last executing test programs: 12m30.603817511s ago: executing program 32 (id=1248): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2b, 0x72, 0x8, 0xffff437d, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x40, 0x7, 0x1ff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1e5042, 0x12) sendfile(r5, r4, 0x0, 0x7ffff03f) 10m22.940009341s ago: executing program 33 (id=3104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x55a, &(0x7f0000000b80)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)}], 0x1) 9m16.405162344s ago: executing program 34 (id=3540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 9m5.655795152s ago: executing program 35 (id=3547): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) 9m1.734254619s ago: executing program 36 (id=3549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioperm(0x7, 0x81, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r3, r1, 0x0, 0x578410eb) sendfile(r3, r1, 0x0, 0x100000000) 8m58.91213992s ago: executing program 37 (id=3551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 8m47.243938131s ago: executing program 38 (id=3555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 5m48.704503705s ago: executing program 0 (id=4403): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m48.38417463s ago: executing program 9 (id=4408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r5}, 0x38) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@getae={0x1ec, 0x1f, 0x100, 0x70bd29, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4d4, 0x2, 0x6c}, @in6=@mcast2, 0x1, 0x3506}, [@address_filter={0x28, 0x1a, {@in=@loopback, @in=@rand_addr=0x64010102, 0x2, 0x0, 0xcd}}, @tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in=@loopback, 0x3507, 0x2, 0x0, 0x18, 0x64cd, 0x8, 0x6}, {{@in=@loopback, 0x4d5, 0x3c}, 0xa, @in6=@empty, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7fff, 0xe0a}, {{@in6=@mcast1, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x3502, 0x3, 0x3, 0x10, 0x2, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x33}, 0xa, @in6=@mcast2, 0x3504, 0x1, 0x2, 0x8, 0x6, 0x2, 0x7}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3506, 0x4, 0x3, 0x9, 0xd, 0xfffffc01, 0x5}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x4d2, 0x3c}, 0x8, @in=@multicast2, 0x3501, 0x4, 0x0, 0x4c, 0xe7, 0xd4, 0x9}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m48.38189422s ago: executing program 0 (id=4410): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xf095, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 5m48.34670073s ago: executing program 5 (id=4411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x3, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m48.248318052s ago: executing program 0 (id=4412): unshare(0x6a040000) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5m48.213565262s ago: executing program 5 (id=4413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 5m48.110381784s ago: executing program 0 (id=4414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r4, &(0x7f00000133c0)=""/4090, 0xffa) 5m48.106789944s ago: executing program 5 (id=4415): r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 5m48.088043274s ago: executing program 7 (id=4416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x1c6}], 0x1}, 0x20000044) 5m46.812609533s ago: executing program 5 (id=4417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}}, 0x0) 5m46.485815917s ago: executing program 7 (id=4418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 5m46.146896043s ago: executing program 0 (id=4419): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x102, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xd093, 0x10, 0x3, 0x13f}, 0x0, &(0x7f0000000300)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x409c, 0x3, 0x28, 0x0, 0x0) 5m46.081277254s ago: executing program 0 (id=4421): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m46.017003555s ago: executing program 5 (id=4423): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xf095, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 5m45.921157796s ago: executing program 7 (id=4424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x3, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m45.831273357s ago: executing program 5 (id=4425): unshare(0x6a040000) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5m45.826462427s ago: executing program 8 (id=4426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 5m44.437991677s ago: executing program 8 (id=4427): r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 5m42.135050951s ago: executing program 9 (id=4428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x1c6}], 0x1}, 0x20000044) 5m38.913132559s ago: executing program 8 (id=4429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 5m36.998223277s ago: executing program 9 (id=4430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r4, &(0x7f00000133c0)=""/4090, 0xffa) 5m34.090538469s ago: executing program 7 (id=4431): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsmount(r0, 0x0, 0x5) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 5m31.376657279s ago: executing program 9 (id=4432): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000100)=0x2) 5m30.416649343s ago: executing program 8 (id=4433): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x102, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xd093, 0x10, 0x3, 0x13f}, 0x0, &(0x7f0000000300)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x409c, 0x3, 0x28, 0x0, 0x0) 5m29.477301336s ago: executing program 39 (id=4421): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m23.503206474s ago: executing program 40 (id=4425): unshare(0x6a040000) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5m21.991967656s ago: executing program 7 (id=4436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) 5m17.66667619s ago: executing program 9 (id=4437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x5, 0xf989, 'b'}]}}}}}}}, 0x0) 5m16.370769339s ago: executing program 8 (id=4438): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x1, 0x4) 5m12.928899649s ago: executing program 7 (id=4439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4040005, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, 0x0, 0x0, 0xc9100114, 0x0, 0x0) 5m8.680194481s ago: executing program 9 (id=4440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x1c6}], 0x1}, 0x20000044) 5m6.917115357s ago: executing program 8 (id=4441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) socket(0x22, 0x2, 0x23) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x23, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m54.212482283s ago: executing program 41 (id=4439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4040005, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, 0x0, 0x0, 0xc9100114, 0x0, 0x0) 4m48.431997417s ago: executing program 42 (id=4440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x1c6}], 0x1}, 0x20000044) 4m45.962820024s ago: executing program 43 (id=4441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) socket(0x22, 0x2, 0x23) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x23, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.558461932s ago: executing program 3 (id=4750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0x10, 0x803, 0x8) getsockname$packet(r1, 0x0, &(0x7f0000000200)) 2.532695043s ago: executing program 3 (id=4751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000140000001100"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x44, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2.510107493s ago: executing program 3 (id=4752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r4, &(0x7f00000133c0)=""/4090, 0xffa) 2.269796906s ago: executing program 2 (id=4757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r4}) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = dup(0xffffffffffffffff) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsmount(r0, 0x0, 0x5) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 955.019756ms ago: executing program 3 (id=4778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r4, &(0x7f00000133c0)=""/4090, 0xffa) 695.590089ms ago: executing program 6 (id=4781): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00"/155], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @mcast2, 0xfffffffd}, {0xa, 0x0, 0x7, @remote}, r2}}, 0x48) 671.05126ms ago: executing program 6 (id=4782): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x112, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 592.006431ms ago: executing program 6 (id=4783): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 516.301952ms ago: executing program 6 (id=4784): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x0, 0x800000000003}, 0x1320, 0xffffffff, 0xf, 0x6, 0x0, 0x28000000, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000180001002dbd7000010000001d0100001500030000000000000000008ca5be073cff296e02001b7108000500f8fd08"], 0x34}}, 0x20008030) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 471.051243ms ago: executing program 2 (id=4785): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 396.280964ms ago: executing program 4 (id=4787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 381.931114ms ago: executing program 6 (id=4788): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 354.708464ms ago: executing program 4 (id=4789): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x4008040) 353.873424ms ago: executing program 1 (id=4790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r2, r3, 0x0) 312.339395ms ago: executing program 4 (id=4791): unshare(0x4000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0x10, 0x803, 0x8) getsockname$packet(r1, 0x0, &(0x7f0000000200)) 311.776705ms ago: executing program 1 (id=4792): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 220.433286ms ago: executing program 4 (id=4793): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 219.826126ms ago: executing program 4 (id=4794): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100000000, 0x3cf2dc53}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000650003080001400000000008000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f00000003c0)={&(0x7f00000002c0)=""/48, 0x30, 0x0, &(0x7f0000000380)=""/48, 0x30}}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) syz_clone(0x24801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="6115b800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x1, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r8, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) 203.734497ms ago: executing program 2 (id=4795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 138.344708ms ago: executing program 2 (id=4796): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x24000894, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 121.128958ms ago: executing program 1 (id=4797): syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000003680)="$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") preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x407650, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xffffffc9, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/17, 0x11}, 0x40010100) r5 = socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x49, 0x3, 0x4, {0xa, 0x4e24, 0x8, @empty, 0x7}}}, 0x32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd}, 0x50) syz_usb_connect$uac1(0x4, 0xa7, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x5, 0xe0, 0xcc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x4}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x4, 0x5, [0x9, 0x1, 0x5, 0x2, 0x39e6a411034315f4], 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x1ff, 0x1, 0x3, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0xa, 0x95, "50db69bd4ba6e9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xb, 0x9, 0x9, {0x7, 0x25, 0x1, 0x1, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7f, 0x6, "cdda7a", '\a'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x0, 0x7, {0x7, 0x25, 0x1, 0x1, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x5, 0x0, 0x6, 0xff, 0x64}, 0x27, &(0x7f0000000840)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x65, 0x7, 0xfff9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xc6, "308de9f40e66d266903103c3611bebed"}]}, 0x4, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x20, &(0x7f0000000900)=@string={0x20, 0x3, "601a48d4127061e124bf83f70ff3b857ccaa1fac36c931fc7bb8054594ae"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc8f1}}]}) 52.190369ms ago: executing program 6 (id=4798): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c000280080001400000000b080002400000000b08000300000000230900010073797a30"], 0xcc}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000003680)="$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") r1 = open(&(0x7f0000000640)='./file2\x00', 0x4000, 0x2) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x407650, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(0x0, r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 5.86493ms ago: executing program 2 (id=4799): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x0, 0x800000000003}, 0x1320, 0xffffffff, 0xf, 0x6, 0x0, 0x28000000, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000180001002dbd7000010000001d0100001500030000000000000000008ca5be073cff296e02001b7108000500f8fd08"], 0x34}}, 0x20008030) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 0s ago: executing program 4 (id=4800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) kernel console output (not intermixed with test programs): 0: port 2(bridge_slave_1) entered blocking state [ 496.782704][T17720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.800198][T17785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.811661][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.820278][T17781] veth1_vlan: entered promiscuous mode [ 