last executing test programs: 31.795439273s ago: executing program 2 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x245, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = socket(0x8000000010, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r2, &(0x7f00000002c0)="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", 0xfc) 31.672221649s ago: executing program 2 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 31.622636205s ago: executing program 2 (id=72): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000002940)=[{r1, 0x4690}, {r2, 0x100}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 31.533132227s ago: executing program 2 (id=74): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0) 31.101296811s ago: executing program 2 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10000}, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 31.03454657s ago: executing program 2 (id=79): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x80}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 16.002971578s ago: executing program 32 (id=79): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x80}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 7.392020047s ago: executing program 1 (id=386): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 7.081923447s ago: executing program 1 (id=390): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}], 0x1, 0x40000050) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003300010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 6.19252604s ago: executing program 1 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) getpgrp(0x0) 3.877723386s ago: executing program 1 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441e, &(0x7f0000000780), 0x1, 0x448, &(0x7f0000000fc0)="$eJzs3MtvG0UYAPBv7Th9k1CVRx9AoCAqHkmTltIDFxBIHEBCgkM5hiStSt0GNUGiVQUBoXJElbgjjkj8BZzggoATEle4o0oVyqWFk9Hau4nt2G7iOnWofz9pk5ndcWY+7449s2MngIE1lv5IInZHxB8RMVLLNhYYq/26tXxl5p/lKzNJVCpv/51Uy91cvjKTF80ftyvPDEUUPk/iYIt6Fy5dPjddLs9dzPITi+c/mFi4dPn5s+enz8ydmbswdfLk8WOTL56YeqEncaZx3Tzw8fyh/a+/e+3NmVPX3vvluySPvymOHhnrdPCpSqXH1fXXnrp0MtTHhrAhxVo3jVK1/49EMVZP3ki89llfGwdsqkqlUnmw/eGlCnAPS6LfLQD6I3+jT+e/+XaXhh5bwo2XaxOgNO5b2VY7MhSFrEypaX7bS2MRcWrp36/TLTbnPgQAQIMf0vHPc63Gf4Wovy90X7aGMhoR90fE3og4ERH7IuKBiGrZhyLi4Q3W37xIsnb8U7jeVWDrlI7/XsrWthrHf/noL0aLWW5PNf5Scvpsee5o9pwcidK2ND/ZoY4fX/39y3bH6sd/6ZbWn48Fs3ZcH9rW+JjZ6cXpO4m53o1PIw4MtYo/WVkJSCJif0Qc6LKOs898e6jdsdvH30EP1pkq30Q8XTv/S9EUfy7pvD45sT3Kc0cn8qtirV9/u/pWu/rvKP4eSM//zpbX/0r8o0n9eu3Cxuu4+ucXbec03V7/w8k7Dfs+ml5cvDgZMZy8UWt0/f6ppnJTq+XT+I8czuIfbuz/e2P1mTgYEelF/EhEPBoRj2VtfzwinoiIwx3i//mVJ9/vKv7S9g5/tTfS+Gc3dP5XE8PRvKd1onjup+8bKh1dZ/xV6fk/Xk0dyfas5/VvPe3q7moGAACA/59CROyOpDC+ki4Uxsdrn+HfFzsL5fmFxWdPz394Ybb2HYHRKBXyO10jdfdDJ7NpfZ6fasofy+4bf1XcUc2Pz8yXZ/sdPAy4XW36f+qvYr9bB2w639eCwdVN/7dyBvcG7/8wuPR/GEjVT/m16P87+tAWoA9avf9/0od2AHdfU/+37AcDxPwfBpf+D4NL/4eBtLAjbv8leQmJNYkobIlmdJ8YbvlPLbZAIrZEM/r9ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAb/wUAAP//Hy7lNQ==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 2.024583152s ago: executing program 5 (id=491): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 1.603309276s ago: executing program 0 (id=498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r0, 0x0) 1.584825858s ago: executing program 5 (id=500): epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x7b) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.468893523s ago: executing program 5 (id=503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) setuid(0xee01) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 1.468422103s ago: executing program 0 (id=504): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.41102758s ago: executing program 5 (id=505): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.377923974s ago: executing program 0 (id=506): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x2000c800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.357133677s ago: executing program 0 (id=508): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.332693041s ago: executing program 0 (id=510): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000300)={0x0, 0x2a6e, 0x10100, 0x0, 0xfffffffd}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='xprtrdma_post_linv_err\x00'}, 0x18) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1.210822396s ago: executing program 0 (id=511): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 1.155548573s ago: executing program 3 (id=514): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.024901319s ago: executing program 4 (id=516): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) socket$kcm(0x2, 0xa, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.024454469s ago: executing program 3 (id=517): arch_prctl$ARCH_GET_GS(0x1004, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x10c, &(0x7f0000000580)={0x0, 0xa006d8a, 0x400, 0xfffffffd, 0x69}, &(0x7f0000000000), &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 962.257797ms ago: executing program 4 (id=518): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000640)={[{@stripe={'stripe', 0x3d, 0x36}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 892.674436ms ago: executing program 3 (id=519): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x2000c800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 863.92187ms ago: executing program 3 (id=520): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000062000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) pwrite64(r0, &(0x7f000009dd80)='\"', 0x1, 0x9000) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000780)=ANY=[], 0xfe37, 0x0) 863.67589ms ago: executing program 4 (id=521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a00000009000200"], 0x7b}}, 0x20048482) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a007) 756.297854ms ago: executing program 3 (id=522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) getpgrp(0x0) 490.537478ms ago: executing program 5 (id=523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x0, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000980)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x20) 490.174268ms ago: executing program 4 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 483.531948ms ago: executing program 3 (id=525): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 454.163003ms ago: executing program 4 (id=526): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000940), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x10000) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r3, 0x0, 0x0) 377.670622ms ago: executing program 4 (id=527): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 132.703573ms ago: executing program 1 (id=528): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setrlimit(0xc, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) 35.713916ms ago: executing program 5 (id=529): unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x23e, &(0x7f0000000f00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 0s ago: executing program 1 (id=530): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="00659369b691bd7000000000000a001400fe04ff0600000000000000"], 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 26.540062][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 26.540079][ T29] audit: type=1400 audit(1768573406.652:57): avc: denied { transition } for pid=3294 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.568958][ T29] audit: type=1400 audit(1768573406.652:58): avc: denied { noatsecure } for pid=3294 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.588641][ T29] audit: type=1400 audit(1768573406.662:59): avc: denied { write } for pid=3294 comm="sh" path="pipe:[506]" dev="pipefs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 26.610626][ T29] audit: type=1400 audit(1768573406.662:60): avc: denied { rlimitinh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.629352][ T29] audit: type=1400 audit(1768573406.662:61): avc: denied { siginh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 34.910842][ T29] audit: type=1400 audit(1768573415.022:62): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.934002][ T29] audit: type=1400 audit(1768573415.042:63): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.936355][ T3306] cgroup: Unknown subsys name 'net' [ 34.961899][ T29] audit: type=1400 audit(1768573415.072:64): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.135837][ T3306] cgroup: Unknown subsys name 'cpuset' [ 35.142135][ T3306] cgroup: Unknown subsys name 'rlimit' [ 35.293639][ T29] audit: type=1400 audit(1768573415.402:65): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.316965][ T29] audit: type=1400 audit(1768573415.412:66): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.337471][ T29] audit: type=1400 audit(1768573415.412:67): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.357867][ T29] audit: type=1400 audit(1768573415.412:68): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.378109][ T29] audit: type=1400 audit(1768573415.422:69): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.399155][ T29] audit: type=1400 audit(1768573415.432:70): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.424070][ T29] audit: type=1400 audit(1768573415.432:71): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.443562][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.498771][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.358490][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 37.446751][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.491882][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.499066][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.512265][ T3318] bridge_slave_0: entered allmulticast mode [ 37.518810][ T3318] bridge_slave_0: entered promiscuous mode [ 37.530733][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 37.539634][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.546723][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.554069][ T3318] bridge_slave_1: entered allmulticast mode [ 37.560720][ T3318] bridge_slave_1: entered promiscuous mode [ 37.589835][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.599357][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 