][ T3692] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.61: Allocating blocks 449-513 which overlap fs metadata [ 46.026629][ T3710] openvswitch: netlink: Message has 6 unknown bytes. [ 46.034405][ T3691] EXT4-fs (loop4): pa ffff8881054fd0e0: logic 48, phys. 177, len 21 [ 46.042741][ T3691] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 46.058376][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.098040][ T3692] syz.4.61 (3692) used greatest stack depth: 10000 bytes left [ 46.107341][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.144126][ T3720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.156760][ T3720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.198684][ T3720] loop4: detected capacity change from 0 to 1024 [ 46.211906][ T3724] loop1: detected capacity change from 0 to 512 [ 46.227857][ T3720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.240282][ T3720] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.251032][ T3724] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 46.262636][ T3720] process 'syz.4.73' launched './file1' with NULL argv: empty string added [ 46.285578][ T3724] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.75: bad orphan inode 15 [ 46.330070][ T3729] netlink: 34 bytes leftover after parsing attributes in process `syz.3.76'. [ 46.330233][ T3720] kernel read not supported for file /policy (pid: 3720 comm: syz.4.73) [ 46.355109][ T3724] ext4_test_bit(bit=14, block=18) = 1 [ 46.360841][ T3724] is_bad_inode(inode)=0 [ 46.365157][ T3724] NEXT_ORPHAN(inode)=1023 [ 46.369502][ T3724] max_ino=32 [ 46.372731][ T3724] i_nlink=0 [ 46.397953][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 46.420193][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 46.429334][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 46.439825][ T3733] Zero length message leads to an empty skb [ 46.440329][ T3724] ext2 filesystem being mounted at /13/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 46.472164][ T3735] loop0: detected capacity change from 0 to 2048 [ 46.492925][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.541272][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.744240][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.756862][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.881620][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.977702][ T3751] loop4: detected capacity change from 0 to 512 [ 46.996037][ T3751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.025140][ T3751] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 47.043224][ T3751] EXT4-fs (loop4): mount failed [ 47.132699][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 47.218700][ T3773] veth0_vlan: entered allmulticast mode [ 47.309349][ T3779] tipc: Started in network mode [ 47.314475][ T3779] tipc: Node identity 9a62a4f14bfb, cluster identity 4711 [ 47.321828][ T3779] tipc: Enabled bearer , priority 0 [ 47.381937][ T3779] tipc: Disabling bearer [ 47.650959][ T3803] netlink: 268 bytes leftover after parsing attributes in process `syz.4.102'. [ 47.651025][ T3803] unsupported nla_type 65024 [ 47.737809][ T3808] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 47.748091][ T3808] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 47.767675][ T3810] netlink: 'syz.0.105': attribute type 11 has an invalid length. [ 47.767697][ T3810] netlink: 48 bytes leftover after parsing attributes in process `syz.0.105'. [ 47.879156][ T3816] loop0: detected capacity change from 0 to 1024 [ 47.880549][ T3818] loop4: detected capacity change from 0 to 128 [ 47.914593][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.999190][ T3825] wireguard0: entered promiscuous mode [ 48.005038][ T3825] wireguard0: entered allmulticast mode [ 48.126451][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.225110][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 48.237587][ T3831] loop2: detected capacity change from 0 to 512 [ 48.258570][ T3837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 48.288425][ T3831] EXT4-fs: Ignoring removed oldalloc option [ 48.296691][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.304321][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.321427][ T3831] journal_path: Lookup failure for './file0/../file0' [ 48.328672][ T3831] EXT4-fs: error: could not find journal device path [ 48.336683][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.344627][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.494732][ T3841] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 48.550932][ T3843] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 48.594131][ T3844] loop2: detected capacity change from 0 to 1024 [ 48.670538][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.688537][ T3848] pim6reg1: entered promiscuous mode [ 48.694138][ T3848] pim6reg1: entered allmulticast mode [ 49.192789][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.267663][ T3864] loop2: detected capacity change from 0 to 512 [ 49.314338][ T3864] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.358660][ T3872] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.385371][ T3864] EXT4-fs (loop2): 1 truncate cleaned up [ 49.399590][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.518750][ T3879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.592740][ T3877] loop1: detected capacity change from 0 to 2048 [ 49.605711][ T3879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.664382][ T3879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.747855][ T3879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.812825][ T3882] loop1: detected capacity change from 0 to 512 [ 49.840415][ T3879] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.849363][ T3882] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 49.854335][ T3879] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.872721][ T3879] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885009][ T3884] loop0: detected capacity change from 0 to 2048 [ 49.894196][ T3879] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.907301][ T3882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 49.936782][ T3884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.961648][ T3882] System zones: 1-12 [ 49.969752][ T3884] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.002365][ T3882] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.133: corrupted in-inode xattr: e_value size too large [ 50.041231][ T3884] EXT4-fs (loop0): shut down requested (0) [ 50.080572][ T3882] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.133: couldn't read orphan inode 15 (err -117) [ 50.106349][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.121540][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.171298][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 50.171317][ T29] audit: type=1400 audit(1749179162.444:444): avc: denied { audit_write } for pid=3863 comm="syz.2.126" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.210729][ T29] audit: type=1107 