496.832360][T17785] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.841369][T17785] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.850180][T17785] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.859039][T17785] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.872943][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.892744][T17793] veth0_vlan: entered promiscuous mode [ 496.900551][T17775] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.909306][T17775] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.918074][T17775] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.927008][T17775] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.957218][T17793] veth1_vlan: entered promiscuous mode [ 496.965343][T17781] veth0_macvtap: entered promiscuous mode [ 496.978556][T17781] veth1_macvtap: entered promiscuous mode [ 496.991974][ T29] audit: type=1400 audit(1752126582.141:9366): avc: denied { mounton } for pid=17775 comm="syz-executor" path="/root/syzkaller.Jg1hLU/syz-tmp" dev="sda1" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 497.024950][ T29] audit: type=1400 audit(1752126582.171:9367): avc: denied { mounton } for pid=17775 comm="syz-executor" path="/root/syzkaller.Jg1hLU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 497.036129][T17793] veth0_macvtap: entered promiscuous mode [ 497.051954][ T29] audit: type=1400 audit(1752126582.171:9368): avc: denied { mounton } for pid=17775 comm="syz-executor" path="/root/syzkaller.Jg1hLU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=46508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 497.059563][T17793] veth1_macvtap: entered promiscuous mode [ 497.091673][ T29] audit: type=1400 audit(1752126582.171:9369): avc: denied { mounton } for pid=17785 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 497.106868][T17781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.114768][ T29] audit: type=1400 audit(1752126582.171:9370): avc: denied { mount } for pid=17785 comm="syz-executor" name="/" dev="gadgetfs" ino=47283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 497.156444][T17781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.191617][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.221035][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.237239][T17781] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.238632][ T29] audit: type=1326 audit(1752126582.381:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.9.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a47e929 code=0x7ffc0000 [ 497.246028][T17781] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.269649][ T29] audit: type=1326 audit(1752126582.381:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.9.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a47e929 code=0x7ffc0000 [ 497.278344][T17781] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.301849][ T29] audit: type=1326 audit(1752126582.381:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.9.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e4a47e929 code=0x7ffc0000 [ 497.301883][ T29] audit: type=1326 audit(1752126582.381:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.9.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a47e929 code=0x7ffc0000 [ 497.301949][ T29] audit: type=1326 audit(1752126582.381:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.9.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a47e929 code=0x7ffc0000 [ 497.381417][T17781] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.405402][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.489237][T17793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.498127][T17793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.506898][T17793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.515725][T17793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.056222][T17987] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 499.064394][T17987] team0: Port device batadv1 added [ 499.111926][T17807] veth0_vlan: entered promiscuous mode [ 499.130785][T17807] veth1_vlan: entered promiscuous mode [ 499.190078][ T5269] IPVS: stop unused estimator thread 0... [ 499.190955][T17807] veth0_macvtap: entered promiscuous mode [ 499.241012][T17807] veth1_macvtap: entered promiscuous mode [ 499.261545][T17807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.296853][T17807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.334562][T17807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.343740][T17807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.352680][T17807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.361626][T17807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.461272][T18024] netlink: 'syz.7.3569': attribute type 1 has an invalid length. [ 500.469151][T18024] netlink: 'syz.7.3569': attribute type 4 has an invalid length. [ 500.477192][T18024] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3569'. [ 500.529433][T13092] IPVS: starting estimator thread 0... [ 500.571779][T18026] net_ratelimit: 10 callbacks suppressed [ 500.571825][T18026] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 500.704816][T18027] IPVS: using max 1920 ests per chain, 96000 per kthread [ 500.728896][T18023] batman_adv: batadv0: Adding interface: erspan1 [ 500.735376][T18023] batman_adv: batadv0: The MTU of interface erspan1 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.760928][T18023] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 502.059462][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 502.059491][ T29] audit: type=1400 audit(1752126587.201:9398): avc: denied { read } for pid=18065 comm="syz.5.3584" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 502.398794][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3586'. [ 502.407820][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3586'. [ 502.483412][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3588'. [ 502.582884][T18081] vlan2: entered allmulticast mode [ 502.588081][T18081] erspan0: entered allmulticast mode [ 502.596799][T18083] loop5: detected capacity change from 0 to 512 [ 502.630698][T18054] delete_channel: no stack [ 502.710201][T18083] EXT4-fs (loop5): 1 truncate cleaned up [ 502.716368][T18083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.793085][T17807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.821031][ T29] audit: type=1400 audit(1752126587.971:9399): avc: denied { ioctl } for pid=18092 comm="syz.9.3596" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 502.850894][ T29] audit: type=1400 audit(1752126588.001:9400): avc: denied { bind } for pid=18094 comm="syz.7.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.967477][T18108] netlink: 'syz.5.3603': attribute type 4 has an invalid length. [ 503.072511][T18114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.120426][ T29] audit: type=1400 audit(1752126588.261:9401): avc: denied { append } for pid=18112 comm="syz.5.3605" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 503.121159][T18114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.939607][ T29] audit: type=1326 audit(1752126589.031:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651508e929 code=0x7fc00000 [ 503.963512][ T29] audit: type=1326 audit(1752126589.031:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f651508e929 code=0x7fc00000 [ 503.987240][ T29] audit: type=1326 audit(1752126589.041:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651508e929 code=0x7fc00000 [ 504.010935][ T29] audit: type=1400 audit(1752126589.041:9405): avc: denied { read } for pid=18127 comm="syz.0.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 504.430045][T18140] bridge0: port 3(syz_tun) entered blocking state [ 504.436543][T18140] bridge0: port 3(syz_tun) entered disabled state [ 504.443179][T18140] syz_tun: entered allmulticast mode [ 504.449100][T18140] syz_tun: entered promiscuous mode [ 504.454567][T18140] bridge0: port 3(syz_tun) entered blocking state [ 504.461061][T18140] bridge0: port 3(syz_tun) entered forwarding state [ 504.515765][T18143] tipc: Started in network mode [ 504.520771][T18143] tipc: Node identity feea9d64b7b1, cluster identity 4711 [ 504.528066][T18143] tipc: Enabled bearer , priority 0 [ 504.621755][T18143] syzkaller0: entered promiscuous mode [ 504.627315][T18143] syzkaller0: entered allmulticast mode [ 504.710813][T18149] tipc: Resetting bearer [ 504.726047][T18142] tipc: Resetting bearer [ 504.736658][T18142] tipc: Disabling bearer [ 504.796293][T18154] tmpfs: Unknown parameter 'usrquota' [ 505.252444][ T29] audit: type=1400 audit(1752126590.401:9406): avc: denied { search } for pid=18155 comm="syz.5.3618" name="/" dev="configfs" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 505.274981][ T29] audit: type=1400 audit(1752126590.401:9407): avc: denied { search } for pid=18155 comm="syz.5.3618" name="/" dev="configfs" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 505.561975][T18161] IPv6: syztnl0: Disabled Multicast RS [ 505.681739][T18165] netlink: 'syz.9.3621': attribute type 10 has an invalid length. [ 505.689678][T18165] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3621'. [ 505.708381][T18169] loop0: detected capacity change from 0 to 128 [ 505.740282][T18165] batman_adv: batadv0: Adding interface: veth1_vlan [ 505.746960][T18165] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.779804][T18169] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 505.792903][T18165] batman_adv: batadv0: Interface activated: veth1_vlan [ 505.815490][T18169] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 505.874442][T18167] tipc: Started in network mode [ 505.879421][T18167] tipc: Node identity e67a3b0d7259, cluster identity 4711 [ 505.886588][T18167] tipc: Enabled bearer , priority 0 [ 506.050087][T18166] tipc: Resetting bearer [ 506.148131][T17793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 506.181442][T18166] tipc: Disabling bearer [ 506.449342][T18187] loop7: detected capacity change from 0 to 1024 [ 506.480145][T18187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.612214][T18187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.931802][T18179] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 507.140035][T18206] loop9: detected capacity change from 0 to 1024 [ 507.369955][T18206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.385679][T18206] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.570523][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 507.570538][ T29] audit: type=1400 audit(1752126592.721:9416): avc: denied { ioctl } for pid=18204 comm="syz.9.3634" path="/18/file1/file1" dev="loop9" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 507.570763][T18206] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.3634: lblock 1 mapped to illegal pblock 1 (length 15) [ 507.618529][T18206] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 507.631138][T18206] EXT4-fs (loop9): This should not happen!! Data will be lost [ 507.631138][T18206] [ 507.692926][T17785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.714337][T18221] delete_channel: no stack [ 507.790601][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.817382][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.859538][T18244] loop9: detected capacity change from 0 to 1024 [ 507.978330][T18244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.039206][T17785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.251772][T18267] loop8: detected capacity change from 0 to 512 [ 508.331774][T18267] EXT4-fs (loop8): 1 truncate cleaned up [ 508.400538][T18267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.519890][T17781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.558020][T18292] loop5: detected capacity change from 0 to 1024 [ 508.583634][T18292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.635786][T17807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.859772][T18323] delete_channel: no stack [ 508.981624][T18344] loop8: detected capacity change from 0 to 1024 [ 509.012289][T18344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.024603][T18344] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.049361][T18344] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.3695: lblock 1 mapped to illegal pblock 1 (length 15) [ 509.065616][T18344] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 509.078162][T18344] EXT4-fs (loop8): This should not happen!! Data will be lost [ 509.078162][T18344] [ 509.088075][T18354] delete_channel: no stack [ 509.103934][T17781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.319297][T18382] loop9: detected capacity change from 0 to 1024 [ 509.330944][T18382] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.392530][T18382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.569290][T18389] loop0: detected capacity change from 0 to 1024 [ 509.632362][T18389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.705776][T18389] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.776054][T18400] loop5: detected capacity change from 0 to 128 [ 509.779800][T18389] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.3714: lblock 1 mapped to illegal pblock 1 (length 15) [ 509.798483][T18389] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 509.811039][T18389] EXT4-fs (loop0): This should not happen!! Data will be lost [ 509.811039][T18389] [ 509.828680][T18400] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 509.843432][T18400] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 509.892208][T17807] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.933610][T17793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.040330][T18426] loop0: detected capacity change from 0 to 1024 [ 510.080772][T18426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.127778][T18438] loop9: detected capacity change from 0 to 128 [ 510.135355][T18426] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.155180][T18438] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.179026][T18438] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 