37.629965][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.642577][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.673263][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.680381][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.687700][ T3316] bridge_slave_0: entered allmulticast mode [ 37.694350][ T3316] bridge_slave_0: entered promiscuous mode [ 37.718744][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.725926][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.733147][ T3316] bridge_slave_1: entered allmulticast mode [ 37.740074][ T3316] bridge_slave_1: entered promiscuous mode [ 37.753018][ T3318] team0: Port device team_slave_0 added [ 37.782604][ T3318] team0: Port device team_slave_1 added [ 37.788466][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.795593][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.803512][ T3323] bridge_slave_0: entered allmulticast mode [ 37.810070][ T3323] bridge_slave_0: entered promiscuous mode [ 37.834591][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.841858][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.849095][ T3323] bridge_slave_1: entered allmulticast mode [ 37.855602][ T3323] bridge_slave_1: entered promiscuous mode [ 37.863225][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.894946][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.909279][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.916723][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.923849][ T3321] bridge_slave_0: entered allmulticast mode [ 37.930412][ T3321] bridge_slave_0: entered promiscuous mode [ 37.937236][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.944224][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.970333][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.991143][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.998268][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.005499][ T3319] bridge_slave_0: entered allmulticast mode [ 38.011905][ T3319] bridge_slave_0: entered promiscuous mode [ 38.018537][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.025637][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.032831][ T3321] bridge_slave_1: entered allmulticast mode [ 38.039629][ T3321] bridge_slave_1: entered promiscuous mode [ 38.046276][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.053221][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.079337][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.091584][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.106108][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.113277][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.120632][ T3319] bridge_slave_1: entered allmulticast mode [ 38.127309][ T3319] bridge_slave_1: entered promiscuous mode [ 38.148822][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.158695][ T3316] team0: Port device team_slave_0 added [ 38.175471][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.191692][ T3316] team0: Port device team_slave_1 added [ 38.198752][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.209020][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.220401][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.256449][ T3323] team0: Port device team_slave_0 added [ 38.283386][ T3323] team0: Port device team_slave_1 added [ 38.289260][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.296296][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.322314][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.333843][ T3321] team0: Port device team_slave_0 added [ 38.340435][ T3319] team0: Port device team_slave_0 added [ 38.348219][ T3318] hsr_slave_0: entered promiscuous mode [ 38.354337][ T3318] hsr_slave_1: entered promiscuous mode [ 38.365748][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.372719][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.398882][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.410635][ T3321] team0: Port device team_slave_1 added [ 38.417117][ T3319] team0: Port device team_slave_1 added [ 38.454310][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.461373][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.488156][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.502860][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.509967][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.536061][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.557836][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.564898][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.590869][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.602799][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.609878][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.635920][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.649368][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.656373][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.682491][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.702830][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.709887][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.735896][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.759269][ T3316] hsr_slave_0: entered promiscuous mode [ 38.765399][ T3316] hsr_slave_1: entered promiscuous mode [ 38.771278][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.777069][ T3316] Cannot create hsr debugfs directory [ 38.831967][ T3323] hsr_slave_0: entered promiscuous mode [ 38.838190][ T3323] hsr_slave_1: entered promiscuous mode [ 38.844013][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 38.849929][ T3323] Cannot create hsr debugfs directory [ 38.857588][ T3321] hsr_slave_0: entered promiscuous mode [ 38.863708][ T3321] hsr_slave_1: entered promiscuous mode [ 38.869895][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.875705][ T3321] Cannot create hsr debugfs directory [ 38.896670][ T3319] hsr_slave_0: entered promiscuous mode [ 38.902665][ T3319] hsr_slave_1: entered promiscuous mode [ 38.908703][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.914443][ T3319] Cannot create hsr debugfs directory [ 39.100168][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.113199][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.125792][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.136927][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.162750][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.175764][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.186205][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.198444][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.225106][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.238461][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.250377][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.262239][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.294424][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.318674][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.327809][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.341590][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.348872][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.377709][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.391079][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.400345][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.410264][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.420904][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.434919][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.442042][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.452854][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.471414][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.478603][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.491504][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.519155][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.526272][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.544362][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.551465][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.591038][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.613365][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.635495][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.647658][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.654764][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.666818][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.673941][ T1891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.691922][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.714067][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.733115][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.753911][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.761031][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.775910][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.783062][ T1891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.804873][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.820071][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.827234][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.849770][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.856889][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.886299][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.977748][ T3318] veth0_vlan: entered promiscuous mode [ 40.005352][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.016237][ T3318] veth1_vlan: entered promiscuous mode [ 40.032694][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.067396][ T3318] veth0_macvtap: entered promiscuous mode [ 40.086549][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.096074][ T3318] veth1_macvtap: entered promiscuous mode [ 40.124061][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.140522][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.169850][ T95] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.203537][ T95] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.214302][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 40.214320][ T29] audit: type=1400 