last executing test programs: 2.844680352s ago: executing program 2 (id=187): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) 2.765638082s ago: executing program 2 (id=189): syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4f, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x30, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x24000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000000)) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000480)=0x14) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x600, 0x0, 0x0, 0x0}) 2.713220251s ago: executing program 2 (id=190): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.570234481s ago: executing program 2 (id=192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x7, 0x2, '%%\x00'}}}]}, 0xfffffffffffffcbf}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x5) 2.48458246s ago: executing program 3 (id=193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r2}, 0x2a) r3 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000380)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000200003"], 0x33fe0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r5, &(0x7f0000000440)="264f7e9708dc53a46de6ff26cef5f7c3513271c78056e3a1ce3f3bc10c11b16f7297745e430514c803c049f55c1a1c240831c6935d644e9f8dd749bac387a959257958eb1f8cd0b2e92dce05d508c5851fcdd2a8ed9e2da074e9fb24fb229234c13efbd14d4aee6977171f21e25837263b201f", 0x73, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000180)=""/4, 0x4}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={0x0}, 0x1) futimesat(0xffffffffffffffff, 0x0, 0x0) 2.122900629s ago: executing program 2 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000300), 0x0, 0x0, 0x0) (fail_nth: 4) 1.853320208s ago: executing program 3 (id=198): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000300)="89bf01a84cebb418773f9a96e81a9a7cff0e067b16f0422ff3eac5aeaffeb51ffc107887e8ede10e5ddc066da6f8ba8b8ad9be9380ecee87587b78", 0x3b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 1.803981938s ago: executing program 2 (id=199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x20420c, &(0x7f0000003240)=ANY=[], 0xc, 0x36d, &(0x7f0000001b00)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40004) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008050) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) 1.803452587s ago: executing program 3 (id=200): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) 1.758888997s ago: executing program 3 (id=202): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf1, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket(0x1e, 0x805, 0x0) connect$tipc(r7, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) creat(0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000001000010000000000859624e587ba57d32e8244d48f33ae4cbf4e49218f69a55b3295ee944728530893451d86ccbec2a46cd7360d0f7d41b61cc36ccd86edeb28c2e87a2fafdad97ded1698bcea8b10bc7be747c676c8034bc2544d1074c9af927f1d19275eb3246da9e105ec2d272086517cfb771bddeb44aa2a99eda3913bde6bf66dea8eda805307ef1439584", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = dup(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r12}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[], [], 0x6b}}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.448703986s ago: executing program 3 (id=204): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x5, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x101, {}, {}, @quote}], 0x38) 1.308576956s ago: executing program 1 (id=207): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x9, 0x0, &(0x7f0000000700)={0xa1, 0x12, 0xffff, 0xf3}, 0x8, 0x9, 0x1, 0x0, 0x0, 0xffff, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f0000000500)) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x0, 0x0, 0x0, 0x300}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x0, 0x400000, 0x1, 0x6, 0xbb6}, &(0x7f0000000100)=0x98) r5 = dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000680)='net/tcp6\x00') ioctl$PTP_EXTTS_REQUEST2(r5, 0x80503d0a, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 1.173298965s ago: executing program 1 (id=208): creat(&(0x7f0000000200)='./bus\x00', 0x40) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000340)="517bf16bf126", 