510.220970][T18443] loop8: detected capacity change from 0 to 1024 [ 510.243353][T17785] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.258884][T18443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.271428][T18443] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.340154][ T5269] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 15) [ 510.363779][ T5269] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 510.376289][ T5269] EXT4-fs (loop8): This should not happen!! Data will be lost [ 510.376289][ T5269] [ 510.389421][T17781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.523739][T18471] loop9: detected capacity change from 0 to 1024 [ 510.543635][T18474] loop0: detected capacity change from 0 to 128 [ 510.557601][T18474] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.570366][T18474] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 510.574674][T18471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.644434][T17793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.748555][T18471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.098525][T18496] loop5: detected capacity change from 0 to 1024 [ 511.121503][T18502] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 511.132131][T18502] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 511.144226][T18499] delete_channel: no stack [ 511.153306][T18496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.182607][T18496] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.230722][ T31] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 15) [ 511.247097][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 511.259536][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 511.259536][ T31] [ 511.273334][T17807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.402651][T18519] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 511.409268][T18519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 511.416978][T18519] vhci_hcd vhci_hcd.0: Device attached [ 511.474867][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 511.485176][T18529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 511.508536][T18529] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(16) [ 511.515192][T18529] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 511.522853][T18529] vhci_hcd vhci_hcd.0: Device attached [ 511.599420][T13097] vhci_hcd: vhci_device speed not set [ 511.631367][T18535] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(18) [ 511.638181][T18535] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 511.645923][T18535] vhci_hcd vhci_hcd.0: Device attached [ 511.673822][T13097] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 511.803491][T18519] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(11) [ 511.810187][T18519] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 511.817788][T18519] vhci_hcd vhci_hcd.0: Device attached [ 511.825803][T18529] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 511.832557][T18529] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 511.840367][T18529] vhci_hcd vhci_hcd.0: Device attached [ 511.846676][T18519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 511.855327][T18519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 511.864242][T18519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 511.876051][T18519] vhci_hcd vhci_hcd.0: port 0 already used [ 511.887351][T18541] vhci_hcd: connection closed [ 511.887598][ T37] vhci_hcd: stop threads [ 511.893036][T18536] vhci_hcd: connection closed [ 511.896768][ T37] vhci_hcd: release socket [ 511.897095][T18530] vhci_hcd: connection closed [ 511.901578][ T37] vhci_hcd: disconnect device [ 511.901833][ T37] vhci_hcd: stop threads [ 511.906162][T18521] vhci_hcd: connection reset by peer [ 511.910944][ T37] vhci_hcd: release socket [ 511.915768][T18524] vhci_hcd: connection closed [ 511.920173][ T37] vhci_hcd: disconnect device [ 511.942000][ T37] vhci_hcd: stop threads [ 511.946308][ T37] vhci_hcd: release socket [ 511.950899][ T37] vhci_hcd: disconnect device [ 511.955954][ T37] vhci_hcd: stop threads [ 511.960315][ T37] vhci_hcd: release socket [ 511.964769][ T37] vhci_hcd: disconnect device [ 511.970634][ T37] vhci_hcd: stop threads [ 511.975006][ T37] vhci_hcd: release socket [ 511.979528][ T37] vhci_hcd: disconnect device [ 512.635678][T18587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 512.935803][ T29] audit: type=1400 audit(1752126598.081:9417): avc: denied { ioctl } for pid=18614 comm="syz.9.3808" path="socket:[49379]" dev="sockfs" ino=49379 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 512.961291][T18614] delete_channel: no stack [ 513.152584][ T29] audit: type=1326 audit(1752126598.281:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.176289][ T29] audit: type=1326 audit(1752126598.281:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.199816][ T29] audit: type=1326 audit(1752126598.281:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.223318][ T29] audit: type=1326 audit(1752126598.281:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.246892][ T29] audit: type=1326 audit(1752126598.281:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.270462][ T29] audit: type=1326 audit(1752126598.281:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.293967][ T29] audit: type=1400 audit(1752126598.281:9424): avc: denied { kexec_image_load } for pid=18613 comm="syz.0.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 513.314192][ T29] audit: type=1326 audit(1752126598.291:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.337796][ T29] audit: type=1326 audit(1752126598.291:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18613 comm="syz.0.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7ffc0000 [ 513.478420][T18640] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 513.488980][T18640] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 513.512681][T18643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.550005][T18643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.620161][T18661] loop7: detected capacity change from 0 to 128 [ 513.636454][T18661] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 513.649503][T18661] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 513.698223][T17775] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.061707][T18715] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 515.072177][T18715] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 515.472172][T18736] delete_channel: no stack [ 515.565546][T13118] IPVS: starting estimator thread 0... [ 515.579437][T18750] bridge0: entered promiscuous mode [ 515.592629][T18755] loop9: detected capacity change from 0 to 256 [ 515.605062][T18750] macsec1: entered promiscuous mode [ 515.614968][T18750] bridge0: port 4(macsec1) entered blocking state [ 515.621585][T18750] bridge0: port 4(macsec1) entered disabled state [ 515.629746][T18750] macsec1: entered allmulticast mode [ 515.635176][T18750] bridge0: entered allmulticast mode [ 515.659505][T18753] IPVS: using max 2304 ests per chain, 115200 per kthread [ 515.668110][T18750] macsec1: left allmulticast mode [ 515.673364][T18750] bridge0: left allmulticast mode [ 515.686321][T18750] bridge0: left promiscuous mode [ 515.688153][T18755] FAT-fs (loop9): codepage cp936 not found [ 516.081568][T18772] loop8: detected capacity change from 0 to 1024 [ 516.671673][T18772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.690319][T18792] loop9: detected capacity change from 0 to 7 [ 516.713766][T18771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.863450][T13097] usb 17-1: enqueue for inactive port 0 [ 516.869558][T13097] usb 17-1: enqueue for inactive port 0 [ 516.949459][T13097] vhci_hcd: vhci_device speed not set [ 517.125621][ T3403] IPVS: starting estimator thread 0... [ 517.178653][T18825] bridge0: entered promiscuous mode [ 517.186001][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3893'. [ 517.229502][T18826] IPVS: using max 2352 ests per chain, 117600 per kthread [ 517.248748][T18825] macsec1: entered promiscuous mode [ 517.270214][T18830] loop9: detected capacity change from 0 to 1024 [ 517.290077][T18825] bridge0: port 3(macsec1) entered blocking state [ 517.296712][T18825] bridge0: port 3(macsec1) entered disabled state [ 517.364983][T18825] macsec1: entered allmulticast mode [ 517.370409][T18825] bridge0: entered allmulticast mode [ 517.377846][T18825] macsec1: left allmulticast mode [ 517.382993][T18825] bridge0: left allmulticast mode [ 517.383516][T18830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.402781][T18839] loop8: detected capacity change from 0 to 128 [ 517.402785][T18825] bridge0: left promiscuous mode [ 517.430345][T18839] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 517.443087][T18839] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 517.444809][T18830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.550759][T17781] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 517.596034][T18844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.616112][T18836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.638390][T18836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.659659][T18844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.696260][T18844] loop2: detected capacity change from 0 to 2 [ 517.713049][T18845] delete_channel: no stack [ 517.987197][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 517.987217][ T29] audit: type=1400 audit(1752126603.111:9451): avc: denied { setopt } for pid=18861 comm="syz.5.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 518.029193][T18869] loop9: detected capacity change from 0 to 128 [ 518.046146][T18869] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.058544][T18869] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 518.110025][T18870] delete_channel: no stack [ 518.232155][T17785] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.642593][T18905] loop0: detected capacity change from 0 to 128 [ 518.658130][T18902] delete_channel: no stack [ 518.677727][T18905] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.690230][T18905] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 518.788221][ T29] audit: type=1400 audit(1752126603.841:9452): avc: denied { shutdown } for pid=18908 comm="syz.5.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 518.788755][T17793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.808194][ T29] audit: type=1400 audit(1752126603.871:9453): avc: denied { name_connect } for pid=18908 comm="syz.5.3925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 518.842236][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 519.262039][ T29] audit: type=1400 audit(1752126604.401:9454): avc: denied { map } for pid=18918 comm="syz.0.3930" path="socket:[49857]" dev="sockfs" ino=49857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 519.977390][T18939] delete_channel: no stack [ 519.984772][T18945] loop0: detected capacity change from 0 to 128 [ 520.014658][T18945] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.067924][T18945] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 520.306375][T18948] loop5: detected capacity change from 0 to 764 [ 520.371972][T17793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.421683][ T29] audit: type=1400 audit(1752126605.551:9455): avc: denied { mount } for pid=18947 comm="syz.5.3939" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 520.469476][ T29] audit: type=1400 audit(1752126605.611:9456): avc: denied { unmount } for pid=17807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 520.527906][T18965] xt_hashlimit: max too large, truncated to 1048576 [ 520.621615][T18971] delete_channel: no stack [ 520.649650][ T29] audit: type=1400 audit(1752126605.791:9457): avc: denied { name_connect } for pid=18974 comm="syz.0.3950" dest=513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 520.676093][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3951'. [ 520.899643][T18999] delete_channel: no stack [ 521.195645][T19012] loop0: detected capacity change from 0 to 128 [ 521.281863][T19012] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.321683][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3968'. [ 521.398851][T19012] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 521.447328][ T29] audit: type=1400 audit(1752126606.591:9458): avc: denied { read write } for pid=19018 comm="syz.8.3969" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 521.473261][T13118] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 521.501963][T17793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.504630][T13118] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 521.518438][ T29] audit: type=1400 audit(1752126606.591:9459): avc: denied { open } for pid=19018 comm="syz.8.3969" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 521.623110][T19031] loop5: detected capacity change from 0 to 512 [ 521.652733][T19031] EXT4-fs (loop5): 1 orphan inode deleted [ 521.658976][T19031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.684358][ T1694] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 521.694194][ T1694] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 521.851882][T19031] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.914454][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3977'. [ 522.135451][T17807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.154012][T19048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3981'. [ 522.186107][T19052] loop9: detected capacity change from 0 to 128 [ 522.221682][T19052] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.234538][T19052] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 522.250910][T19058] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 522.277086][T19058] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 522.306688][T17785] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.372661][T19061] delete_channel: no stack [ 522.453283][T19073] loop7: detected capacity change from 0 to 1024 [ 522.522065][T19073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.540116][T19081] loop9: detected capacity change from 0 to 128 [ 522.567444][T19081] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.595454][T17775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.605423][T19081] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 522.656115][T19093] delete_channel: no stack [ 522.740100][T17785] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.903360][T19119] loop7: detected capacity change from 0 to 1024 [ 522.974743][T19119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.038006][T17775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.071565][T19125] delete_channel: no stack [ 523.339599][T19153] loop5: detected capacity change from 0 to 1024 [ 523.361826][T19153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.477603][T17807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.518014][T19156] delete_channel: no stack [ 523.832038][T19185] loop9: detected capacity change from 0 to 1024 [ 524.368290][T19190] loop7: detected capacity change from 0 to 512 [ 524.580834][T19190] __quota_error: 3 callbacks suppressed [ 524.580856][T19190] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 524.590152][T19185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.596870][T19190] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 524.618447][T19190] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4038: Failed to acquire dquot type 0 [ 524.630175][T19191] delete_channel: no stack [ 524.634776][T19190] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 524.645199][T19190] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 524.654691][T19190] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4038: Failed to acquire dquot type 0 [ 524.733477][T19190] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 524.744889][T19190] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 524.754335][T19190] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4038: Failed to acquire dquot type 0 [ 524.771675][T19190] EXT4-fs (loop7): 1 orphan inode deleted [ 524.778347][T19190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.810869][T19190] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.909035][T19214] loop0: detected capacity change from 0 to 256 [ 524.999865][T19214] FAT-fs (loop0): codepage cp862 not found [ 525.159936][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4046'. [ 525.523078][T19240] loop9: detected capacity change from 0 to 1024 [ 526.152694][T19270] loop0: detected capacity change from 0 to 1024 [ 526.859951][T19293] delete_channel: no stack [ 526.949465][ T29] audit: type=1400 audit(1752126612.061:9463): avc: denied { lock } for pid=19301 comm="syz.5.4072" path="socket:[51467]" dev="sockfs" ino=51467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 528.444038][T19330] delete_channel: no stack [ 529.166564][ T29] audit: type=1400 audit(1752126614.261:9464): avc: denied { bind } for pid=19358 comm="syz.0.4105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 529.526177][T19375] delete_channel: no stack [ 530.717232][T19409] delete_channel: no stack [ 530.742713][T19408] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4125'. [ 530.757093][T19404] loop7: detected capacity change from 0 to 8192 [ 530.854645][T19427] netlink: 'syz.8.4133': attribute type 1 has an invalid length. [ 530.862518][T19427] netlink: 'syz.8.4133': attribute type 2 has an invalid length. [ 531.654423][T19448] loop8: detected capacity change from 0 to 128 [ 531.703212][T19448] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 531.794684][T19441] delete_channel: no stack [ 531.877503][T19464] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4148'. [ 532.105607][T19476] loop8: detected capacity change from 0 to 128 [ 532.378047][T19476] syz.8.4151: attempt to access beyond end of device [ 532.378047][T19476] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 532.393929][T19476] syz.8.4151: attempt to access beyond end of device [ 532.393929][T19476] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 532.407902][T19476] syz.8.4151: attempt to access beyond end of device [ 532.407902][T19476] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 532.423492][T19476] syz.8.4151: attempt to access beyond end of device [ 532.423492][T19476] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 532.437773][T19476] syz.8.4151: attempt to access beyond end of device [ 532.437773][T19476] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 532.467314][T19476] syz.8.4151: attempt to access beyond end of device [ 532.467314][T19476] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 532.481008][T19476] syz.8.4151: attempt to access beyond end of device [ 532.481008][T19476] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 532.494647][T19476] syz.8.4151: attempt to access beyond end of device [ 532.494647][T19476] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 532.508325][T19476] syz.8.4151: attempt to access beyond end of device [ 532.508325][T19476] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 532.521898][T19476] syz.8.4151: attempt to access beyond end of device [ 532.521898][T19476] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 532.630111][T19485] loop8: detected capacity change from 0 to 128 [ 532.636873][T19485] EXT4-fs: test_dummy_encryption option not supported [ 532.686823][T19489] loop0: detected capacity change from 0 to 736 [ 532.707177][T19491] loop9: detected capacity change from 0 to 1024 [ 532.714138][T19491] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.720713][T19491] EXT4-fs: Ignoring removed bh option [ 532.756997][T19491] EXT4-fs mount: 8 callbacks suppressed [ 532.757016][T19491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.891611][T17785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.917811][T19513] loop7: detected capacity change from 0 to 256 [ 533.939109][T19513] FAT-fs (loop7): codepage cp936 not found [ 535.433697][T19559] loop9: detected capacity change from 0 to 512 [ 535.465312][T19559] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.478108][T19559] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.511622][T17785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.541372][ T29] audit: type=1400 audit(1752126620.691:9465): avc: denied { watch watch_reads } for pid=19563 comm="syz.9.4180" path="/proc/370" dev="proc" ino=52289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 535.787895][T19575] delete_channel: no stack [ 535.912060][T19591] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 535.912093][ T29] audit: type=1400 audit(1752126621.061:9466): avc: denied { read } for pid=19590 comm="syz.7.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 536.180693][T19604] delete_channel: no stack [ 536.233696][T19609] syzkaller0: entered promiscuous mode [ 536.239285][T19609] syzkaller0: entered allmulticast mode [ 536.414819][T19613] vlan2: entered allmulticast mode [ 536.420132][T19613] erspan0: entered allmulticast mode [ 536.572059][T19626] netlink: 'syz.7.4207': attribute type 4 has an invalid length. [ 536.598429][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4208'. [ 537.155858][ T29] audit: type=1326 audit(1752126622.301:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19640 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7fc00000 [ 537.569118][ T29] audit: type=1326 audit(1752126622.331:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19640 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b8047e929 code=0x7fc00000 [ 537.592744][ T29] audit: type=1326 audit(1752126622.331:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19640 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8047e929 code=0x7fc00000 [ 537.625118][T19648] delete_channel: no stack [ 537.689416][T19657] tipc: Started in network mode [ 537.694429][T19657] tipc: Node identity 3ae06c204117, cluster identity 4711 [ 537.701678][T19657] tipc: Enabled bearer , priority 0 [ 537.709117][T19657] syzkaller0: entered promiscuous mode [ 537.714808][T19657] syzkaller0: entered allmulticast mode [ 537.742834][T19657] tipc: Resetting bearer [ 537.750973][T19656] tipc: Resetting bearer [ 537.762767][T19656] tipc: Disabling bearer [ 538.314183][T19673] netlink: 'syz.5.4223': attribute type 10 has an invalid length. [ 538.322169][T19673] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4223'. [ 538.422864][T19673] batman_adv: batadv0: Adding interface: veth1_vlan [ 538.429583][T19673] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.732149][T19673] batman_adv: batadv0: Interface activated: veth1_vlan [ 538.811974][T19679] tipc: Enabled bearer , priority 0 [ 538.822012][T19678] tipc: Resetting bearer [ 538.855577][T19678] tipc: Disabling bearer [ 539.149651][T19700] bridge0: port 3(syz_tun) entered blocking state [ 539.156321][T19700] bridge0: port 3(syz_tun) entered disabled state [ 539.163244][T19700] syz_tun: entered allmulticast mode [ 539.169234][T19700] syz_tun: entered promiscuous mode [ 539.174832][T19700] bridge0: port 3(syz_tun) entered blocking state [ 539.181341][T19700] bridge0: port 3(syz_tun) entered forwarding state [ 539.836514][T19733] delete_channel: no stack [ 540.553165][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4264'. [ 540.562204][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4264'. [ 540.996661][T19771] delete_channel: no stack [ 541.377828][T19794] delete_channel: no stack [ 541.646646][T19823] delete_channel: no stack [ 541.715383][T19838] tipc: Enabled bearer , priority 0 [ 541.724178][T19838] syzkaller0: entered promiscuous mode [ 541.729759][T19838] syzkaller0: entered allmulticast mode [ 541.748498][T19838] tipc: Resetting bearer [ 541.763713][T19836] tipc: Resetting bearer [ 541.771315][T19836] tipc: Disabling bearer [ 541.793637][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4295'. [ 541.802903][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4295'. [ 542.018983][T19857] delete_channel: no stack [ 542.080467][T19868] tipc: Started in network mode [ 542.085414][T19868] tipc: Node identity 424b2d80bc15, cluster identity 4711 [ 542.092888][T19868] tipc: Enabled bearer , priority 0 [ 542.117400][T19868] syzkaller0: entered promiscuous mode [ 542.123056][T19868] syzkaller0: entered allmulticast mode [ 542.135461][T19868] tipc: Resetting bearer [ 542.143969][T19866] tipc: Resetting bearer [ 542.153051][T19866] tipc: Disabling bearer [ 542.178676][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4311'. [ 542.187718][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4311'. [ 542.282194][T19885] delete_channel: no stack [ 542.943834][T19917] delete_channel: no stack [ 542.954340][T19921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.963643][T19921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.715982][T19948] delete_channel: no stack [ 544.605616][T19979] delete_channel: no stack [ 544.997124][T20005] delete_channel: no stack [ 545.850363][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4387'. [ 545.859444][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4387'. [ 546.103767][T20072] tipc: Enabled bearer , priority 0 [ 546.131044][T20072] syzkaller0: entered promiscuous mode [ 546.136864][T20072] syzkaller0: entered allmulticast mode [ 546.201242][T20072] tipc: Resetting bearer [ 546.212271][T20071] tipc: Resetting bearer [ 546.223360][T20071] tipc: Disabling bearer [ 546.983303][T20096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.011021][T20096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.048970][T20102] tipc: Enabled bearer , priority 0 [ 547.056394][T20102] syzkaller0: entered promiscuous mode [ 547.061983][T20102] syzkaller0: entered allmulticast mode [ 547.071335][T20102] tipc: Resetting bearer [ 547.077988][T20101] tipc: Resetting bearer [ 547.085499][T20101] tipc: Disabling bearer [ 549.282798][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4418'. [ 549.291913][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4418'. [ 549.517906][T20137] tipc: Enabled bearer , priority 0 [ 549.570518][T20140] syzkaller0: entered promiscuous mode [ 549.576129][T20140] syzkaller0: entered allmulticast mode [ 550.836995][T13097] tipc: Node number set to 2485336845 [ 553.462536][T20146] tipc: Resetting bearer [ 554.914790][T20136] tipc: Resetting bearer [ 557.074892][T20136] tipc: Disabling bearer [ 609.319857][T20212] delete_channel: no stack [ 658.799988][T17807] bridge0: port 3(syz_tun) entered disabled state [ 671.245423][T17807] syz_tun (unregistering): left allmulticast mode [ 671.258101][T17807] syz_tun (unregistering): left promiscuous mode [ 671.270848][T17807] bridge0: port 3(syz_tun) entered disabled state [ 759.079902][T20129] bridge0: port 3(syz_tun) entered disabled state [ 761.223020][T20129] syz_tun (unregistering): left allmulticast mode [ 761.238602][T20129] syz_tun (unregistering): left promiscuous mode [ 761.254277][T20129] bridge0: port 3(syz_tun) entered disabled state [ 867.462948][T17710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.548670][T17710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.632155][T17710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.721907][T17710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.772406][T20346] chnl_net:caif_netlink_parms(): no params data found [ 867.894280][T20332] chnl_net:caif_netlink_parms(): no params data found [ 867.912632][T20346] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.919942][T20346] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.927947][T20346] bridge_slave_0: entered allmulticast mode [ 867.934781][T20346] bridge_slave_0: entered promiscuous mode [ 867.941620][T20346] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.948717][T20346] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.956823][T20346] bridge_slave_1: entered allmulticast