audit(1768573420.332:85): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.nMzxtp/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.249481][ T3323] veth0_vlan: entered promiscuous mode [ 40.262110][ T29] audit: type=1400 audit(1768573420.332:86): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.284318][ T29] audit: type=1400 audit(1768573420.332:87): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.nMzxtp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.309777][ T29] audit: type=1400 audit(1768573420.342:88): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.321443][ T2710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.331960][ T29] audit: type=1400 audit(1768573420.342:89): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.nMzxtp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.343360][ T2710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.367281][ T29] audit: type=1400 audit(1768573420.342:90): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.nMzxtp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.397316][ T3316] veth0_vlan: entered promiscuous mode [ 40.403769][ T29] audit: type=1400 audit(1768573420.342:91): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.418381][ T3316] veth1_vlan: entered promiscuous mode [ 40.428525][ T29] audit: type=1400 audit(1768573420.362:92): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.453138][ T3316] veth0_macvtap: entered promiscuous mode [ 40.456805][ T29] audit: type=1400 audit(1768573420.362:93): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=3715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.484107][ T3316] veth1_macvtap: entered promiscuous mode [ 40.493389][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.519103][ T29] audit: type=1400 audit(1768573420.632:94): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.553478][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.569472][ T3323] veth1_vlan: entered promiscuous mode [ 40.575857][ T3487] futex_wake_op: syz.2.3 tries to shift op by -3; fix this program [ 40.585551][ T3319] veth0_vlan: entered promiscuous mode [ 40.592769][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.611054][ T3321] veth0_vlan: entered promiscuous mode [ 40.624021][ T2710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.633359][ T3319] veth1_vlan: entered promiscuous mode [ 40.645505][ T2710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.661798][ T2710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.671799][ T2710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.689319][ T3321] veth1_vlan: entered promiscuous mode [ 40.704087][ T3323] veth0_macvtap: entered promiscuous mode [ 40.714303][ T3323] veth1_macvtap: entered promiscuous mode [ 40.744962][ T3319] veth0_macvtap: entered promiscuous mode [ 40.756071][ T3319] veth1_macvtap: entered promiscuous mode [ 40.769708][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.790887][ T3321] veth0_macvtap: entered promiscuous mode [ 40.805318][ T3321] veth1_macvtap: entered promiscuous mode [ 40.816965][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.834444][ T3499] loop0: detected capacity change from 0 to 512 [ 40.841486][ T3499] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.847954][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.858540][ T3499] EXT4-fs (loop0): invalid journal inode [ 40.864291][ T3499] EXT4-fs (loop0): can't get journal size [ 40.879820][ T3499] EXT4-fs (loop0): 1 truncate cleaned up [ 40.886780][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.907608][ T3499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.921378][ T1480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.931214][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.948863][ T1480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.972508][ T1480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.988315][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.008113][ T1480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.027575][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.044518][ T3507] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 41.073521][ T1480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.115623][ T1480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.124450][ T1480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.148092][ T1480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.171525][ T1480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.209430][ T1480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.222520][ T3518] loop4: detected capacity change from 0 to 1024 [ 41.229714][ T1480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.243086][ T3518] ======================================================= [ 41.243086][ T3518] WARNING: The mand mount option has been deprecated and [ 41.243086][ T3518] and is ignored by this kernel. Remove the mand [ 41.243086][ T3518] option from the mount to silence this warning. [ 41.243086][ T3518] ======================================================= [ 41.259046][ T1480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.306712][ T3524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.348290][ T3518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.394531][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 41.404863][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.467729][ C0] hrtimer: interrupt took 43285 ns [ 41.886307][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 41.908913][ T3550] process 'syz.1.25' launched '/dev/fd/4' with NULL argv: empty string added [ 41.927446][ T3550] loop1: detected capacity change from 0 to 128 [ 42.025333][ T3560] loop0: detected capacity change from 0 to 512 [ 42.032826][ T3560] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.041716][ T3560] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.052645][ T3557] syzkaller0: entered allmulticast mode [ 42.073749][ T3557] syzkaller0: entered promiscuous mode [ 42.088000][ T3557] syzkaller0 (unregistering): left allmulticast mode [ 42.094815][ T3557] syzkaller0 (unregistering): left promiscuous mode [ 42.096429][ T3560] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.28: Allocating blocks 41-42 which overlap fs metadata [ 42.120671][ T3560] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.28: Allocating blocks 41-42 which overlap fs metadata [ 42.137157][ T3560] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.28: Failed to acquire dquot type 1 [ 42.149018][ T3560] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.177033][ T3560] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.28: corrupted inode contents [ 42.189089][ T3560] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.28: mark_inode_dirty error [ 42.202588][ T3560] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.28: corrupted inode contents [ 42.225262][ T3560] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.28: mark_inode_dirty error [ 42.247176][ T3560] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.28: corrupted inode contents [ 42.281317][ T3560] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 42.290425][ T3560] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.28: corrupted inode contents [ 42.303227][ T3560] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.28: mark_inode_dirty error [ 42.316825][ T3560] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 42.326721][ T3560] EXT4-fs (loop0): 1 truncate cleaned up [ 42.332930][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.347287][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.401601][ T3574] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 42.435663][ T3560] syz.0.28 (3560) used greatest stack depth: 9952 bytes left [ 42.572844][ T3594] loop0: detected capacity change from 0 to 512 [ 42.607180][ T3594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.636234][ T3594] ext4 filesystem being mounted at /syzcgroup/cpu/syz0/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 42.665845][ T3594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.992766][ T3629] loop1: detected capacity change from 0 to 128 [ 43.019066][ T3632] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 43.055981][ T3632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 43.166517][ T3652] loop3: detected capacity change from 0 to 164 [ 43.197069][ T3652] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.230896][ T3652] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.242526][ T3652] rock: directory entry would overflow storage [ 43.248828][ T3652] rock: sig=0x4f50, size=4, remaining=3 [ 43.254566][ T3652] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 43.274884][ T3652] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.283549][ T3652] Symlink component flag not implemented [ 43.289276][ T3652] Symlink component flag not implemented [ 43.486207][ T3652] Symlink component flag not implemented (7) [ 43.492585][ T3652] Symlink component flag not implemented (116) [ 43.924539][ T3687] netlink: 3 bytes leftover after parsing attributes in process `syz.3.55'. [ 43.986833][ T3687] 0ªX¹¦À: renamed from caif0 [ 44.029366][ T3687] 0ªX¹¦À: entered allmulticast mode [ 44.034631][ T3687] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 44.037549][ T3704] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 44.577295][ T3776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 44.586165][ T3776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 44.706963][ T3781] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 44.726316][ T3781] Zero length message leads to an empty skb [ 44.983320][ T3789] netlink: 'syz.2.70': attribute type 12 has an invalid length. [ 45.678345][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 45.678372][ T29] audit: type=1400 audit(1768573425.792:496): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 45.765419][ T29] audit: type=1400 audit(1768573425.812:497): avc: denied { connect } for pid=3809 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.804099][ T3812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.835899][ T29] audit: type=1400 audit(1768573425.952:498): avc: denied { read } for pid=3692 