audit(1749179162.444:445): pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 50.224049][ T29] audit: type=1400 audit(1749179162.474:446): avc: denied { execmem } for pid=3889 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.326083][ T29] audit: type=1400 audit(1749179162.564:447): avc: denied { watch_reads } for pid=3893 comm="syz.0.137" path="/44" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.353271][ T3896] loop0: detected capacity change from 0 to 512 [ 50.373808][ T3898] loop3: detected capacity change from 0 to 164 [ 50.391216][ T3896] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.403070][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.423618][ T29] audit: type=1400 audit(1749179162.694:448): avc: denied { mount } for pid=3897 comm="syz.3.139" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.447878][ T29] audit: type=1400 audit(1749179162.694:449): avc: denied { bind } for pid=3897 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.467413][ T29] audit: type=1400 audit(1749179162.694:450): avc: denied { execute_no_trans } for pid=3897 comm="syz.3.139" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.499645][ T3898] syz.3.139: attempt to access beyond end of device [ 50.499645][ T3898] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.507285][ T3896] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.138: inline data xattr refers to an external xattr inode [ 50.517316][ T3898] syz.3.139: attempt to access beyond end of device [ 50.517316][ T3898] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.554487][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.590422][ T3896] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.138: couldn't read orphan inode 17 (err -117) [ 50.607261][ T29] audit: type=1400 audit(1749179162.874:451): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.672247][ T3906] loop1: detected capacity change from 0 to 2048 [ 50.688340][ T3896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.738368][ T1466] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 50.807342][ T3914] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:0 [ 50.823864][ T3906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.898245][ T3911] loop3: detected capacity change from 0 to 512 [ 50.905111][ T3906] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.965912][ T3911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.991861][ T29] audit: type=1400 audit(1749179163.112:452): avc: denied { getopt } for pid=3889 comm="syz.4.135" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.012434][ T29] audit: type=1400 audit(1749179163.162:453): avc: denied { search } for pid=3907 comm="syz.2.141" name="/" dev="configfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.051695][ T3911] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.108362][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.177377][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.223965][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 51.429722][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 51.541644][ T3943] Invalid ELF header magic: != ELF [ 51.548732][ T3941] loop4: detected capacity change from 0 to 1024 [ 51.565277][ T3941] EXT4-fs: Ignoring removed i_version option [ 51.576773][ T3941] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.584168][ T3941] EXT4-fs: Ignoring removed nobh option [ 51.590012][ T3941] EXT4-fs: Ignoring removed bh option [ 51.604019][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.733244][ T3941] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.154: Allocating blocks 385-513 which overlap fs metadata [ 51.780186][ T3948] EXT4-fs (loop4): pa ffff8881054fd620: logic 16, phys. 129, len 24 [ 51.788676][ T3948] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 51.830848][ T3948] syz.4.154 (3948) used greatest stack depth: 9576 bytes left [ 51.854217][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.885795][ T3949] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 51.936028][ T3906] syz.1.143 (3906) used greatest stack depth: 6064 bytes left [ 51.945659][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.001737][ T3955] loop4: detected capacity change from 0 to 512 [ 52.040371][ T3955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.070005][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 52.081269][ T3955] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.274828][ T3961] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 52.287927][ T3961] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 52.311302][ T3961] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 52.365348][ T3961] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 52.378320][ T3961] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 52.392771][ T3961] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 52.421266][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.057346][ T3974] syz.4.163 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 53.071737][ T3974] CPU: 0 UID: 0 PID: 3974 Comm: syz.4.163 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 53.071771][ T3974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.071785][ T3974] Call Trace: [ 53.071792][ T3974] [ 53.071801][ T3974] __dump_stack+0x1d/0x30 [ 53.071870][ T3974] dump_stack_lvl+0xe8/0x140 [ 53.071895][ T3974] dump_stack+0x15/0x1b [ 53.071916][ T3974] dump_header+0x81/0x220 [ 53.071959][ T3974] oom_kill_process+0x334/0x3f0 [ 53.071993][ T3974] out_of_memory+0x979/0xb80 [ 53.072065][ T3974] try_charge_memcg+0x5e6/0x9e0 [ 53.072143][ T3974] obj_cgroup_charge_pages+0xa6/0x150 [ 53.072216][ T3974] __memcg_kmem_charge_page+0x9f/0x170 [ 53.072252][ T3974] __alloc_frozen_pages_noprof+0x188/0x360 [ 53.072291][ T3974] alloc_pages_mpol+0xb3/0x250 [ 53.072362][ T3974] alloc_pages_noprof+0x90/0x130 [ 53.072402][ T3974] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 53.072500][ T3974] __kvmalloc_node_noprof+0x30f/0x4e0 [ 53.072532][ T3974] ? ip_set_alloc+0x1f/0x30 [ 53.072631][ T3974] ? ip_set_alloc+0x1f/0x30 [ 53.072658][ T3974] ip_set_alloc+0x1f/0x30 [ 53.072693][ T3974] hash_netiface_create+0x282/0x740 [ 53.072730][ T3974] ? __pfx_hash_netiface_create+0x10/0x10 [ 53.072768][ T3974] ip_set_create+0x3c9/0x960 [ 53.072863][ T3974] ? __nla_parse+0x40/0x60 [ 53.072889][ T3974] nfnetlink_rcv_msg+0x4c6/0x590 [ 53.072935][ T3974] ? selinux_capable+0x1f9/0x270 [ 53.072954][ T3974] netlink_rcv_skb+0x123/0x220 [ 53.073014][ T3974] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 53.073056][ T3974] nfnetlink_rcv+0x16b/0x1690 [ 53.073132][ T3974] ? __kfree_skb+0x109/0x150 [ 53.073168][ T3974] ? nlmon_xmit+0x4f/0x60 [ 53.073201][ T3974] ? consume_skb+0x49/0x150 [ 53.073228][ T3974] ? nlmon_xmit+0x4f/0x60 [ 53.073251][ T3974] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 53.073410][ T3974] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 53.073451][ T3974] ? __dev_queue_xmit+0x182/0x1fb0 [ 53.073546][ T3974] ? ref_tracker_free+0x37d/0x3e0 [ 53.073602][ T3974] ? __netlink_deliver_tap+0x4dc/0x500 [ 53.073638][ T3974] netlink_unicast+0x59e/0x670 [ 53.073710][ T3974] netlink_sendmsg+0x58b/0x6b0 [ 53.073762][ T3974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.073803][ T3974] __sock_sendmsg+0x145/0x180 [ 53.073825][ T3974] ____sys_sendmsg+0x31e/0x4e0 [ 53.073937][ T3974] ___sys_sendmsg+0x17b/0x1d0 [ 53.074040][ T3974] __x64_sys_sendmsg+0xd4/0x160 [ 53.074150][ T3974] x64_sys_call+0x2999/0x2fb0 [ 53.074230][ T3974] do_syscall_64+0xd2/0x200 [ 53.074259][ T3974] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.074312][ T3974] ? clear_bhb_loop+0x40/0x90 [ 53.074342][ T3974] ? clear_bhb_loop+0x40/0x90 [ 53.074368][ T3974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.074388][ T3974] RIP: 0033:0x7fa6726fe929 [ 53.074414][ T3974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.074432][ T3974] RSP: 002b:00007fa670d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.074535][ T3974] RAX: ffffffffffffffda RBX: 00007fa672925fa0 RCX: 00007fa6726fe929 [ 53.074585][ T3974] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 53.074602][ T3974] RBP: 00007fa672780b39 R08: 0000000000000000 R09: 0000000000000000 [ 53.074620][ T3974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.074635][ T3974] R13: 0000000000000000 R14: 00007fa672925fa0 R15: 00007ffe25fdcce8 [ 53.074722][ T3974] [ 53.074952][ T3974] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 53.435454][ T3974] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 53.435611][ T3990] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 53.443544][ T3974] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 53.443613][ T3974] Memory cgroup stats for /syz4: [ 53.443755][ T3974] cache 0 [ 53.443765][ T3974] rss 0 [ 53.443773][ T3974] shmem 0 [ 53.443781][ T3974] mapped_file 0 [ 53.443788][ T3974] dirty 0 [ 53.443793][ T3974] writeback 0 [ 53.443800][ T3974] workingset_refault_anon 20 [ 53.443809][ T3974] workingset_refault_file 128 [ 53.443862][ T3974] swap 200704 [ 53.443869][ T3974] swapcached 0 [ 53.443878][ T3974] nr_memmap_boot_pages 10165 [ 53.443888][ T3974] pgpgin 10165 [ 53.443896][ T3974] pglazyfree 12369 [ 53.443904][ T3974] pgfault 19 [ 53.443912][ T3974] a_other 0 [ 53.443919][ T3974] inactive_anon 0 [ 53.443928][ T3974] active_anon 0 [ 53.443936][ T3974] inactive_file 0 [ 53.443945][ T3974] active_file 0 [ 53.444019][ T3974] hierarchical_memory_limit 314572800 [ 53.444029][ T3974] hierarchical_memsw_limit 9223372036854771712 [ 53.444041][ T3974] total_cache 0 [ 53.444049][ T3974] total_rss 0 [ 53.444081][ T3974] total_shmem 0 [ 53.444090][ T3974] total_mapped_file 0 [ 53.444099][ T3974] total_dirty 0 [ 53.444107][ T3974] total_writeback 0 [ 53.444116][ T3974] total_workingset_refault_anon 20 [ 53.444204][ T3974] total_workingset_refault_file 128 [ 53.444215][ T3974] total_swap 200704 [ 53.444224][ T3974] total_swapcached 0 [ 53.444233][ T3974] total_nr_memmap_boot_pages 10165 [ 53.444279][ T3974] total_pgpgin 10165 [ 53.444289][ T3974] total_pglazyfree 12369 [ 53.444298][ T3974] total_pgfault 19 [ 53.444307][ T3974] total_a_other 0 [ 53.444316][ T3974] total_inactive_anon 0 [ 53.444325][ T3974] total_active_anon 0 [ 53.444334][ T3974] total_inactive_file 0 [ 53.444343][ T3974] total_active_file 0 [ 53.444352][ T3974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.163,pid=3973,uid=0 [ 53.444532][ T3974] Memory cgroup out of memory: Killed process 3973 (syz.4.163) total-vm:95800kB, anon-rss:936kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 53.836182][ T4004] mmap: syz.4.172 (4004) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.867535][ T4004] bridge_slave_0: left allmulticast mode [ 53.873380][ T4004] bridge_slave_0: left promiscuous mode [ 53.879292][ T4004] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.891364][ T4004] bridge_slave_1: left allmulticast mode [ 53.897296][ T4004] bridge_slave_1: left promiscuous mode [ 53.903184][ T4004] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.918421][ T4004] bond0: (slave bond_slave_0): Releasing backup interface [ 53.971802][ T4004] bond0: (slave bond_slave_1): Releasing backup interface [ 53.988347][ T4004] team0: Port device team_slave_0 removed [ 53.998231][ T4004] team0: Port device team_slave_1 removed [ 54.285252][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 54.503214][ T4033] syzkaller0: entered promiscuous mode [ 54.508886][ T4033] syzkaller0: entered allmulticast mode [ 54.770634][ T4040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.864979][ T4040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.908505][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 54.924192][ T4040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.981018][ T4040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.034824][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 55.037362][ T4046] serio: Serial port ptm0 [ 55.070410][ T4040] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.082707][ T4040] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.096332][ T4040] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.108614][ T4040] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.130328][ T4053] loop4: detected capacity change from 0 to 512 [ 55.148618][ T4053] EXT4-fs (loop4): 1 orphan inode deleted [ 55.162310][ T4053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.177842][ T4053] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.190299][ T1466] __quota_error: 49 callbacks suppressed [ 55.190316][ T1466] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 55.207985][ T1466] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 55.387679][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.425157][ T4067] loop4: detected capacity change from 0 to 512 [ 55.434691][ T4067] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.442769][ T4067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.197: bg 0: block 122: padding at end of block bitmap is not set [ 55.458954][ T4067] Quota error (device loop4): write_blk: dquota write failed [ 55.466613][ T4067] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 55.476698][ T4067] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.197: Failed to acquire dquot type 1 [ 55.491474][ T4067] EXT4-fs (loop4): 1 truncate cleaned up [ 55.805611][ T29] audit: type=1400 audit(1749179168.187:503): avc: denied { load_policy } for pid=4070 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.836776][ T4071] SELinux: failed to load policy [ 55.884076][ T4067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.901960][ T4067] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 55.926364][ T4067] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 55.936380][ T4067] Quota error (device loop4): do_check_range: Getting block 1536 out of range 0-5 [ 55.946532][ T4067] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.197: deleted inode referenced: 12 [ 55.972409][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.199609][ T4083] loop4: detected capacity change from 0 to 512 [ 56.230943][ T4090] loop2: detected capacity change from 