mode [ 867.963383][T20346] bridge_slave_1: entered promiscuous mode [ 867.970085][T20324] chnl_net:caif_netlink_parms(): no params data found [ 868.003558][T20320] chnl_net:caif_netlink_parms(): no params data found [ 868.029590][T20346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.053164][T20346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.085221][T17710] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.124277][T20346] team0: Port device team_slave_0 added [ 868.130182][T20332] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.137263][T20332] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.144636][T20332] bridge_slave_0: entered allmulticast mode [ 868.151225][T20332] bridge_slave_0: entered promiscuous mode [ 868.176246][T20346] team0: Port device team_slave_1 added [ 868.182156][T20332] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.189357][T20332] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.196622][T20332] bridge_slave_1: entered allmulticast mode [ 868.203229][T20332] bridge_slave_1: entered promiscuous mode [ 868.221662][T17710] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.256287][T20332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.266116][T20324] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.273311][T20324] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.280685][T20324] bridge_slave_0: entered allmulticast mode [ 868.287247][T20324] bridge_slave_0: entered promiscuous mode [ 868.294151][T20324] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.301308][T20324] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.308475][T20324] bridge_slave_1: entered allmulticast mode [ 868.315061][T20324] bridge_slave_1: entered promiscuous mode [ 868.321270][T20320] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.328376][T20320] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.335816][T20320] bridge_slave_0: entered allmulticast mode [ 868.342265][T20320] bridge_slave_0: entered promiscuous mode [ 868.354514][T20346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.361609][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.387783][T20346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.398750][T20350] chnl_net:caif_netlink_parms(): no params data found [ 868.411301][T17710] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.423676][T20332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.448895][T20320] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.456051][T20320] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.463640][T20320] bridge_slave_1: entered allmulticast mode [ 868.470473][T20320] bridge_slave_1: entered promiscuous mode [ 868.477276][T20346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.484316][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.510373][T20346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.536554][T20324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.546556][T20332] team0: Port device team_slave_0 added [ 868.554467][T17710] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.594445][T20324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.604312][T20332] team0: Port device team_slave_1 added [ 868.616897][T20320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.634626][T20346] hsr_slave_0: entered promiscuous mode [ 868.640808][T20346] hsr_slave_1: entered promiscuous mode [ 868.646786][T20346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 868.654446][T20346] Cannot create hsr debugfs directory [ 868.678372][T20332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.685432][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.711529][T20332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.723443][T20320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.751332][T20324] team0: Port device team_slave_0 added [ 868.757661][T20332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.764681][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.790747][T20332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.807383][T20320] team0: Port device team_slave_0 added [ 868.826144][T20350] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.833301][T20350] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.840585][T20350] bridge_slave_0: entered allmulticast mode [ 868.847105][T20350] bridge_slave_0: entered promiscuous mode [ 868.854901][T20324] team0: Port device team_slave_1 added [ 868.870786][T20320] team0: Port device team_slave_1 added [ 868.885059][T20350] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.892286][T20350] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.899478][T20350] bridge_slave_1: entered allmulticast mode [ 868.906056][T20350] bridge_slave_1: entered promiscuous mode [ 868.941231][T20324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.948219][T20324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.974302][T20324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.995731][T20320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.002816][T20320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.029053][T20320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.055684][T20324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.062740][T20324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.088939][T20324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.102084][T20332] hsr_slave_0: entered promiscuous mode [ 869.108153][T20332] hsr_slave_1: entered promiscuous mode [ 869.114136][T20332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.121752][T20332] Cannot create hsr debugfs directory [ 869.133646][T17710] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.145096][T20320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.152223][T20320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.178275][T20320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.199106][T20350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.221526][T20350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.244686][T20320] hsr_slave_0: entered promiscuous mode [ 869.251016][T20320] hsr_slave_1: entered promiscuous mode [ 869.256840][T20320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.264557][T20320] Cannot create hsr debugfs directory [ 869.272155][T17710] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.300436][T20350] team0: Port device team_slave_0 added [ 869.334596][T20350] team0: Port device team_slave_1 added [ 869.343049][T17710] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.356495][T20324] hsr_slave_0: entered promiscuous mode [ 869.362877][T20324] hsr_slave_1: entered promiscuous mode [ 869.368933][T20324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.376695][T20324] Cannot create hsr debugfs directory [ 869.397624][T20350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.404713][T20350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.430883][T20350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.457052][T17710] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.469327][T20350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.476306][T20350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.502416][T20350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.569510][T20350] hsr_slave_0: entered promiscuous mode [ 869.575822][T20350] hsr_slave_1: entered promiscuous mode [ 869.581815][T20350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.589956][T20350] Cannot create hsr debugfs directory [ 869.693385][T17710] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.752157][T17710] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.821728][T17710] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.921483][T17710] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.998277][T17710] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.027358][T20332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 870.038350][T17710] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.049862][T20332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 870.060142][T20332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 870.068901][T20332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 870.102956][T17710] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.118230][T20332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.131630][T20332] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.144167][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.151394][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.170266][T20230] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.177397][T20230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.203428][T17710] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.265200][T20332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.320255][T17710] bridge_slave_1: left allmulticast mode [ 870.325985][T17710] bridge_slave_1: left promiscuous mode [ 870.331804][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.350276][T17710] bridge_slave_0: left allmulticast mode [ 870.356008][T17710] bridge_slave_0: left promiscuous mode [ 870.361759][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.370607][T17710] bridge_slave_1: left allmulticast mode [ 870.376379][T17710] bridge_slave_1: left promiscuous mode [ 870.382122][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.390129][T17710] bridge_slave_0: left allmulticast mode [ 870.395798][T17710] bridge_slave_0: left promiscuous mode [ 870.401518][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.409978][T17710] bridge_slave_1: left allmulticast mode [ 870.415695][T17710] bridge_slave_1: left promiscuous mode [ 870.421479][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.429054][T17710] bridge_slave_0: left allmulticast mode [ 870.434761][T17710] bridge_slave_0: left promiscuous mode [ 870.440578][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.448836][T17710] bridge_slave_1: left allmulticast mode [ 870.454521][T17710] bridge_slave_1: left promiscuous mode [ 870.460284][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.468070][T17710] bridge_slave_0: left allmulticast mode [ 870.473815][T17710] bridge_slave_0: left promiscuous mode [ 870.479608][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.488038][T17710] bridge_slave_1: left allmulticast mode [ 870.493741][T17710] bridge_slave_1: left promiscuous mode [ 870.499545][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.508062][T17710] bridge_slave_0: left allmulticast mode [ 870.513829][T17710] bridge_slave_0: left promiscuous mode [ 870.519598][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.881736][T17710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.891729][T17710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.901806][T17710] bond0 (unregistering): Released all slaves [ 870.910275][T17710] bond1 (unregistering): Released all slaves [ 870.952286][T17710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.962192][T17710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.971931][T17710] bond0 (unregistering): Released all slaves [ 870.980719][T17710] bond1 (unregistering): Released all slaves [ 870.998676][T17710] batman_adv: batadv0: Removing interface: erspan1 [ 871.081511][T17710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.091422][T17710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.101267][T17710] bond0 (unregistering): Released all slaves [ 871.161901][T17710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.172272][T17710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.182100][T17710] bond0 (unregistering): Released all slaves [ 871.191175][T17710] bond1 (unregistering): Released all slaves [ 871.298471][T17710] bond2 (unregistering): Released all slaves [ 871.363019][T17710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.372806][T17710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.383923][T17710] bond0 (unregistering): Released all slaves [ 871.393076][T17710] bond1 (unregistering): Released all slaves [ 871.544964][T17710] tipc: Left network mode [ 871.574988][T17710] tipc: Left network mode [ 871.595999][T17710] tipc: Left network mode [ 871.603722][T20416] chnl_net:caif_netlink_parms(): no params data found [ 871.614658][T17710] tipc: Left network mode [ 871.626272][T17710] hsr_slave_0: left promiscuous mode [ 871.632589][T17710] hsr_slave_1: left promiscuous mode [ 871.638322][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.645827][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.653776][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.661323][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.671023][T17710] hsr_slave_0: left promiscuous mode [ 871.676733][T17710] hsr_slave_1: left promiscuous mode [ 871.682644][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.690185][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.697684][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.705236][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.714339][T17710] hsr_slave_0: left promiscuous mode [ 871.720590][T17710] hsr_slave_1: left promiscuous mode [ 871.726141][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.733695][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.741415][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.748874][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.758197][T17710] hsr_slave_0: left promiscuous mode [ 871.764005][T17710] hsr_slave_1: left promiscuous mode [ 871.769766][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.777205][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.784796][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.792323][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.799923][T17710] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 871.807002][T17710] batman_adv: batadv0: Removing interface: veth1_vlan [ 871.815845][T17710] hsr_slave_0: left promiscuous mode [ 871.821738][T17710] hsr_slave_1: left promiscuous mode [ 871.827391][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.834873][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.842659][T17710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.850131][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.857833][T17710] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 871.865005][T17710] batman_adv: batadv0: Removing interface: veth1_vlan [ 871.881195][T17710] veth1_macvtap: left promiscuous mode [ 871.886830][T17710] veth0_macvtap: left promiscuous mode [ 871.892412][T17710] veth1_vlan: left promiscuous mode [ 871.897745][T17710] veth0_vlan: left promiscuous mode [ 871.903607][T17710] veth1_macvtap: left promiscuous mode [ 871.909143][T17710] veth0_macvtap: left promiscuous mode [ 871.914740][T17710] veth1_vlan: left promiscuous mode [ 871.920148][T17710] veth0_vlan: left promiscuous mode [ 871.925940][T17710] veth1_macvtap: left promiscuous mode [ 871.931454][T17710] veth0_macvtap: left promiscuous mode [ 871.937016][T17710] veth1_vlan: left promiscuous mode [ 871.942307][T17710] veth0_vlan: left promiscuous mode [ 871.948063][T17710] veth1_macvtap: left promiscuous mode [ 871.953600][T17710] veth0_macvtap: left promiscuous mode [ 871.959099][T17710] veth1_vlan: left promiscuous mode [ 871.964444][T17710] veth0_vlan: left promiscuous mode [ 871.970193][T17710] veth1_macvtap: left promiscuous mode [ 871.975826][T17710] veth0_macvtap: left promiscuous mode [ 871.981457][T17710] veth1_vlan: left promiscuous mode [ 871.986694][T17710] veth0_vlan: left promiscuous mode [ 872.148980][T17710] team0 (unregistering): Port device batadv1 removed [ 872.181151][T17710] team0 (unregistering): Port device team_slave_1 removed [ 872.191013][T17710] team0 (unregistering): Port device team_slave_0 removed [ 872.243556][T17710] team0 (unregistering): Port device team_slave_1 removed [ 872.253298][T17710] team0 (unregistering): Port device team_slave_0 removed [ 872.310804][T17710] team0 (unregistering): Port device team_slave_1 removed [ 872.321359][T17710] team0 (unregistering): Port device team_slave_0 removed [ 872.375715][T17710] team0 (unregistering): Port device team_slave_1 removed [ 872.385716][T17710] team0 (unregistering): Port device team_slave_0 removed [ 872.439560][T17710] team0 (unregistering): Port device team_slave_1 removed [ 872.449246][T17710] team0 (unregistering): Port device team_slave_0 removed [ 872.508900][T20416] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.516070][T20416] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.523630][T20416] bridge_slave_0: entered allmulticast mode [ 872.530516][T20416] bridge_slave_0: entered promiscuous mode [ 872.537300][T20416] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.544410][T20416] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.551706][T20416] bridge_slave_1: entered allmulticast mode [ 872.558407][T20416] bridge_slave_1: entered promiscuous mode [ 872.568726][T20332] veth0_vlan: entered promiscuous mode [ 872.583694][T20332] veth1_vlan: entered promiscuous mode [ 872.599640][T20416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.610144][T20416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.644011][T20324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 872.653787][T20416] team0: Port device team_slave_0 added [ 872.660875][T20416] team0: Port device team_slave_1 added [ 872.675331][T20324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 872.684381][T20324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 872.699093][T20416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.706170][T20416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.732180][T20416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.743543][T20416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.750639][T20416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.776687][T20416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.787568][T20324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 872.801381][T20332] veth0_macvtap: entered promiscuous mode [ 872.822576][T20332] veth1_macvtap: entered promiscuous mode [ 872.845990][T20346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 872.856761][T20416] hsr_slave_0: entered promiscuous mode [ 872.863247][T20416] hsr_slave_1: entered promiscuous mode [ 872.874539][T20346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 872.883882][T20346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 872.892758][T20346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 872.915404][T20332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.943689][T20332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.962136][T20332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.970995][T20332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.979761][T20332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.988550][T20332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.060862][T20346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.073950][T20324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.081223][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 873.086446][T20324] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.090215][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 873.110981][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.118075][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.127512][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.134632][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.153802][T20346] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.160994][ T29] audit: type=1400 audit(1752126958.301:9470): avc: denied { append } for pid=20463 comm="syz.4.4445" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 873.188715][T20324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 873.199238][T20324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.211407][T20242] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.218520][T20242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.230446][T20242] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.237623][T20242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.297934][T20468] loop4: detected capacity change from 0 to 512 [ 873.304491][T20324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.332437][T20468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 873.367470][T20346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.375558][T20468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.388486][T20350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 873.390473][T20468] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.407330][T20350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 873.415889][T20468] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4445: corrupted xattr block 19: overlapping e_value [ 873.422317][T20350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 873.438569][T20468] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 873.447747][T20468] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4445: corrupted xattr block 19: overlapping e_value [ 873.464219][T20468] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 873.473822][T20468] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4445: corrupted xattr block 19: overlapping e_value [ 873.476627][ T29] audit: type=1400 audit(1752126958.621:9471): avc: denied { setattr } for pid=20463 comm="syz.4.4445" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 873.488486][T20350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 873.514119][T20484] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4445: corrupted xattr block 19: overlapping e_value [ 873.531220][T20484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 873.540343][T20484] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4445: corrupted xattr block 19: overlapping e_value [ 873.540629][ T29] audit: type=1400 audit(1752126958.691:9472): avc: denied { write } for pid=20463 comm="syz.4.4445" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 873.555227][T20484] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4445: corrupted xattr block 19: overlapping e_value [ 873.601715][T20324] veth0_vlan: entered promiscuous mode [ 873.607702][T20484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 873.617668][T20416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 873.620623][ T29] audit: type=1400 audit(1752126958.771:9473): avc: denied { open } for pid=20463 comm="syz.4.4445" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 873.648905][T20416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 873.658411][T20416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 873.667787][T20416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 873.682726][T20324] veth1_vlan: entered promiscuous mode [ 873.712816][T20324] veth0_macvtap: entered promiscuous mode [ 873.745515][T20346] veth0_vlan: entered promiscuous mode [ 873.772063][T20346] veth1_vlan: entered promiscuous mode [ 873.786296][T20350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.804312][T20346] veth0_macvtap: entered promiscuous mode [ 873.813392][T20350] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.823960][T20242] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.831196][T20242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.842017][T20346] veth1_macvtap: entered promiscuous mode [ 873.854270][T20416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.863377][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.870494][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.887022][T20416] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.896396][T20346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.908276][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.915414][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.924926][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.932058][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.945165][T20346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.962431][T20346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.971432][T20346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.980253][T20346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.988967][T20346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.087944][T17710] IPVS: stop unused estimator thread 0... [ 874.096966][T17710] IPVS: stop unused estimator thread 0... [ 874.102396][T20416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.135501][T20350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.146022][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.159538][T17710] IPVS: stop unused estimator thread 0... [ 874.213433][T20524] netlink: 'syz.4.4446': attribute type 1 has an invalid length. [ 874.292120][ T29] audit: type=1326 audit(1752126959.421:9474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20528 comm="syz.4.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad03fe929 code=0x7ffc0000 [ 874.292202][ T29] audit: type=1326 audit(1752126959.421:9475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20528 comm="syz.4.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ad03fe929 code=0x7ffc0000 [ 874.292299][ T29] audit: type=1326 audit(1752126959.421:9476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20528 comm="syz.4.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad03fe929 code=0x7ffc0000 [ 874.292336][ T29] audit: type=1326 audit(1752126959.421:9477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20528 comm="syz.4.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f0ad03fe929 code=0x7ffc0000 [ 874.292440][ T29] audit: type=1326 audit(1752126959.431:9478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20528 comm="syz.4.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad03fe929 code=0x7ffc0000 [ 874.292488][ T29] audit: type=1326 audit(1752126959.431:9479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20528 comm="syz.4.