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.901919][ T29] audit: type=1400 audit(1768573426.012:499): avc: denied { mount } for pid=3817 comm="syz.1.82" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 45.929755][ T3812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.039199][ T3812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.116849][ T3827] capability: warning: `syz.1.86' uses deprecated v2 capabilities in a way that may be insecure [ 46.131865][ T3812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.187537][ T3760] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.206087][ T3760] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.229709][ T2710] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.242701][ T3832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.264858][ T2710] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.300193][ T3832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.311074][ T29] audit: type=1400 audit(1768573426.422:500): avc: denied { write } for pid=3833 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.369454][ T3832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.400670][ T29] audit: type=1400 audit(1768573426.512:501): avc: denied { wake_alarm } for pid=3836 comm="syz.0.90" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.455525][ T29] audit: type=1400 audit(1768573426.562:502): avc: denied { create } for pid=3836 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.465322][ T3832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.475120][ T29] audit: type=1400 audit(1768573426.562:503): avc: denied { ioctl } for pid=3836 comm="syz.0.90" path="socket:[5564]" dev="sockfs" ino=5564 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.591770][ T2710] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.608792][ T3844] $Hÿ: renamed from bond0 (while UP) [ 46.616688][ T3844] $Hÿ: entered promiscuous mode [ 46.621764][ T3844] bond_slave_0: entered promiscuous mode [ 46.627688][ T3844] bond_slave_1: entered promiscuous mode [ 46.662789][ T2710] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.682073][ T2710] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.715674][ T2710] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.976426][ T3853] loop4: detected capacity change from 0 to 1024 [ 46.983194][ T3853] EXT4-fs: Ignoring removed orlov option [ 47.044817][ T3857] loop1: detected capacity change from 0 to 512 [ 47.053187][ T3853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.067367][ T3857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.124415][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.145270][ T3857] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.145631][ T29] audit: type=1400 audit(1768573427.242:504): avc: denied { setcheckreqprot } for pid=3859 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 47.208985][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.232248][ T29] audit: type=1400 audit(1768573427.292:505): avc: denied { create } for pid=3856 comm="syz.1.97" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.277840][ T3864] loop3: detected capacity change from 0 to 512 [ 47.312436][ T3864] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm wÞ£ÿ: EA inode hash validation failed [ 47.324893][ T3864] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.339166][ T3864] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm wÞ£ÿ: corrupted inode contents [ 47.351267][ T3864] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 47.363134][ T3864] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm wÞ£ÿ: corrupted inode contents [ 47.375801][ T3864] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 47.387781][ T3864] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm wÞ£ÿ: mark inode dirty (error -117) [ 47.406248][ T3864] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 47.415419][ T3864] EXT4-fs (loop3): 1 orphan inode deleted [ 47.424071][ T3864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.490887][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.637845][ T3884] netlink: 176 bytes leftover after parsing attributes in process `syz.1.106'. [ 48.008111][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.247741][ T3924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 48.436386][ T3948] netlink: 332 bytes leftover after parsing attributes in process `syz.4.114'. [ 48.446464][ T3946] pimreg: entered allmulticast mode [ 48.468917][ T3946] pimreg: left allmulticast mode [ 48.500193][ T3954] loop1: detected capacity change from 0 to 512 [ 48.529151][ T3954] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.542339][ T3954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.566047][ T3954] EXT4-fs (loop1): 1 truncate cleaned up [ 48.574835][ T3954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.849170][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.125514][ T4020] loop1: detected capacity change from 0 to 128 [ 49.149020][ T4020] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.203813][ T4020] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.236876][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.587623][ T4064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'. [ 49.789363][ T4070] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=4070 comm=syz.0.131 [ 50.019128][ T4099] serio: Serial port ptm0 [ 50.127682][ T4105] loop0: detected capacity change from 0 to 128 [ 50.138993][ T4105] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 50.174760][ T4105] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 50.182947][ T4105] FAT-fs (loop0): Filesystem has been set read-only [ 50.211051][ T4099] serio: Serial port ptm0 [ 50.701824][ T4119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 50.741195][ T4123] loop1: detected capacity change from 0 to 512 [ 50.750956][ T4123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.770877][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 50.770891][ T29] audit: type=1400 audit(1768573430.882:605): avc: denied { create } for pid=4120 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.799217][ T29] audit: type=1400 audit(1768573430.912:606): avc: denied { ioctl } for pid=4120 comm="syz.3.143" path="socket:[6436]" dev="sockfs" ino=6436 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.806354][ T4123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.823832][ T29] audit: type=1400 audit(1768573430.912:607): avc: denied { write } for pid=4120 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.857079][ T4123] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.906109][ T4123] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.144: iget: bad i_size value: 2533274857506816 [ 50.969896][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.044049][ T29] audit: type=1400 audit(1768573431.152:608): avc: denied { bpf } for pid=4128 comm="syz.1.145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.081902][ T29] audit: type=1400 audit(1768573431.152:609): avc: denied { perfmon } for pid=4128 comm="syz.1.145" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.109570][ T29] audit: type=1400 audit(1768573431.222:610): avc: denied { module_request } for pid=4130 comm="syz.0.146" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.216230][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 51.297311][ T29] audit: type=1326 audit(1768573431.392:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 51.320786][ T29] audit: type=1326 audit(1768573431.392:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 51.344308][ T29] audit: type=1326 audit(1768573431.392:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 51.367591][ T29] audit: type=1326 audit(1768573431.392:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 51.576811][ T4151] netlink: 'syz.3.152': attribute type 13 has an invalid length. [ 51.645628][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.653025][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.736361][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.763606][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.930861][ T3741] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.948434][ T4165] loop3: detected capacity change from 0 to 128 [ 51.950224][ T3741] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.994172][ T3741] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.003608][ T3741] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.069028][ T4165] syz.3.160: attempt to access beyond end of device [ 52.069028][ T4165] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 52.097810][ T4165] syz.3.160: attempt to access beyond end of device [ 52.097810][ T4165] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 52.111720][ T4165] syz.3.160: attempt to access beyond end of device [ 52.111720][ T4165] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 52.139371][ T4165] syz.3.160: attempt to access beyond end of device [ 52.139371][ T4165] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 52.160200][ T4165] syz.3.160: attempt to access beyond end of device [ 52.160200][ T4165] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 52.174746][ T4165] syz.3.160: attempt to access beyond end of device [ 52.174746][ T4165] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 52.211776][ T4165] syz.3.160: attempt to access beyond end of device [ 52.211776][ T4165] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 52.225858][ T4165] syz.3.160: attempt to access beyond end of device [ 52.225858][ T4165] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 52.240482][ T4165] syz.3.160: attempt to access beyond end of device [ 52.240482][ T4165] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 52.254075][ T4165] syz.3.160: attempt to access beyond end of device [ 52.254075][ T4165] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 52.382197][ T4180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 52.464466][ T4182] bridge0: entered promiscuous mode [ 52.472523][ T4182] bridge0: left promiscuous mode [ 52.523057][ T4178] mmap: syz.3.165 (4178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.668482][ T4187] SET target dimension