0 to 512 [ 56.246533][ T4083] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.255182][ T4090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.277717][ T4094] loop0: detected capacity change from 0 to 512 [ 56.282958][ T4083] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.295405][ T4083] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 56.305980][ T4083] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 56.315563][ T4083] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.204: Failed to acquire dquot type 1 [ 56.329112][ T4094] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.329937][ T4083] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.204: bg 0: block 40: padding at end of block bitmap is not set [ 56.355214][ T4083] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 56.355573][ T4090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.364347][ T4083] EXT4-fs (loop4): 1 truncate cleaned up [ 56.383229][ T4083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.393608][ T4101] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 56.396521][ T4090] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.421427][ T4094] EXT4-fs (loop0): 1 truncate cleaned up [ 56.432878][ T4094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.441381][ T29] audit: type=1400 audit(1749179168.832:504): avc: denied { read write } for pid=4089 comm="syz.2.205" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.469113][ T29] audit: type=1400 audit(1749179168.832:505): avc: denied { open } for pid=4089 comm="syz.2.205" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.509169][ T1052] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 56.529997][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.576404][ T36] IPVS: starting estimator thread 0... [ 56.584418][ T29] audit: type=1400 audit(1749179168.986:506): avc: denied { ioctl } for pid=4107 comm="syz.4.209" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.617353][ T4103] fido_id[4103]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.632362][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.675102][ T4109] IPVS: using max 2256 ests per chain, 112800 per kthread [ 56.702200][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.718821][ T4115] loop2: detected capacity change from 0 to 1024 [ 56.759165][ T4122] loop0: detected capacity change from 0 to 512 [ 56.763673][ T4115] EXT4-fs: Ignoring removed orlov option [ 56.791232][ T4115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.812228][ T4127] loop3: detected capacity change from 0 to 1024 [ 56.832736][ T4122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.887321][ T4122] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.924409][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.965838][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.128842][ T4142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 57.137999][ T4142] netlink: 'syz.2.221': attribute type 5 has an invalid length. [ 57.162235][ T4142] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.171669][ T4142] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.180516][ T4142] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.190127][ T4142] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.214426][ T4142] vxlan0: entered promiscuous mode [ 57.696319][ T4157] SELinux: ebitmap: truncated map [ 57.703190][ T4157] SELinux: failed to load policy [ 58.026403][ T4178] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 58.065247][ T4180] netlink: 'syz.4.236': attribute type 4 has an invalid length. [ 58.099442][ T4182] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.237'. [ 58.117755][ T4183] netlink: 'syz.4.236': attribute type 4 has an invalid length. [ 58.335377][ T4200] ipvlan2: entered promiscuous mode [ 58.342391][ T4200] bridge0: port 1(ipvlan2) entered blocking state [ 58.349030][ T4200] bridge0: port 1(ipvlan2) entered disabled state [ 58.394132][ T4200] ipvlan2: entered allmulticast mode [ 58.399918][ T4200] bridge0: entered allmulticast mode [ 58.406211][ T4200] ipvlan2: left allmulticast mode [ 58.411439][ T4200] bridge0: left allmulticast mode [ 58.440813][ T4207] xt_hashlimit: max too large, truncated to 1048576 [ 58.458616][ T4205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.469066][ T4205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.563102][ T4212] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 58.577928][ T4205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.588643][ T4205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.614171][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 58.662060][ T4212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.738531][ T4218] loop0: detected capacity change from 0 to 512 [ 58.751918][ T4215] bond1 (unregistering): Released all slaves [ 58.792158][ T4218] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.813101][ T4205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.823745][ T4205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.854355][ T4218] EXT4-fs (loop0): 1 truncate cleaned up [ 58.874596][ T4218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.898175][ T4205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.908791][ T4205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.969434][ T4229] loop1: detected capacity change from 0 to 1024 [ 58.977661][ T4218] netlink: 'syz.0.250': attribute type 13 has an invalid length. [ 58.986227][ T4229] EXT4-fs: Ignoring removed nobh option [ 58.991915][ T4229] EXT4-fs: Ignoring removed bh option [ 59.012119][ T4227] bridge_slave_0: left allmulticast mode [ 59.018080][ T4227] bridge_slave_0: left promiscuous mode [ 59.023973][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.039488][ T4227] bridge_slave_1: left allmulticast mode [ 59.042695][ T4229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.045424][ T4227] bridge_slave_1: left promiscuous mode [ 59.063957][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.068220][ T4234] 9pnet_fd: Insufficient options for proto=fd [ 59.081447][ T4235] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 59.091653][ T4227] bond0: (slave bond_slave_0): Releasing backup interface [ 59.103751][ T4227] bond0: (slave bond_slave_1): Releasing backup interface [ 59.118717][ T4227] team0: Port device team_slave_0 removed [ 59.130571][ T4227] team0: Port device team_slave_1 removed [ 59.138797][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.146577][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.160867][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.168552][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.278318][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.285658][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.330163][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.342877][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.355142][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.401019][ T4218] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.410656][ T4218] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.419973][ T4218] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.429437][ T4218] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.480068][ T4235] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 59.506069][ T4205] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.515258][ T4205] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.524015][ T4244] loop1: detected capacity change from 0 to 2048 [ 59.540443][ T4205] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.548885][ T4205] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.549393][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.561952][ T4205] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.575735][ T4205] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.598381][ T4205] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.606806][ T4205] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.620796][ T4249] loop0: detected capacity change from 0 to 128 [ 59.623418][ T4244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.639518][ T4249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.675126][ T4244] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.258: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 59.708266][ T4249] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz.0.259: iget: checksum invalid [ 59.720027][ T4249] EXT4-fs (loop0): get root inode failed [ 59.725983][ T4249] EXT4-fs (loop0): mount failed [ 59.732438][ T4244] EXT4-fs (loop1): Remounting filesystem read-only [ 59.756938][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.769463][ T4249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 59.813220][ T4259] loop1: detected capacity change from 0 to 512 [ 59.842450][ T4259] 9pnet_fd: Insufficient options for proto=fd [ 59.864369][ T4264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 59.909339][ T4269] loop1: detected capacity change from 0 to 128 [ 60.014704][ T4279] netlink: 'syz.2.272': attribute type 4 has an invalid length. [ 60.042933][ T4279] netlink: 'syz.2.272': attribute type 4 has an invalid length. [ 60.109128][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 60.109220][ T29] audit: type=1326 audit(1749179172.589:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.2.273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f519415e929 code=0x0 [ 60.192016][ T4275] loop1: detected capacity change from 0 to 512 [ 60.250391][ T4275] EXT4-fs: Ignoring removed i_version option [ 60.265735][ T4275] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.277810][ T29] audit: type=1400 audit(1749179172.763:1030): avc: denied { create } for pid=4288 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.301817][ T4275] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.321203][ T29] audit: type=1400 audit(1749179172.783:1031): avc: denied { bind } for pid=4288 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.322977][ T4275] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 60.538525][ T4292] loop1: detected capacity change from 0 to 1024 [ 60.593784][ T4294] ªªªªªª: renamed from tunl0 (while UP) [ 60.752687][ T4302] loop3: detected capacity change from 0 to 512 [ 60.764046][ T4302] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.781167][ T4302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.279: bg 0: block 254: padding at end of block bitmap is not set [ 60.823103][ T4302] EXT4-fs (loop3): Remounting filesystem read-only [ 60.835366][ T29] audit: type=1326 audit(1749179173.323:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 60.859967][ T29] audit: type=1326 audit(1749179173.323:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 60.883693][ T29] audit: type=1326 audit(1749179173.323:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 60.907978][ T29] audit: type=1326 audit(1749179173.323:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 60.932307][ T29] audit: type=1326 audit(1749179173.323:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 60.956331][ T29] audit: type=1326 audit(1749179173.323:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 60.980273][ T29] audit: type=1326 audit(1749179173.323:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.0.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 60.988138][ T4302] EXT4-fs (loop3): 1 truncate cleaned up [ 61.060324][ T4309] loop2: detected capacity change from 0 to 128 [ 61.079001][ T4288] delete_channel: no stack [ 61.093836][ T4309] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.182466][ T2890] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.268363][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 61.301438][ T4315] hsr_slave_0: left promiscuous mode [ 61.308252][ T4315] hsr_slave_1: left promiscuous mode [ 61.365486][ T4321] pim6reg: entered allmulticast mode [ 61.388880][ T4321] pim6reg: left allmulticast mode [ 61.588703][ T4326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 61.597003][ T4326] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.604655][ T4326] vhci_hcd vhci_hcd.0: Device attached [ 61.804113][ T3367] vhci_hcd: vhci_device speed not set [ 61.873155][ T3367] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 61.894559][ T4330] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.033423][ T4330] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.106090][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.310867][ T4327] vhci_hcd: connection reset by peer [ 62.320842][ T52] vhci_hcd: stop threads [ 62.325403][ T52] vhci_hcd: release socket [ 62.329956][ T52] vhci_hcd: disconnect device [ 62.346659][ T4330] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.363044][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.434893][ T4330] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.500489][ T4330] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.514546][ T4330] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.540761][ T4330] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.565157][ T4330] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.149133][ T4360] loop0: detected capacity change from 0 to 512 [ 63.159509][ T4360] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.167831][ T4360] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.298: bg 0: block 248: padding at end of block bitmap is not set [ 63.196381][ T4360] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.298: Failed to acquire dquot type 1 [ 63.209671][ T4360] EXT4-fs (loop0): 1 truncate cleaned up [ 63.263531][ T4360] tmpfs: Unknown parameter 'noquota' [ 63.331941][ T4363] loop0: detected capacity change from 0 to 512 [ 63.359607][ T4363] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 63.445176][ T4365] loop0: detected capacity change from 0 to 8192 [ 63.457931][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 63.497406][ T4365] loop0: p1 p4 < > [ 63.511037][ T4365] loop0: p1 start 4261412864 is beyond EOD, truncated [ 63.792520][ T4375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.815684][ T4377] loop0: detected capacity change from 0 to 2048 [ 63.844887][ T4375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.856389][ T4377] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.904016][ T4375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.971864][ T4375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.086692][ T2890] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 64.111520][ T2890] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 619 with error 117 [ 64.124733][ T2890] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.124733][ T2890] [ 64.425626][ T4395] batman_adv: batadv0: Adding interface: dummy0 [ 64.432232][ T4395] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.482858][ T4395] batman_adv: batadv0: Interface activated: dummy0 [ 64.492117][ T4396] batadv0: mtu less than device minimum [ 64.499730][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.510995][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.525180][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.537335][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.549492][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.560881][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.572208][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.583615][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.595089][ T4396] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 64.642836][ T4398] lo speed is unknown, defaulting to 1000 [ 64.649958][ T4398] lo speed is unknown, defaulting to 1000 [ 64.656470][ T4398] lo speed is unknown, defaulting to 1000 [ 64.662665][ T4398] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.675969][ T4398] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 64.687856][ T4398] lo speed is unknown, defaulting to 1000 [ 64.695593][ T4398] lo speed is unknown, defaulting to 1000 [ 64.704281][ T4398] lo speed is unknown, defaulting to 1000 [ 64.711334][ T4398] lo speed is unknown, defaulting to 1000 [ 64.717905][ T4398] lo speed is unknown, defaulting to 1000 [ 64.795327][ T4377] syz.0.305 (4377) used greatest stack depth: 5984 bytes left [ 64.804831][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 635 with max blocks 2 with error 28 [ 64.817900][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.817900][ T51] [ 64.827754][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 64.833969][ T51] EXT4-fs (loop0): Free/Dirty block details [ 64.840231][ T51] EXT4-fs (loop0): free_blocks=0 [ 64.845214][ T51] EXT4-fs (loop0): dirty_blocks=16 [ 64.851125][ T51] EXT4-fs (loop0): Block reservation details [ 64.857516][ T51] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 64.875573][ T4401] loop3: detected capacity change from 0 to 1024 [ 64.884812][ T4401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.919447][ T4407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.314'. [ 64.933982][ T4405] vlan2: entered allmulticast mode [ 64.939262][ T4405] bond0: entered allmulticast mode [ 64.944597][ T4405] bond_slave_0: entered allmulticast mode [ 64.950577][ T4405] bond_slave_1: entered allmulticast mode [ 64.974099][ T4409] loop3: detected capacity change from 0 to 512 [ 64.992883][ T4409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.095388][ T4409] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.110199][ T4409] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.315: corrupted xattr block 19: overlapping e_value [ 65.135403][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 65.152812][ T4409] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.315: corrupted xattr block 19: overlapping e_value [ 65.167360][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 65.511509][ T4421] lo speed is unknown, defaulting to 1000 [ 65.538649][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 65.538665][ T29] audit: type=1400 audit(1749179178.064:1192): avc: denied { read write } for pid=4424 comm="syz.1.319" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.570858][ T29] audit: type=1400 audit(1749179178.064:1193): avc: denied { open } for pid=4424 comm="syz.1.319" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.594755][ T29] audit: type=1400 audit(1749179178.084:1194): avc: denied { create } for pid=4424 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.671093][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 65.724551][ T4429] vlan2: entered promiscuous mode [ 65.729904][ T4429] bridge0: entered promiscuous mode [ 65.816141][ T29] audit: type=1400 audit(1749179178.388:1195): avc: denied { setopt } for pid=4434 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.917382][ T29] audit: type=1326 audit(1749179178.489:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74814e929 code=0x7ffc0000 [ 65.952627][ T4438] vlan2: entered allmulticast mode [ 65.986130][ T29] audit: type=1326 audit(1749179178.530:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74814e929 code=0x7ffc0000 [ 66.012931][ T29] audit: type=1326 audit(1749179178.530:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74814e929 code=0x7ffc0000 [ 66.039987][ T29] audit: type=1326 audit(1749179178.530:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74814e929 code=0x7ffc0000 [ 66.050666][ T4445] loop2: detected capacity change from 0 to 512 [ 66.065526][ T29] audit: type=1326 audit(1749179178.530:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74814e929 code=0x7ffc0000 [ 66.065575][ T29] audit: type=1326 audit(1749179178.530:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74814e929 code=0x7ffc0000 [ 66.151768][ T4445] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 66.204476][ T4450] loop3: detected capacity change from 0 to 128 [ 66.236201][ T4451] loop0: detected capacity change from 0 to 2048 [ 66.251642][ T4450] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.307965][ T4454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.402009][ T4458] loop1: detected capacity change from 0 to 512 [ 66.439861][ T4458] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.699019][ T4375] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.759303][ T4375] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.774181][ T4375] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.808020][ T4375] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.854332][ T3367] usb 1-1: enqueue for inactive port 0 [ 66.860327][ T3367] usb 1-1: enqueue for inactive port 0 [ 66.887407][ T4490] loop1: detected capacity change from 0 to 512 [ 66.920218][ T4490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.938458][ T4493] loop3: detected capacity change from 0 to 512 [ 66.957633][ T4487] loop2: detected capacity change from 0 to 8192 [ 66.966579][ T4493] EXT4-fs: Ignoring removed i_version option [ 66.980961][ T3367] vhci_hcd: vhci_device speed not set [ 67.017374][ T4493] /dev/loop3: Can't open blockdev [ 67.023332][ T4494] team0: Mode changed to "loadbalance" [ 67.088405][ T4490] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.113161][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 