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ad03fe929 code=0x7ffc0000 [ 874.408444][T20350] veth0_vlan: entered promiscuous mode [ 874.522730][T20350] veth1_vlan: entered promiscuous mode [ 874.569351][T17710] bridge_slave_1: left allmulticast mode [ 874.575184][T17710] bridge_slave_1: left promiscuous mode [ 874.581029][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.598468][T17710] bridge_slave_0: left allmulticast mode [ 874.604311][T17710] bridge_slave_0: left promiscuous mode [ 874.610062][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.639415][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 874.648349][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 874.663197][T17710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.673378][T17710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.684670][T17710] bond0 (unregistering): Released all slaves [ 874.704792][T20416] veth0_vlan: entered promiscuous mode [ 874.713674][T20350] veth0_macvtap: entered promiscuous mode [ 874.731358][T17710] hsr_slave_0: left promiscuous mode [ 874.743186][T17710] hsr_slave_1: left promiscuous mode [ 874.748993][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.757134][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.790405][T17710] team0 (unregistering): Port device team_slave_1 removed [ 874.802350][T17710] team0 (unregistering): Port device team_slave_0 removed [ 874.842642][T20416] veth1_vlan: entered promiscuous mode [ 874.850199][T20350] veth1_macvtap: entered promiscuous mode [ 874.876318][T20550] team0 (unregistering): Port device team_slave_0 removed [ 874.887255][T20550] team0 (unregistering): Port device team_slave_1 removed [ 874.904883][T20350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.914348][T20416] veth0_macvtap: entered promiscuous mode [ 874.922163][T20416] veth1_macvtap: entered promiscuous mode [ 874.934187][T20350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.954224][T20416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.963375][T20350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.972291][T20350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.981179][T20350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.990056][T20350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.009736][T20416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.030614][T20416] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.039471][T20416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.048184][T20416] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.057175][T20416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.125125][T20535] chnl_net:caif_netlink_parms(): no params data found [ 875.248398][T20535] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.255594][T20535] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.264238][T20535] bridge_slave_0: entered allmulticast mode [ 875.273758][T20535] bridge_slave_0: entered promiscuous mode [ 875.280923][T20535] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.288172][T20535] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.296051][T20535] bridge_slave_1: entered allmulticast mode [ 875.302726][T20535] bridge_slave_1: entered promiscuous mode [ 875.323857][T20535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.334777][T20535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.355900][T20535] team0: Port device team_slave_0 added [ 875.363165][T20535] team0: Port device team_slave_1 added [ 875.384338][T20535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.391400][T20535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.417456][T20535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.430823][T20535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.437838][T20535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.463951][T20535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.495502][T20535] hsr_slave_0: entered promiscuous mode [ 875.501727][T20535] hsr_slave_1: entered promiscuous mode [ 875.507747][T20535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.515825][T20535] Cannot create hsr debugfs directory [ 875.660193][T20587] SELinux: failed to load policy [ 876.527442][T13119] IPVS: starting estimator thread 0... [ 876.619363][T20600] IPVS: using max 1632 ests per chain, 81600 per kthread [ 876.692909][T20594] loop3: detected capacity change from 0 to 8192 [ 876.764399][T20592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4458'. [ 876.819730][T20607] Restarting kernel threads ... [ 876.824857][T20607] Done restarting kernel threads. [ 876.838548][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4463'. [ 876.847698][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4463'. [ 876.901234][T20615] loop4: detected capacity change from 0 to 2048 [ 876.912598][T20615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.943282][T20615] bridge0: port 3(netdevsim1) entered blocking state [ 876.950414][T20615] bridge0: port 3(netdevsim1) entered disabled state [ 876.957666][T20615] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 876.965988][T20615] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 876.975226][T20615] bridge0: port 3(netdevsim1) entered blocking state [ 876.982006][T20615] bridge0: port 3(netdevsim1) entered forwarding state [ 877.022482][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.297287][T17710] bridge_slave_1: left allmulticast mode [ 877.303180][T17710] bridge_slave_1: left promiscuous mode [ 877.309070][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.317115][T17710] bridge_slave_0: left allmulticast mode [ 877.322828][T17710] bridge_slave_0: left promiscuous mode [ 877.328466][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.533931][T17710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.555878][T17710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.572726][T17710] bond0 (unregistering): Released all slaves [ 877.706463][T17710] hsr_slave_0: left promiscuous mode [ 877.712706][T17710] hsr_slave_1: left promiscuous mode [ 877.719098][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.735521][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.796869][T17710] veth0_macvtap: left promiscuous mode [ 877.810241][T17710] veth1_vlan: left promiscuous mode [ 877.856850][T17710] veth0_vlan: left promiscuous mode [ 878.060929][T17710] team0 (unregistering): Port device team_slave_1 removed [ 878.073731][T17710] team0 (unregistering): Port device team_slave_0 removed [ 878.230198][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 878.230217][ T29] audit: type=1326 audit(1752126963.371:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20634 comm="syz.2.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8165e929 code=0x7ffc0000 [ 878.263398][ T29] audit: type=1326 audit(1752126963.381:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20634 comm="syz.2.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8165e929 code=0x7ffc0000 [ 878.335602][ T29] audit: type=1400 audit(1752126963.481:9630): avc: denied { read write } for pid=20638 comm="syz.2.4471" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 878.360142][ T29] audit: type=1400 audit(1752126963.481:9631): avc: denied { open } for pid=20638 comm="syz.2.4471" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 878.389358][ T29] audit: type=1400 audit(1752126963.531:9632): avc: denied { create } for pid=20638 comm="syz.2.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 878.456999][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'. [ 878.471685][ T29] audit: type=1400 audit(1752126963.601:9633): avc: denied { create } for pid=20642 comm="syz.2.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 878.553244][T20643] loop2: detected capacity change from 0 to 512 [ 878.560214][T20643] ext4: Unknown parameter 'subj_user' [ 878.566641][T20535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 878.576721][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4475'. [ 878.585875][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4475'. [ 878.601198][T20535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 878.645236][ T29] audit: type=1400 audit(1752126963.791:9634): avc: denied { read write } for pid=20642 comm="syz.2.4473" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 878.669283][ T29] audit: type=1400 audit(1752126963.791:9635): avc: denied { open } for pid=20642 comm="syz.2.4473" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 878.736271][T20653] loop6: detected capacity change from 0 to 8192 [ 878.736959][T20535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 878.743722][T20652] loop3: detected capacity change from 0 to 2048 [ 878.784316][ T29] audit: type=1326 audit(1752126963.931:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.2.4478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e8165e929 code=0x0 [ 878.812642][T20535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 878.825674][T20658] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4476'. [ 878.837993][T20659] netlink: 'syz.2.4478': attribute type 3 has an invalid length. [ 878.872146][T20652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.906362][T20652] bridge0: port 3(netdevsim1) entered blocking state [ 878.913435][T20652] bridge0: port 3(netdevsim1) entered disabled state [ 878.920376][T20652] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 878.928598][T20652] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 878.936240][T20652] bridge0: port 3(netdevsim1) entered blocking state [ 878.943093][T20652] bridge0: port 3(netdevsim1) entered forwarding state [ 878.986930][T20346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.991279][T20535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.007593][T20535] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.019692][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.026814][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.038129][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.045344][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.098831][T20676] loop6: detected capacity change from 0 to 128 [ 879.225192][T20535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.318587][T20535] veth0_vlan: entered promiscuous mode [ 879.329172][T20535] veth1_vlan: entered promiscuous mode [ 879.346879][T20535] veth0_macvtap: entered promiscuous mode [ 879.358030][T20535] veth1_macvtap: entered promiscuous mode [ 879.372503][T20535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.384091][T20535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.396075][T20535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.404948][T20535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.413738][T20535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.422486][T20535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.456597][T20683] team0 (unregistering): Port device team_slave_0 removed [ 879.464507][ T29] audit: type=1326 audit(1752126964.601:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20698 comm="syz.4.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad03fe929 code=0x7ffc0000 [ 879.492967][T20683] team0 (unregistering): Port device team_slave_1 removed [ 879.638126][T20715] loop4: detected capacity change from 0 to 128 [ 880.128134][T20724] loop3: detected capacity change from 0 to 1024 [ 880.174692][T20724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.174900][T20724] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.230871][T20346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.314923][T20739] loop2: detected capacity change from 0 to 8192 [ 880.332897][T20746] loop3: detected capacity change from 0 to 128 [ 880.698556][T20760] loop3: detected capacity change from 0 to 2048 [ 880.746993][T20760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.037235][T20346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.091753][T20771] loop6: detected capacity change from 0 to 1024 [ 881.123118][T20771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.135550][T20771] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.163670][T20416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.344376][T13987] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 881.374495][T13987] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 881.393641][T20803] loop9: detected capacity change from 0 to 7 [ 881.418346][T20805] loop6: detected capacity change from 0 to 1024 [ 881.463589][T20805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.500734][T20805] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.570875][T20416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.639537][T20819] Restarting kernel threads ... [ 881.647070][T20823] bridge0: port 3(netdevsim1) entered blocking state [ 881.649444][T20819] Done restarting kernel threads. [ 881.653915][T20823] bridge0: port 3(netdevsim1) entered disabled state [ 881.671533][T20823] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 881.680059][T20823] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 881.687765][T20823] bridge0: port 3(netdevsim1) entered blocking state [ 881.694658][T20823] bridge0: port 3(netdevsim1) entered forwarding state [ 882.124891][T20841] team0 (unregistering): Port device team_slave_0 removed [ 882.134434][T20841] team0 (unregistering): Port device team_slave_1 removed [ 882.141900][T20862] loop6: detected capacity change from 0 to 8192 [ 882.202449][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4552'. [ 882.419557][T20881] Restarting kernel threads ... [ 882.428428][T20881] Done restarting kernel threads. [ 882.851445][T20900] loop3: detected capacity change from 0 to 128 [ 883.075940][T20904] loop2: detected capacity change from 0 to 2048 [ 883.197323][T20904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.274733][T20911] bio_check_eod: 56 callbacks suppressed [ 883.274752][T20911] syz.3.4561: attempt to access beyond end of device [ 883.274752][T20911] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 883.296296][T20911] syz.3.4561: attempt to access beyond end of device [ 883.296296][T20911] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 883.298271][T20904] bridge0: port 3(netdevsim1) entered blocking state [ 883.309946][T20911] syz.3.4561: attempt to access beyond end of device [ 883.309946][T20911] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 883.316694][T20904] bridge0: port 3(netdevsim1) entered disabled state [ 883.330170][T20911] syz.3.4561: attempt to access beyond end of device [ 883.330170][T20911] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 883.350781][T20904] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 883.360897][T20904] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 883.368568][T20904] bridge0: port 3(netdevsim1) entered blocking state [ 883.375427][T20904] bridge0: port 3(netdevsim1) entered forwarding state [ 883.388055][T20911] syz.3.4561: attempt to access beyond end of device [ 883.388055][T20911] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 883.411417][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 883.411462][ T29] audit: type=1326 audit(1752126968.561:9823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.468834][T20911] syz.3.4561: attempt to access beyond end of device [ 883.468834][T20911] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 883.494865][ T29] audit: type=1326 audit(1752126968.561:9824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.518558][ T29] audit: type=1326 audit(1752126968.561:9825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.538788][T20911] syz.3.4561: attempt to access beyond end of device [ 883.538788][T20911] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 883.542416][ T29] audit: type=1326 audit(1752126968.561:9826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.557604][T20911] syz.3.4561: attempt to access beyond end of device [ 883.557604][T20911] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 