over the limit! [ 52.779913][ T4189] bridge: RTM_NEWNEIGH with invalid ether address [ 53.550821][ T4212] loop4: detected capacity change from 0 to 2048 [ 53.569195][ T4212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.816837][ T3751] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.853465][ T3751] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 53.866046][ T3751] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.866046][ T3751] [ 53.876436][ T3751] EXT4-fs (loop4): Total free blocks count 0 [ 53.882470][ T3751] EXT4-fs (loop4): Free/Dirty block details [ 53.888474][ T3751] EXT4-fs (loop4): free_blocks=2415919104 [ 53.894221][ T3751] EXT4-fs (loop4): dirty_blocks=4224 [ 53.899653][ T3751] EXT4-fs (loop4): Block reservation details [ 53.906422][ T3751] EXT4-fs (loop4): i_reserved_data_blocks=264 [ 53.989748][ T3751] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 55.077582][ T4243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.084860][ T4243] IPv6: NLM_F_CREATE should be set when creating new route [ 55.092288][ T4243] IPv6: NLM_F_CREATE should be set when creating new route [ 55.143829][ T4243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.174010][ T4243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 55.182943][ T4243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 55.612164][ T4216] syz.4.180 (4216) used greatest stack depth: 7256 bytes left [ 55.672919][ T4253] loop3: detected capacity change from 0 to 512 [ 55.688565][ T4253] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 55.731797][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 55.826451][ T29] kauditd_printk_skb: 795 callbacks suppressed [ 55.826465][ T29] audit: type=1326 audit(1768573435.942:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 55.875049][ T29] audit: type=1326 audit(1768573435.962:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 55.898695][ T29] audit: type=1326 audit(1768573435.982:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 55.922116][ T29] audit: type=1326 audit(1768573435.982:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 55.961565][ T29] audit: type=1326 audit(1768573435.992:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 55.985104][ T29] audit: type=1326 audit(1768573436.002:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 56.008457][ T29] audit: type=1326 audit(1768573436.012:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 56.031817][ T29] audit: type=1326 audit(1768573436.022:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 56.055398][ T29] audit: type=1326 audit(1768573436.022:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 56.078880][ T29] audit: type=1326 audit(1768573436.022:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80bd46f749 code=0x7ffc0000 [ 56.184161][ T4264] netlink: 'syz.4.198': attribute type 8 has an invalid length. [ 56.192950][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 56.206219][ T4263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.214740][ T4263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.232050][ T4264] bond0: entered promiscuous mode [ 56.237249][ T4264] bond_slave_0: entered promiscuous mode [ 56.243021][ T4264] bond_slave_1: entered promiscuous mode [ 56.251960][ T4264] gretap0: entered promiscuous mode [ 56.258337][ T4264] bond0: left promiscuous mode [ 56.263163][ T4264] bond_slave_0: left promiscuous mode [ 56.268733][ T4264] bond_slave_1: left promiscuous mode [ 56.277492][ T4264] gretap0: left promiscuous mode [ 56.368267][ T4267] infiniband syz!: set active [ 56.372985][ T4267] infiniband syz!: added team_slave_0 [ 56.392361][ T4267] RDS/IB: syz!: added [ 56.397695][ T4267] smc: adding ib device syz! with port count 1 [ 56.404931][ T4267] smc: ib device syz! port 1 has no pnetid [ 56.781328][ T4287] loop3: detected capacity change from 0 to 2048 [ 56.842952][ T4287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 56.982932][ T4296] loop1: detected capacity change from 0 to 1024 [ 57.085893][ T4296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 57.094802][ T4296] System zones: 0-1, 3-12 [ 57.105657][ T4296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.131396][ T3751] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.178427][ T4296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.206: bg 0: block 88: padding at end of block bitmap is not set [ 57.192859][ T3751] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1500 with error 28 [ 57.206067][ T3751] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.206067][ T3751] [ 57.215826][ T3751] EXT4-fs (loop3): Total free blocks count 0 [ 57.221838][ T3751] EXT4-fs (loop3): Free/Dirty block details [ 57.227812][ T3751] EXT4-fs (loop3): free_blocks=2415919104 [ 57.233560][ T3751] EXT4-fs (loop3): dirty_blocks=1504 [ 57.239612][ T3751] EXT4-fs (loop3): Block reservation details [ 57.245693][ T3751] EXT4-fs (loop3): i_reserved_data_blocks=96 [ 57.268716][ T3751] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1500 with max blocks 72 with error 28 [ 57.308837][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.379049][ T4302] loop1: detected capacity change from 0 to 512 [ 57.394560][ T4302] EXT4-fs: inline encryption not supported [ 57.411022][ T4302] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 57.501146][ T4306] pim6reg1: entered promiscuous mode [ 57.507364][ T4306] pim6reg1: entered allmulticast mode [ 57.583977][ T4309] loop4: detected capacity change from 0 to 512 [ 57.602116][ T4309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.630305][ T4309] EXT4-fs error (device loop4): __ext4_iget:5426: inode #2: block 2048: comm syz.4.210: invalid block [ 57.651720][ T4309] EXT4-fs (loop4): get root inode failed [ 57.658243][ T4309] EXT4-fs (loop4): mount failed [ 57.811189][ T4315] loop1: detected capacity change from 0 to 2048 [ 57.882084][ T4315] EXT4-fs (loop1): failed to initialize system zone (-117) [ 57.892790][ T4315] EXT4-fs (loop1): mount failed [ 57.977402][ T4315] bridge_slave_0: left allmulticast mode [ 57.983136][ T4315] bridge_slave_0: left promiscuous mode [ 57.989733][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.026146][ T4315] bridge_slave_1: left allmulticast mode [ 58.031878][ T4315] bridge_slave_1: left promiscuous mode [ 58.037732][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.062620][ T4324] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 58.070494][ T4324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 58.108451][ T4315] bond0: (slave bond_slave_0): Releasing backup interface [ 58.162512][ T4315] bond0: (slave bond_slave_1): Releasing backup interface [ 58.202277][ T4315] team0: Port device team_slave_0 removed [ 58.222367][ T4315] team0: Port device team_slave_1 removed [ 58.229835][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.237490][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.247108][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.254537][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.274710][ T4315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.708038][ T4284] syz.3.203 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 58.719172][ T4284] CPU: 0 UID: 0 PID: 4284 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.719341][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.719357][ T4284] Call Trace: [ 58.719415][ T4284] [ 58.719423][ T4284] __dump_stack+0x1d/0x30 [ 58.719453][ T4284] dump_stack_lvl+0x95/0xd0 [ 58.719482][ T4284] dump_stack+0x15/0x1b [ 58.719507][ T4284] dump_header+0x81/0x240 [ 58.719530][ T4284] oom_kill_process+0x295/0x350 [ 58.719600][ T4284] out_of_memory+0x97b/0xb80 [ 58.719654][ T4284] try_charge_memcg+0x610/0xa10 [ 58.719784][ T4284] charge_memcg+0x51/0xc0 [ 58.719860][ T4284] __mem_cgroup_charge+0x28/0xb0 [ 58.719897][ T4284] filemap_add_folio+0x111/0x360 [ 58.719994][ T4284] __filemap_get_folio_mpol+0x326/0x650 [ 58.720027][ T4284] filemap_fault+0x44d/0xb70 [ 58.720058][ T4284] ? __rcu_read_lock+0x37/0x50 [ 58.720086][ T4284] __do_fault+0xbc/0x200 [ 58.720153][ T4284] handle_mm_fault+0xd9c/0x2c60 [ 58.720196][ T4284] do_user_addr_fault+0x630/0x1080 [ 58.720255][ T4284] exc_page_fault+0x62/0xa0 [ 58.720291][ T4284] asm_exc_page_fault+0x26/0x30 [ 58.720380][ T4284] RIP: 0033:0x7f80bd34f11a [ 58.720401][ T4284] Code: 01 4c 89 44 24 10 4c 89 54 24 08 e8 a0 9d fe ff 48 8b 43 38 4c 8b 44 24 10 83 43 28 08 4c 8b 54 24 08 48 8d 48 f8 48 89 4b 38 <48> 89 68 f8 45 3b 78 04 0f 82 5e fe ff ff e9 ed fe ff ff 0f 1f 00 [ 58.720424][ T4284] RSP: 002b:00007ffcd529eb90 EFLAGS: 00010202 [ 58.720444][ T4284] RAX: 0000001b343ff000 RBX: 00007f80be1f5720 RCX: 0000001b343feff8 [ 58.720460][ T4284] RDX: 0000001b33e24220 RSI: 0000000000000008 RDI: 00007f80be1f5720 [ 58.720472][ T4284] RBP: ffffffff8571b7ac R08: 00007f80bd6c6038 R09: 00007f80bd6b2000 [ 58.720484][ T4284] R10: 00007f80bcedf008 R11: 0000000000000009 R12: 0000000000000009 [ 58.720496][ T4284] R13: 000000000000002b R14: ffffffff8571b6a1 R15: 0000000000000030 [ 58.720541][ T4284] ? mas_prev_slot+0x661/0x6c0 [ 58.720584][ T4284] ? mt_prev+0xc/0xf0 [ 58.720654][ T4284] [ 58.720662][ T4284] memory: usage 307200kB, limit 307200kB, failcnt 1336 [ 58.925806][ T4284] memory+swap: usage 308432kB, limit 9007199254740988kB, failcnt 0 [ 58.933779][ T4284] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 58.941209][ T4284] Memory cgroup stats for /syz3: [ 58.945751][ T4284] cache 8192 [ 58.953948][ T4284] rss 0 [ 58.956820][ T4284] shmem 0 [ 58.959814][ T4284] mapped_file 0 [ 58.963326][ T4284] dirty 0 [ 58.966329][ T4284] writeback 0 [ 58.969636][ T4284] workingset_refault_anon 66 [ 58.974273][ T4284] workingset_refault_file 1675 [ 58.979794][ T4284] swap 1261568 [ 58.983226][ T4284] swapcached 0 [ 58.986740][ T4284] pgpgin 37542 [ 58.990136][ T4284] pgpgout 37539 [ 58.993609][ T4284] pgfault 38061 [ 58.997385][ T4284] pgmajfault 57 [ 59.000872][ T4284] inactive_anon 0 [ 59.004533][ T4284] active_anon 0 [ 59.008879][ T4284] inactive_file 8192 [ 59.012802][ T4284] active_file 4096 [ 59.016623][ T4284] unevictable 0 [ 59.020101][ T4284] hierarchical_memory_limit 314572800 [ 59.025541][ T4284] hierarchical_memsw_limit 9223372036854771712 [ 