67.203993][ T4500] syzkaller0: entered promiscuous mode [ 67.210366][ T4500] syzkaller0: entered allmulticast mode [ 67.487360][ T4510] Cannot find set identified by id 0 to match [ 67.561117][ T4508] lo speed is unknown, defaulting to 1000 [ 67.747552][ T4516] loop2: detected capacity change from 0 to 8192 [ 67.805860][ T4518] loop1: detected capacity change from 0 to 512 [ 67.873396][ T3311] loop2: p2 p3 p4 [ 67.878701][ T4518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.889628][ T3311] loop2: p2 start 452985600 is beyond EOD, truncated [ 67.897012][ T3311] loop2: p3 size 33554432 extends beyond EOD, truncated [ 67.922631][ T3311] loop2: p4 start 8388607 is beyond EOD, truncated [ 67.940499][ T4516] loop2: p2 p3 p4 [ 67.947766][ T4516] loop2: p2 start 452985600 is beyond EOD, truncated [ 67.955488][ T4516] loop2: p3 size 33554432 extends beyond EOD, truncated [ 67.967545][ T4516] loop2: p4 start 8388607 is beyond EOD, truncated [ 67.994921][ T4518] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.204882][ T4529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 68.239035][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 68.298046][ T4531] loop2: detected capacity change from 0 to 512 [ 68.379119][ T4531] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.401863][ T4531] EXT4-fs (loop2): mount failed [ 69.155726][ T4554] loop2: detected capacity change from 0 to 1024 [ 69.174699][ T4554] EXT4-fs: inline encryption not supported [ 69.182435][ T4554] EXT4-fs: Ignoring removed i_version option [ 69.190467][ T4554] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.204497][ T4554] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.365: lblock 2 mapped to illegal pblock 2 (length 1) [ 69.219957][ T4554] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.365: lblock 0 mapped to illegal pblock 48 (length 1) [ 69.237807][ T4554] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.365: Failed to acquire dquot type 0 [ 69.255991][ T4554] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 69.266432][ T4554] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.365: mark_inode_dirty error [ 69.294498][ T4554] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 69.306294][ T4554] EXT4-fs (loop2): 1 orphan inode deleted [ 69.325362][ T52] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.326359][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 69.342620][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 69.380984][ T4564] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.393159][ T4564] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.413008][ T3331] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 69.430511][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 69.450662][ T3331] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 69.469478][ T3331] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 69.493035][ T4570] loop3: detected capacity change from 0 to 512 [ 69.518534][ T4570] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.654578][ T4585] loop2: detected capacity change from 0 to 1024 [ 69.666199][ T4585] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.822796][ T4597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4597 comm=syz.2.383 [ 69.941204][ T4606] tipc: Started in network mode [ 69.947159][ T4606] tipc: Node identity 4283ed05278f, cluster identity 4711 [ 69.954589][ T4606] tipc: Enabled bearer , priority 0 [ 69.962661][ T4606] syzkaller0: entered promiscuous mode [ 69.968370][ T4606] syzkaller0: entered allmulticast mode [ 69.979632][ T4606] tipc: Resetting bearer [ 69.987460][ T4605] tipc: Resetting bearer [ 70.000958][ T4605] tipc: Disabling bearer [ 70.172045][ T4616] lo speed is unknown, defaulting to 1000 [ 70.245169][ T4624] loop1: detected capacity change from 0 to 128 [ 70.267837][ T4624] FAT-fs (loop1): Directory bread(block 162) failed [ 70.283118][ T4624] FAT-fs (loop1): Directory bread(block 163) failed [ 70.292979][ T4624] FAT-fs (loop1): Directory bread(block 164) failed [ 70.301968][ T4624] FAT-fs (loop1): Directory bread(block 165) failed [ 70.320447][ T4624] FAT-fs (loop1): Directory bread(block 166) failed [ 70.328512][ T4624] FAT-fs (loop1): Directory bread(block 167) failed [ 70.336531][ T4624] FAT-fs (loop1): Directory bread(block 168) failed [ 70.344680][ T4624] FAT-fs (loop1): Directory bread(block 169) failed [ 70.358062][ T4624] FAT-fs (loop1): Directory bread(block 162) failed [ 70.374872][ T4624] FAT-fs (loop1): Directory bread(block 163) failed [ 70.382473][ T4624] syz.1.393: attempt to access beyond end of device [ 70.382473][ T4624] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 70.410413][ T4624] syz.1.393: attempt to access beyond end of device [ 70.410413][ T4624] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 70.462826][ T4631] tipc: Started in network mode [ 70.468074][ T4631] tipc: Node identity ac14140f, cluster identity 4711 [ 70.482386][ T4631] tipc: New replicast peer: 0.0.255.255 [ 70.488573][ T4631] tipc: Enabled bearer , priority 10 [ 70.513550][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 70.513567][ T29] audit: type=1326 audit(1749179183.140:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519415e929 code=0x7ffc0000 [ 70.549311][ T29] audit: type=1326 audit(1749179183.140:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.2.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519415e929 code=0x7ffc0000 [ 70.607315][ T4633] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 70.651294][ T4633] bond1: entered promiscuous mode [ 70.656853][ T4633] bond1: entered allmulticast mode [ 70.664075][ T4633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.679355][ T4633] ip6gretap1: entered promiscuous mode [ 70.686032][ T4633] ip6gretap1: entered allmulticast mode [ 70.694042][ T4633] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 70.713736][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 70.724697][ T4640] netlink: 'syz.2.400': attribute type 30 has an invalid length. [ 70.748860][ T4642] 9pnet: p9_errstr2errno: server reported unknown error [ 70.757226][ T2890] net_ratelimit: 10 callbacks suppressed [ 70.757245][ T2890] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 70.786428][ T29] audit: type=1326 audit(1749179183.402:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 70.792985][ T4646] netlink: 14 bytes leftover after parsing attributes in process `syz.0.403'. [ 70.812280][ T29] audit: type=1326 audit(1749179183.402:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 70.846361][ T29] audit: type=1326 audit(1749179183.402:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 70.860625][ T1466] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 70.871511][ T29] audit: type=1326 audit(1749179183.402:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 70.871542][ T29] audit: type=1326 audit(1749179183.402:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 70.929485][ T29] audit: type=1326 audit(1749179183.402:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 