883.579274][ T29] audit: type=1326 audit(1752126968.561:9827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.579312][ T29] audit: type=1326 audit(1752126968.561:9828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.619921][T20911] syz.3.4561: attempt to access beyond end of device [ 883.619921][T20911] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 883.639988][ T29] audit: type=1326 audit(1752126968.561:9829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.655218][T20911] syz.3.4561: attempt to access beyond end of device [ 883.655218][T20911] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 883.676966][ T29] audit: type=1326 audit(1752126968.591:9830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.709573][T20909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4565'. [ 883.713807][ T29] audit: type=1326 audit(1752126968.591:9831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.746534][ T29] audit: type=1326 audit(1752126968.591:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20915 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26b12e929 code=0x7ffc0000 [ 883.811788][T20350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.964659][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4576'. [ 884.036942][T20941] loop4: detected capacity change from 0 to 512 [ 884.044032][T20941] ext4: Unknown parameter 'subj_user' [ 884.662347][T20968] loop4: detected capacity change from 0 to 8192 [ 884.755206][T20961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4583'. [ 884.849231][T20991] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4596'. [ 884.973204][T20997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4599'. [ 885.002957][T20998] netlink: 'syz.6.4600': attribute type 27 has an invalid length. [ 885.077168][T20998] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.084394][T20998] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.160963][T20998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.183362][T20998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.224140][T20998] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.233536][T20998] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.242883][T20998] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.252011][T20998] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.280277][T21004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.297864][T21004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 885.445374][T21017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4607'. [ 885.465983][T21032] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4610'. [ 885.523441][T21038] loop4: detected capacity change from 0 to 2048 [ 885.543081][T21038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.599592][T21043] Restarting kernel threads ... [ 885.604750][T21043] Done restarting kernel threads. [ 885.659925][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.891860][T21076] loop4: detected capacity change from 0 to 8192 [ 885.910833][T21072] loop6: detected capacity change from 0 to 8192 [ 885.967564][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4624'. [ 886.145823][T21085] loop3: detected capacity change from 0 to 2048 [ 886.286864][T21085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.410636][T21110] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 886.439887][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 886.448844][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 886.511064][T20346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.892088][T21139] Restarting kernel threads ... [ 886.901758][T21139] Done restarting kernel threads. [ 887.336392][T21150] loop6: detected capacity change from 0 to 1024 [ 887.502146][T21150] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.644840][T21150] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.710093][T20416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.771929][T21158] loop2: detected capacity change from 0 to 8192 [ 887.837902][T21164] loop6: detected capacity change from 0 to 2048 [ 887.874905][T21164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.026666][T21164] bridge0: port 3(netdevsim1) entered blocking state [ 888.033698][T21164] bridge0: port 3(netdevsim1) entered disabled state [ 888.076413][T21164] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 888.091090][T21164] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 888.122268][T21184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.156428][T20416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.276429][T21197] loop6: detected capacity change from 0 to 2048 [ 888.284178][T21199] loop3: detected capacity change from 0 to 1024 [ 888.309764][T21199] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 888.327541][T21197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.477176][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 888.477195][ T29] audit: type=1400 audit(1752126973.621:10020): avc: denied { shutdown } for pid=21216 comm="syz.1.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 888.527057][ T29] audit: type=1400 audit(1752126973.621:10021): avc: denied { getopt } for pid=21216 comm="syz.1.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 888.546959][ T29] audit: type=1400 audit(1752126973.621:10022): avc: denied { getopt } for pid=21216 comm="syz.1.4678" lport=42074 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 888.571551][ T29] audit: type=1400 audit(1752126973.621:10023): avc: denied { setopt } for pid=21216 comm="syz.1.4678" lport=42074 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 888.638739][T20416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.665804][T21229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.779206][T21234] Restarting kernel threads ... [ 888.782124][T21242] __nla_validate_parse: 1 callbacks suppressed [ 888.782146][T21242] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4690'. [ 888.784337][T21234] Done restarting kernel threads. [ 888.869295][ T29] audit: type=1400 audit(1752126974.001:10024): avc: denied { write } for pid=21246 comm="syz.6.4693" lport=40450 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 888.910767][T21253] tipc: Enabling of bearer rejected, failed to enable media [ 889.192526][T21268] loop3: detected capacity change from 0 to 2048 [ 889.238796][T21268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.341634][T20346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.506328][T21283] loop3: detected capacity change from 0 to 8192 [ 890.020322][T21289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.158941][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4712'. [ 890.359731][T21314] Restarting kernel threads ... [ 890.371011][T21314] Done restarting kernel threads. [ 890.384240][ T29] audit: type=1326 audit(1752126975.531:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475990e929 code=0x7ffc0000 [ 890.444449][ T29] audit: type=1326 audit(1752126975.551:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f475990e929 code=0x7ffc0000 [ 890.468031][ T29] audit: type=1326 audit(1752126975.551:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475990e929 code=0x7ffc0000 [ 890.491667][ T29] audit: type=1326 audit(1752126975.551:10028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f475990e929 code=0x7ffc0000 [ 890.515311][ T29] audit: type=1326 audit(1752126975.551:10029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21317 comm="syz.3.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475990e929 code=0x7ffc0000 [ 890.565373][T21325] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 891.198365][T21354] loop2: detected capacity change from 0 to 8192 [ 891.290656][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4734'. [ 891.628426][T21367] loop6: detected capacity change from 0 to 2048 [ 891.672963][T21367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.718650][T21377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 891.922050][T20416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.986505][T21387] loop3: detected capacity change from 0 to 8192 [ 892.294039][T21401] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 893.061497][T21419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 893.746313][T21452] loop9: detected capacity change from 0 to 7 [ 893.756129][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 893.756274][ T29] audit: type=1326 audit(1752126978.901:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.794783][ T29] audit: type=1326 audit(1752126978.931:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.818693][ T29] audit: type=1326 audit(1752126978.931:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.842545][ T29] audit: type=1326 audit(1752126978.931:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.866416][ T29] audit: type=1326 audit(1752126978.941:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.890210][ T29] audit: type=1326 audit(1752126978.941:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.914008][ T29] audit: type=1326 audit(1752126978.941:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.937674][ T29] audit: type=1326 audit(1752126978.941:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 893.967195][T21457] netlink: 'syz.3.4770': attribute type 27 has an invalid length. [ 893.992535][ T29] audit: type=1326 audit(1752126978.941:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 894.016221][ T29] audit: type=1326 audit(1752126978.941:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.4769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feccd31e929 code=0x7ffc0000 [ 894.063442][T21457] bridge0: port 3(netdevsim1) entered disabled state [ 894.070382][T21457] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.077544][T21457] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.126884][T21461] loop2: detected capacity change from 0 to 8192 [ 894.158497][T21457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.174278][T21457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.204436][T21474] loop4: detected capacity change from 0 to 8192 [ 894.236846][T21457] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.245905][T21457] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.254985][T21457] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.264006][T21457] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.297239][T21464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.305979][T21464] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.316441][T21464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.620919][T21485] loop9: detected capacity change from 0 to 7 [ 894.719809][T21491] loop6: detected capacity change from 0 to 1024 [ 894.731175][T21491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.744992][T21491] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.770768][T20155] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 894.785885][T20155] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 894.798331][T20155] EXT4-fs (loop6): This should not happen!! Data will be lost [ 894.798331][T20155] [ 894.808025][T20155] EXT4-fs (loop6): Total free blocks count 0 [ 894.814062][T20155] EXT4-fs (loop6): Free/Dirty block details [ 894.820157][T20155] EXT4-fs (loop6): free_blocks=4293918720 [ 894.825913][T20155] EXT4-fs (loop6): dirty_blocks=16 [ 894.831264][T20155] EXT4-fs (loop6): Block reservation details [ 894.837554][T20155] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 894.845278][T20416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.020948][T21505] Restarting kernel threads ... [ 895.026096][T21505] Done restarting kernel threads. [ 895.135272][T21504] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 895.155668][T21520] loop4: detected capacity change from 0 to 2048 [ 895.176967][T21520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.352861][T20332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.369611][T20332] ================================================================== [ 895.377760][T20332] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 895.385371][T20332] [ 895.387726][T20332] read-write to 0xffff888237c25e68 of 1 bytes by task 21532 on cpu 0: [ 895.395917][T20332] folio_add_lru+0xa5/0x1f0 [ 895.400482][T20332] folio_add_lru_vma+0x49/0x70 [ 895.405292][T20332] do_wp_page+0x132b/0x2400 [ 895.409824][T20332] handle_mm_fault+0x77d/0x2be0 [ 895.414703][T20332] do_user_addr_fault+0x636/0x1090 [ 895.419853][T20332] exc_page_fault+0x62/0xa0 [ 895.424381][T20332] asm_exc_page_fault+0x26/0x30 [ 895.429439][T20332] [ 895.431783][T20332] read to 0xffff888237c25e68 of 1 bytes by task 20332 on cpu 1: [ 895.439429][T20332] __lru_add_drain_all+0x12b/0x3f0 [ 895.444572][T20332] lru_add_drain_all+0x10/0x20 [ 895.449364][T20332] invalidate_bdev+0x47/0x70 [ 895.454061][T20332] ext4_put_super+0x624/0x7d0 [ 895.458756][T20332] generic_shutdown_super+0xe6/0x210 [ 895.464067][T20332] kill_block_super+0x2a/0x70 [ 895.468859][T20332] ext4_kill_sb+0x42/0x80 [ 895.473204][T20332] deactivate_locked_super+0x72/0x1c0 [ 895.478609][T20332] deactivate_super+0x97/0xa0 [ 895.483310][T20332] cleanup_mnt+0x269/0x2e0 [ 895.487745][T20332] __cleanup_mnt+0x19/0x20 [ 895.492182][T20332] task_work_run+0x131/0x1a0 [ 895.496793][T20332] exit_to_user_mode_loop+0xe4/0x100 [ 895.502103][T20332] do_syscall_64+0x1d6/0x200 [ 895.506732][T20332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.512651][T20332] [ 895.514985][T20332] value changed: 0x07 -> 0x08 [ 895.519679][T20332] [ 895.522016][T20332] Reported by Kernel Concurrency Sanitizer on: [ 895.528276][T20332] CPU: 1 UID: 0 PID: 20332 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 895.540974][T20332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 895.551046][T20332] ================================================================== [ 895.624975][T21537] loop6: detected capacity change from 0 to 8192