59.031748][ T4284] total_cache 8192 [ 59.036353][ T4284] total_rss 0 [ 59.039752][ T4284] total_shmem 0 [ 59.043230][ T4284] total_mapped_file 0 [ 59.047284][ T4284] total_dirty 0 [ 59.050770][ T4284] total_writeback 0 [ 59.054598][ T4284] total_workingset_refault_anon 66 [ 59.059909][ T4284] total_workingset_refault_file 1675 [ 59.066181][ T4284] total_swap 1261568 [ 59.070209][ T4284] total_swapcached 0 [ 59.074111][ T4284] total_pgpgin 37542 [ 59.078070][ T4284] total_pgpgout 37539 [ 59.082096][ T4284] total_pgfault 38061 [ 59.086121][ T4284] total_pgmajfault 57 [ 59.090192][ T4284] total_inactive_anon 0 [ 59.094435][ T4284] total_active_anon 0 [ 59.099265][ T4284] total_inactive_file 8192 [ 59.103711][ T4284] total_active_file 4096 [ 59.108013][ T4284] total_unevictable 0 [ 59.112017][ T4284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.203,pid=4284,uid=0 [ 59.127315][ T4284] Memory cgroup out of memory: Killed process 4284 (syz.3.203) total-vm:100384kB, anon-rss:1288kB, file-rss:26320kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 59.796221][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 59.839177][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 60.324663][ T4294] Set syz1 is full, maxelem 65536 reached [ 60.405412][ T4366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.562740][ T4371] netlink: 'syz.4.234': attribute type 13 has an invalid length. [ 60.640838][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.648150][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.734721][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.754357][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.810086][ T4378] veth0: entered promiscuous mode [ 60.836153][ T3774] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.844674][ T4384] veth0: left promiscuous mode [ 60.849841][ T3774] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.873983][ T4394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 60.885103][ T3774] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.904135][ T3774] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.926769][ T4398] pimreg: entered allmulticast mode [ 60.941832][ T4398] pimreg: left allmulticast mode [ 60.989816][ T3751] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.022431][ T4405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'. [ 61.036282][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 61.036300][ T29] audit: type=1400 audit(1768573441.152:1592): avc: denied { setopt } for pid=4406 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.089535][ T29] audit: type=1400 audit(1768573441.182:1593): avc: denied { write } for pid=4406 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.129206][ T29] audit: type=1400 audit(1768573441.232:1594): avc: denied { read } for pid=4406 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.186584][ T3751] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.280694][ T3751] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.344691][ T3751] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.404379][ T4389] chnl_net:caif_netlink_parms(): no params data found [ 61.511053][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.518207][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.525547][ T4389] bridge_slave_0: entered allmulticast mode [ 61.532261][ T4389] bridge_slave_0: entered promiscuous mode [ 61.540126][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.547374][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.554701][ T4389] bridge_slave_1: entered allmulticast mode [ 61.561295][ T4389] bridge_slave_1: entered promiscuous mode [ 61.582855][ T3751] bridge_slave_1: left allmulticast mode [ 61.588574][ T3751] bridge_slave_1: left promiscuous mode [ 61.594613][ T3751] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.604922][ T3751] bridge_slave_0: left allmulticast mode [ 61.610804][ T3751] bridge_slave_0: left promiscuous mode [ 61.616611][ T3751] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.746070][ T3751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.776007][ T3751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.786144][ T3751] bond0 (unregistering): Released all slaves [ 61.826775][ T4389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.850324][ T4389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.890546][ T3751] hsr_slave_0: left promiscuous mode [ 61.917236][ T3751] hsr_slave_1: left promiscuous mode [ 61.925807][ T3751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.933232][ T3751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.993930][ T3751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.001412][ T3751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.033435][ T3751] veth1_macvtap: left promiscuous mode [ 62.042579][ T3751] veth0_macvtap: left promiscuous mode [ 62.048952][ T4439] loop3: detected capacity change from 0 to 128 [ 62.056277][ T3751] veth1_vlan: left promiscuous mode [ 62.061586][ T3751] veth0_vlan: left promiscuous mode [ 62.140393][ T4446] loop1: detected capacity change from 0 to 128 [ 62.164955][ T29] audit: type=1326 audit(1768573442.272:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 62.193416][ T29] audit: type=1326 audit(1768573442.272:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 62.216830][ T29] audit: type=1326 audit(1768573442.302:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 62.240217][ T29] audit: type=1326 audit(1768573442.302:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a95d8f783 code=0x7ffc0000 [ 62.240968][ T3751] team0 (unregistering): Port device team_slave_1 removed [ 62.265224][ T29] audit: type=1326 audit(1768573442.302:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a95d8f783 code=0x7ffc0000 [ 62.293927][ T29] audit: type=1326 audit(1768573442.302:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 62.317525][ T29] audit: type=1326 audit(1768573442.322:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 62.342613][ T3751] team0 (unregistering): Port device team_slave_0 removed [ 62.404175][ T4389] team0: Port device team_slave_0 added [ 62.414794][ T4389] team0: Port device team_slave_1 added [ 62.453715][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.460884][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.486991][ T4389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.499413][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.506510][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.532468][ T4389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.563156][ T4389] hsr_slave_0: entered promiscuous mode [ 62.569655][ T4389] hsr_slave_1: entered promiscuous mode [ 62.692271][ T4389] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.702609][ T4389] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.718897][ T4389] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.728263][ T4389] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.770388][ T4389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.788711][ T4389] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.799470][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.806642][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.830396][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.837547][ T3772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.900580][ T4389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.001578][ T4524] loop3: detected capacity change from 0 to 512 [ 63.021370][ T4524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.059617][ T4530] pimreg: entered allmulticast mode [ 63.078199][ T4524] EXT4-fs (loop3): 1 truncate cleaned up [ 63.084404][ T4524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.110432][ T4389] veth0_vlan: entered promiscuous mode [ 63.116341][ T4530] pimreg: left allmulticast mode [ 63.127599][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 63.131614][ T4389] veth1_vlan: entered promiscuous mode [ 63.159346][ T4389] veth0_macvtap: entered promiscuous mode [ 63.167739][ T4389] veth1_macvtap: entered promiscuous mode [ 63.180220][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.191956][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.213679][ T3772] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.235518][ T3772] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.244642][ T3772] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.261887][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.264162][ T3772] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308658][ T4541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.271'. [ 63.319543][ T4541] IPVS: Unknown mcast interface: v [ 63.331650][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 63.350126][ T4550] netlink: 96 bytes leftover after parsing attributes in process `syz.5.241'. [ 63.363638][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 64.174086][ T4632] netlink: 'syz.1.283': attribute type 8 has an invalid length. [ 64.181864][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 64.202268][ T4632] bond0: entered promiscuous mode [ 64.209429][ T4632] gretap0: entered promiscuous mode [ 64.216211][ T4632] bond0: left promiscuous mode [ 64.222937][ T4632] gretap0: left promiscuous mode [ 64.306592][ T4640] netlink: 'syz.5.285': attribute type 3 has an invalid length. [ 64.318157][ T4640] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.325963][ T4640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.382519][ T4646] netlink: 'syz.5.288': attribute type 15 has an invalid length. [ 64.390415][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.288'. [ 64.408856][ T4647] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.426592][ T4649] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 64.602185][ T4654] pimreg: entered allmulticast mode [ 64.611056][ T4654] pimreg: left allmulticast mode [ 64.623675][ T4656] syzkaller0: entered promiscuous mode [ 64.629306][ T4656] syzkaller0: entered allmulticast mode [ 65.089465][ T4690] IPv4: Oversized IP packet from 127.202.26.0 [ 65.492842][ T4711] SET target dimension over the limit! [ 65.502432][ T4713] loop1: detected capacity change from 0 to 128 [ 65.609229][ T4718] loop4: detected capacity change from 0 to 2048 [ 65.636853][ T4718] EXT4-fs (loop4): failed to initialize system zone (-117) [ 65.645397][ T4718] EXT4-fs (loop4): mount failed [ 65.666025][ T4718] bridge_slave_0: left allmulticast mode [ 65.671976][ T4718] bridge_slave_0: left promiscuous mode [ 65.677774][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.707255][ T4718] bridge_slave_1: left allmulticast mode [ 65.713055][ T4718] bridge_slave_1: left promiscuous mode [ 65.718875][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.737665][ T4718] bond0: (slave bond_slave_0): Releasing backup interface [ 65.747444][ T4718] bond0: (slave bond_slave_1): Releasing backup interface [ 65.767247][ T4723] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 65.775078][ T4723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.317'. [ 65.791795][ T4718] team0: Port device team_slave_0 removed [ 65.812654][ T4718] team0: Port device team_slave_1 removed [ 65.818906][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.829527][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.838081][ T4718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.861787][ T4725] IPVS: Unknown mcast interface: v [ 65.936019][ T4728] __nla_validate_parse: 1 callbacks suppressed [ 65.936038][ T4728] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 66.027815][ T4733] loop3: detected capacity change from 0 to 1024 [ 66.062779][ T4733] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.323: bad orphan inode 134217728 [ 66.089656][ T4733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.192637][ T4744] all: renamed from bridge_slave_0 (while UP) [ 66.207398][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 66.207413][ T29] audit: type=1400 audit(1768573446.322:1792): avc: denied { add_name } for pid=4732 comm="syz.3.323" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.319005][ T29] audit: type=1326 audit(1768573446.432:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.348635][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.330'. [ 66.370632][ T29] audit: type=1326 audit(1768573446.432:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.394241][ T29] audit: type=1326 audit(1768573446.432:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.418410][ T29] audit: type=1326 audit(1768573446.432:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.441818][ T29] audit: type=1326 audit(1768573446.432:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.465916][ T29] audit: type=1326 audit(1768573446.432:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.489257][ T29] audit: type=1326 audit(1768573446.432:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.513459][ T29] audit: type=1326 audit(1768573446.432:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.537761][ T29] audit: type=1326 audit(1768573446.432:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2a95d8f749 code=0x7ffc0000 [ 66.572919][ T4754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.331'. [ 66.708033][ T4761] loop1: detected capacity change from 0 to 128 [ 66.858084][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.906467][ T4768] loop3: detected capacity change from 0 to 2048 [ 66.920430][ T4770] loop5: detected capacity change from 0 to 128 [ 66.947175][ T4768] Alternate GPT is invalid, using primary GPT. [ 66.953547][ T4768] loop3: p2 p3 p7 [ 67.305956][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 67.314967][ T4791] netlink: 108 bytes leftover after parsing attributes in process `syz.3.346'. [ 67.334607][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 67.350260][ T4791] netlink: 108 bytes leftover after parsing attributes in process `syz.3.346'. [ 67.359442][ T4791] netlink: 84 bytes leftover after parsing attributes in process `syz.3.346'. [ 67.423101][ T4793] loop4: detected capacity change from 0 to 1024 [ 67.434555][ T4795] all: renamed from bridge_slave_0 [ 67.458555][ T4793] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.347: bad orphan inode 134217728 [ 67.492477][ T4793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.535201][ T4800] loop3: detected capacity change from 0 to 2048 [ 67.555193][ T4800] EXT4-fs (loop3): failed to initialize system zone (-117) [ 67.562751][ T4800] EXT4-fs (loop3): mount failed [ 67.571622][ T4800] bridge_slave_0: left allmulticast mode [ 67.577437][ T4800] bridge_slave_0: left promiscuous mode [ 67.583206][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.595520][ T4800] bridge_slave_1: left allmulticast mode [ 67.601222][ T4800] bridge_slave_1: left promiscuous mode [ 67.607012][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.617992][ T4800] bond0: (slave bond_slave_0): Releasing backup interface [ 67.630841][ T4800] bond0: (slave bond_slave_1): Releasing backup interface [ 67.643991][ T4804] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 67.651990][ T4804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.349'. [ 67.665825][ T3566] IPVS: starting estimator thread 0... [ 67.699653][ T4800] team0: Port device team_slave_0 removed [ 67.706504][ T4800] team0: Port device team_slave_1 removed [ 67.712624][ T4800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.720580][ T4800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.728485][ T4800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.755983][ T4807] IPVS: using max 2256 ests per chain, 112800 per kthread [ 68.039512][ T4829] loop5: detected capacity change from 0 to 512 [ 68.081470][ T4829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.110478][ T4829] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.123505][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.186306][ T4389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.298884][ T4840] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.669055][ T4846] Set syz1 is full, maxelem 65536 reached [ 68.677196][ T4878] loop1: detected capacity change from 0 to 1024 [ 68.718977][ T4878] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.376: bad orphan inode 134217728 [ 68.754694][ T4878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.192953][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.279062][ T4901] netlink: 'syz.3.395': attribute type 3 has an invalid length. [ 69.294213][ T4901] netlink: 'syz.3.395': attribute type 3 has an invalid length. [ 69.349344][ T4905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.389815][ T4903] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 69.400366][ T4905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.451247][ T4905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.499682][ T4905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.581343][ T3772] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.593757][ T3772] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.634934][ T3772] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.654483][ T3772] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.331200][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 70.556654][ T4949] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.607522][ T4949] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.647653][ T4949] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.676682][ T4960] loop4: detected capacity change from 0 to 512 [ 70.686130][ T4960] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.703791][ T4960] EXT4-fs (loop4): 1 truncate cleaned up [ 70.710686][ T4960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.726363][ T4949] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.840205][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.283890][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 71.283909][ T29] audit: type=1326 audit(1768573451.392:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.315995][ T29] audit: type=1326 audit(1768573451.392:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.339519][ T29] audit: type=1326 audit(1768573451.392:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.362892][ T29] audit: type=1326 audit(1768573451.392:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.386324][ T29] audit: type=1326 audit(1768573451.392:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.409814][ T29] audit: type=1326 audit(1768573451.392:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.433388][ T29] audit: type=1326 audit(1768573451.402:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.456827][ T29] audit: type=1326 audit(1768573451.402:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.480331][ T29] audit: type=1326 audit(1768573451.402:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.503903][ T29] audit: type=1326 audit(1768573451.402:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 71.540201][ T4982] vlan2: entered allmulticast mode [ 71.545502][ T4982] dummy0: entered allmulticast mode [ 71.573864][ T4984] loop4: detected capacity change from 0 to 128 [ 71.597254][ T4984] bio_check_eod: 36 callbacks suppressed [ 71.597273][ T4984] syz.4.418: attempt to access beyond end of device [ 71.597273][ T4984] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 71.625403][ T4984] syz.4.418: attempt to access beyond end of device [ 71.625403][ T4984] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 71.639168][ T4984] syz.4.418: attempt to access beyond end of device [ 71.639168][ T4984] loop4: rw=2049, sector=162, nr_sectors = 2 limit=128 [ 71.661817][ T4984] syz.4.418: attempt to access beyond end of device [ 71.661817][ T4984] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 71.676239][ T4984] syz.4.418: attempt to access beyond end of device [ 71.676239][ T4984] loop4: rw=2049, sector=186, nr_sectors = 2 limit=128 [ 71.691340][ T4984] syz.4.418: attempt to access beyond end of device [ 71.691340][ T4984] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 71.706505][ T4984] syz.4.418: attempt to access beyond end of device [ 71.706505][ T4984] loop4: rw=2049, sector=194, nr_sectors = 2 limit=128 [ 71.720686][ T4984] syz.4.418: attempt to access beyond end of device [ 71.720686][ T4984] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 71.734688][ T4984] syz.4.418: attempt to access beyond end of device [ 71.734688][ T4984] loop4: rw=2049, sector=218, nr_sectors = 2 limit=128 [ 71.749054][ T4984] syz.4.418: attempt to access beyond end of device [ 71.749054][ T4984] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 71.773505][ T4990] __nla_validate_parse: 1 callbacks suppressed [ 71.773526][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 71.794394][ T4992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.422'. [ 71.814120][ T4992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.836385][ T4992] bond1: (slave ip6tnl1): refused to change device type [ 72.782791][ T3774] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.803399][ T3774] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.821504][ T3774] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.850264][ T3774] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.871565][ T5148] loop1: detected capacity change from 0 to 512 [ 72.890496][ T5148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.903407][ T5148] EXT4-fs (loop1): 1 truncate cleaned up [ 72.914854][ T5148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.972669][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 73.004640][ T5160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.439'. [ 73.013750][ T5160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.439'. [ 73.102267][ T5173] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 73.116682][ T5173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.128604][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 73.140633][ T5173] bond0 (unregistering): Released all slaves [ 73.190334][ T5179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 73.199298][ T5179] netlink: 108 bytes leftover after parsing attributes in process `syz.4.448'. [ 73.209149][ T5179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 73.233117][ T5179] netlink: 108 bytes leftover after parsing attributes in process `syz.4.448'. [ 73.247011][ T5179] loop4: detected capacity change from 0 to 512 [ 73.313284][ T5185] vlan0: entered allmulticast mode [ 73.318502][ T5185] bridge_slave_0: entered allmulticast mode [ 73.529323][ T5193] sd 0:0:1:0: device reset [ 74.017262][ T5226] loop5: detected capacity change from 0 to 512 [ 74.038941][ T5226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.052272][ T5226] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.082277][ T4389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.323921][ T5259] vlan2: entered allmulticast mode [ 74.329623][ T5259] dummy0: entered allmulticast mode [ 74.434903][ T5264] loop4: detected capacity change from 0 to 512 [ 74.507848][ T5264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.532525][ T5264] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.551372][ T5270] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.584237][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.637872][ T5270] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.665352][ T5280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.691989][ T5270] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.736753][ T5280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.767952][ T5270] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.851871][ T5280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.903870][ T2710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.922760][ T2710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.939595][ T5280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.982969][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.999579][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.023517][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.043132][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.063016][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.085194][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.214504][ T5307] loop4: detected capacity change from 0 to 1024 [ 75.224942][ T5307] EXT4-fs: Ignoring removed nobh option [ 75.230626][ T5307] EXT4-fs: Ignoring removed bh option [ 75.258853][ T5307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.276449][ T5312] vhci_hcd vhci_hcd.2: invalid port number 96 [ 75.282701][ T5312] vhci_hcd vhci_hcd.2: default hub control req: 0000 vfffc i0060 l0 [ 75.306627][ T5307] EXT4-fs (loop4): pa ffff88810760b690: logic 1, phys. 129, len 4 [ 75.314523][ T5307] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 75.375024][ T5323] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 75.385355][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.423130][ T5323] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 75.433387][ T5323] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 75.444073][ T5323] bond1: (slave vxcan3): making interface the new active one [ 75.452026][ T5323] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 75.467509][ T5323] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 75.476470][ T5323] bond1 (unregistering): Released all slaves [ 75.486431][ T5331] syz.4.509 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.519694][ T5335] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.617470][ T5335] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.728076][ T5335] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.764522][ T5349] loop4: detected capacity change from 0 to 512 [ 75.788375][ T5335] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.789399][ T5349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.812580][ T5349] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.841320][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.864937][ T5355] loop3: detected capacity change from 0 to 1024 [ 75.872195][ T5355] EXT4-fs: Ignoring removed nobh option [ 75.878513][ T5355] EXT4-fs: Ignoring removed bh option [ 75.898323][ T5355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.920045][ T5355] EXT4-fs (loop3): pa ffff88810760b700: logic 1, phys. 129, len 4 [ 75.928337][ T5355] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 75.959311][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.285930][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 76.285949][ T29] audit: type=1326 audit(1768573456.402:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.337073][ T29] audit: type=1326 audit(1768573456.402:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.361389][ T29] audit: type=1326 audit(1768573456.432:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.384893][ T29] audit: type=1326 audit(1768573456.432:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.408989][ T29] audit: type=1326 audit(1768573456.432:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.433112][ T29] audit: type=1326 audit(1768573456.432:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.457477][ T29] audit: type=1326 audit(1768573456.432:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.480885][ T29] audit: type=1326 audit(1768573456.432:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.504895][ T29] audit: type=1326 audit(1768573456.432:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.529009][ T29] audit: type=1326 audit(1768573456.432:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e08cf749 code=0x7ffc0000 [ 76.586395][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.721744][ T3006] ================================================================== [ 76.729891][ T3006] BUG: KCSAN: data-race in drop_nlink / generic_fillattr [ 76.736963][ T3006] [ 76.739360][ T3006] write to 0xffff88811b385af0 of 4 bytes by task 3561 on cpu 0: [ 76.747028][ T3006] drop_nlink+0x3d/0xa0 [ 76.751223][ T3006] simple_unlink+0x60/0x80 [ 76.755680][ T3006] shmem_unlink+0x12d/0x140 [ 76.760242][ T3006] shmem_rename2+0x18e/0x310 [ 76.764869][ T3006] vfs_rename+0x97f/0xad0 [ 76.769224][ T3006] do_renameat2+0x383/0x810 [ 76.773760][ T3006] __x64_sys_rename+0x58/0x70 [ 76.778477][ T3006] x64_sys_call+0x24e/0x3000 [ 76.783095][ T3006] do_syscall_64+0xca/0x2b0 [ 76.787615][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.793530][ T3006] [ 76.795916][ T3006] read to 0xffff88811b385af0 of 4 bytes by task 3006 on cpu 1: [ 76.803493][ T3006] generic_fillattr+0xfb/0x340 [ 76.808301][ T3006] shmem_getattr+0x181/0x200 [ 76.812930][ T3006] vfs_getattr_nosec+0x146/0x1e0 [ 76.817897][ T3006] __se_sys_newfstat+0x96/0x2e0 [ 76.822777][ T3006] __x64_sys_newfstat+0x31/0x40 [ 76.827665][ T3006] x64_sys_call+0x2c51/0x3000 [ 76.832367][ T3006] do_syscall_64+0xca/0x2b0 [ 76.836887][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.842799][ T3006] [ 76.845224][ T3006] value changed: 0x00000001 -> 0x00000000 [ 76.850955][ T3006] [ 76.853290][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 76.859456][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.868779][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.878877][ T3006] ================================================================== [ 76.939173][ T5380] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 76.971672][ T5380] bond1: entered promiscuous mode [ 77.016255][ T5380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.056251][ T5378] loop5: detected capacity change from 0 to 256 [ 77.065416][ T5380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.077213][ T5380] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 77.087811][ T5380] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 77.099979][ T5378] FAT-fs (loop5): bogus number of FAT sectors [ 77.106186][ T5378] FAT-fs (loop5): Can't find a valid FAT filesystem [ 77.128488][ T5380] bond1: (slave wireguard0): making interface the new active one [ 77.136380][ T5380] wireguard0: entered promiscuous mode [ 77.150506][ T5380] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 77.180017][ T5384] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 77.194053][ T5384] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 78.741083][ T3751] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.753886][ T3751] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.765606][ T3751] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.777770][ T3751] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0