70.929831][ T4646] hsr_slave_0: left promiscuous mode [ 70.953181][ T29] audit: type=1326 audit(1749179183.402:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 70.953239][ T29] audit: type=1326 audit(1749179183.402:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72eda8e929 code=0x7ffc0000 [ 71.008337][ T4646] hsr_slave_1: left promiscuous mode [ 71.046197][ T4649] tipc: Enabling of bearer rejected, failed to enable media [ 71.065839][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 71.074829][ T4640] netlink: 'syz.2.400': attribute type 30 has an invalid length. [ 71.117566][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 71.138900][ T4655] bridge1: port 1(ip6gretap0) entered blocking state [ 71.146115][ T4655] bridge1: port 1(ip6gretap0) entered disabled state [ 71.154866][ T4655] ip6gretap0: entered allmulticast mode [ 71.215308][ T4655] ip6gretap0: entered promiscuous mode [ 71.250030][ T4660] veth3: entered promiscuous mode [ 71.255929][ T4660] bridge1: port 2(veth3) entered blocking state [ 71.263057][ T4660] bridge1: port 2(veth3) entered disabled state [ 71.270976][ T4660] veth3: entered allmulticast mode [ 71.354138][ T4669] loop2: detected capacity change from 0 to 1024 [ 71.388406][ T4669] EXT4-fs mount: 28 callbacks suppressed [ 71.388424][ T4669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.401594][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 71.484612][ T3367] tipc: Node number set to 2886997007 [ 71.523980][ T4669] tmpfs: Bad value for 'mpol' [ 71.531194][ T4669] tipc: New replicast peer: 255.255.255.255 [ 71.537718][ T4669] tipc: Enabled bearer , priority 10 [ 71.556072][ T4686] loop1: detected capacity change from 0 to 1024 [ 71.563582][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.570834][ T4686] EXT4-fs: Ignoring removed nobh option [ 71.578789][ T4686] EXT4-fs: Ignoring removed bh option [ 71.584829][ T4687] loop0: detected capacity change from 0 to 1024 [ 71.592133][ T4687] EXT4-fs: Ignoring removed nobh option [ 71.597928][ T4687] EXT4-fs: Ignoring removed bh option [ 71.638077][ T4686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.669249][ T4687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.714309][ T4696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.419'. [ 71.723416][ T4696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'. [ 71.732375][ T4696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.419'. [ 71.758945][ T4696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.419'. [ 71.790483][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.856430][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.912436][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 72.096403][ T4717] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.151769][ T4717] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.212266][ T4717] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.251791][ T4693] lo speed is unknown, defaulting to 1000 [ 72.281914][ T4717] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.410264][ T4717] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.424766][ T4717] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.440002][ T4717] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.453681][ T4717] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.610878][ T4750] geneve2: entered promiscuous mode [ 73.907661][ T4742] loop0: detected capacity change from 0 to 512 [ 73.934450][ T4742] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.962430][ T4742] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.997172][ T4742] EXT4-fs (loop0): 1 truncate cleaned up [ 74.009109][ T4742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.050643][ T4742] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 74.066488][ T4769] x_tables: ip_tables: osf match: only valid for protocol 6 [ 74.141201][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.369538][ T4791] veth1_macvtap: left promiscuous mode [ 74.375957][ T4791] macsec0: entered promiscuous mode [ 74.497520][ T4799] syzkaller0: entered promiscuous mode [ 74.503474][ T4799] syzkaller0: entered allmulticast mode [ 74.718938][ T4810] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 74.756570][ T4810] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 74.770464][ T4812] lo speed is unknown, defaulting to 1000 [ 74.788442][ T4812] lo speed is unknown, defaulting to 1000 [ 74.795600][ T4812] lo speed is unknown, defaulting to 1000 [ 74.808989][ T4812] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.833246][ T4812] lo speed is unknown, defaulting to 1000 [ 74.848628][ T4812] lo speed is unknown, defaulting to 1000 [ 74.855214][ T4812] lo speed is unknown, defaulting to 1000 [ 74.898142][ T4812] lo speed is unknown, defaulting to 1000 [ 74.904638][ T4812] lo speed is unknown, defaulting to 1000 [ 75.072629][ T4822] loop4: detected capacity change from 0 to 512 [ 75.101448][ T4822] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.122485][ T4822] EXT4-fs (loop4): mount failed [ 75.129191][ T3007] ================================================================== [ 75.137418][ T3007] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 75.144208][ T3007] [ 75.146537][ T3007] write to 0xffff888102416a18 of 8 bytes by task 4822 on cpu 1: [ 75.154261][ T3007] inc_diskseq+0x2d/0x40 [ 75.158532][ T3007] disk_force_media_change+0x9e/0xe0 [ 75.164314][ T3007] lo_release+0x2cb/0x400 [ 75.168937][ T3007] bdev_release+0x373/0x3d0 [ 75.173637][ T3007] blkdev_release+0x15/0x20 [ 75.178283][ T3007] __fput+0x29b/0x650 [ 75.182572][ T3007] fput_close_sync+0x6e/0x120 [ 75.187548][ T3007] __x64_sys_close+0x56/0xf0 [ 75.192253][ T3007] x64_sys_call+0x2747/0x2fb0 [ 75.197119][ T3007] do_syscall_64+0xd2/0x200 [ 75.201733][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.208253][ T3007] [ 75.210599][ T3007] read to 0xffff888102416a18 of 8 bytes by task 3007 on cpu 0: [ 75.218531][ T3007] block_uevent+0x31/0x50 [ 75.223239][ T3007] dev_uevent+0x34c/0x3d0 [ 75.228023][ T3007] uevent_show+0x11a/0x200 [ 75.232541][ T3007] dev_attr_show+0x3f/0xa0 [ 75.237138][ T3007] sysfs_kf_seq_show+0x1a0/0x280 [ 75.242105][ T3007] kernfs_seq_show+0x82/0xa0 [ 75.247518][ T3007] seq_read_iter+0x316/0x940 [ 75.252329][ T3007] kernfs_fop_read_iter+0xc4/0x300 [ 75.257785][ T3007] vfs_read+0x5ca/0x6f0 [ 75.262105][ T3007] ksys_read+0xda/0x1a0 [ 75.266467][ T3007] __x64_sys_read+0x40/0x50 [ 75.271005][ T3007] x64_sys_call+0x2d77/0x2fb0 [ 75.275916][ T3007] do_syscall_64+0xd2/0x200 [ 75.280453][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.286596][ T3007] [ 75.288923][ T3007] value changed: 0x00000000000000b7 -> 0x00000000000000b8 [ 75.296044][ T3007] [ 75.298370][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 75.304610][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 75.316431][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.326603][ T3007] ================================================================== [ 79.310623][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!