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x220e593, &(0x7f0000000600)=ANY=[], 0xfd, 0x1207, &(0x7f0000002dc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102000000000000000000000000ebf5622b060676179bf02a5ca21c9181166a3e561614e54b27d2d16a66c28a808c576265bf5f436e15"], 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000c446e5002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000034000000060a010400000000000000000100000008000b40000000000900010073797a30000000000900074008d41ece0d000000140000001100010004000000000000000000000a7a4af2b104d7513e99f0082a39799cca551ce9403eab5ea586e2015b04237d7c67aaffddee16fec91cf230"], 0xa8}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r2, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) 913.263144ms ago: executing program 1 (id=209): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700), 0x3, 0x453, &(0x7f0000000740)="$eJzs3M9vFFUcAPDvzHaLCNiK+IMfahWNjT9aCqgcPKjRxAMmJnrQY9MWgizU0JoIIQrG4MkYE+/Go/+CJ70Y48nEq94NCTFcAE9rZnem3W53l3a7ZbH7+SQD78283fe+++btvpm32wAG1lj2TxKxMyL+jIiRenZlgbH6fzevX5y5df3iTBLV6rv/JLVyN65fnCmKFo/bkWfG04j0iyT2t6h34fyF09OVyty5PD+5eOajyYXzF144dWb65NzJubOHjx07emTq5ZcOv9iTOLM23dj36fyBvW998M3bx79aEX9THE22dVnlWKeDT1erXT7t3WlXQzoZ6mNDWJdSRGTdVa6N/5EoxXLnjcSbn/e1ccCmqlar1R3tD1+qAltYEivzhjwMiuKDPrv+LbbmScCrmzf96Ltrr9UvgLK4b+Zb/chQpHmZctP1bS+NRcT7l/79Ltui830IAICe+Cmb/zzfav6XxkMN5e7L14ZGI+L+iNgdEQ9ExJ6IeDCiVvbhiHhknfU3L5Ksnv+kV7sKbI2y+d8r+drWyvlfMfuL0VKe21WLv5ycOFWZO5S/JuNR3pblpzrU8fMbf3zd7ljj/C/bsvqLuWDejqtDTStQs9OL0xuJudG1yxH7hlrFnyytBCQRsTci9nVZx6lnfzjQ7tjt4++gB+tM1e8jnqn3/6Voir+QdF6fnLwnKnOHJouzYrXffr/yTrv6NxR/D2T9f2/L838p/tGkcb12Yf11XPnry7bXNN2e/8PJe7X0cL7vk+nFxXNTEcPJ8XqjG/cfXn5skS/KZ/GPH2w9/nfH8iuxPyKyk/jRiHgsIh7P2/5ERDwZEQc7xP/r60992H38myuLf3Zd/b+cGI7mPa0TpdO//Lii0tFV8d/q3P9Ha6nxfM9a3v/W0q7uzmYAAAD4/0kjYmck6cRSOk0nJurfl98TkVbmFxafOzH/8dnZ+m8ERqOcFne6Rhruh07ll/X1/OWIqH+1oDh+JL9v/G1pey0/MTNfme138DDgdrQZ/5m/S/1uHbDp/F4LBpfxD4PL+IfBZfzD4Gox/rf3ox3Andfq8/+zPrQDuPOaxr9lPxggrv9hcLUd/1v5L/8ANT7/YSAtbI/b/0i+Y6J4pi4fvmUTUb4rmrHxRDVp2bmR9rthEpuZ6O/7EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQK/8FwAA//+IEOBW") mkdir(0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) flock(r3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0) dup3(r3, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x30, 0xffffffffffffffff, 0x2110e000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x78) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0xd9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 659.372713ms ago: executing program 0 (id=211): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408082, 0x53) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c084) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 651.466923ms ago: executing program 0 (id=212): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002940), 0x101000, 0x0) lseek(r2, 0xf3, 0x2) (async) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000180)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000041000000080000000800000005200000e437fafba49777bc570000fb6e0259e9b2c8642d0d41545336973e504f93e13eac236e8ae789bee363e6d5071c11ac2ee486f9edda407341e47320665a9e74151865b31977cbe9b85e58de4821d8bc08232e8c6f4029d2fbcb07771527d31ce27f8d2e5262af6d3b63eefdb888b397c5c09d3dd63773168cdaa8126068846f3890758a69a25e0ab554f5fc245dfd0411cce7da5a41fb1c10872c5525cbdb986c9c43d496c26e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800002000000000fb120ea9b1794b8200000000", @ANYRES32=r4, @ANYBLOB="0000040000000000a7080004090000007b8af8ff00000000bfa2000000000800079a79fd9829c0cba90363b37c623510300746c8ccc3000008000000b7040000000000000000868200"/84], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f00000001c0)={0x0, "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) (async) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004, @tid=r7}, &(0x7f0000000000)=0x0) (async) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r9, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=ANY=[@ANYRES16=r4], 0xdd12}, {&(0x7f00000019c0)={0xa4, 0x27, 0x201, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x94, 0xe, 0x0, 0x1, [@typed={0x8b, 0xa0, 0x0, 0x0, @binary="02add06403984cdf0a4db755d42a869e5dfe976b47488dd2196ef79e420bd94b0e8fff93253535e571e4896558f09be6e8133245be2333c5bfeef6546a45133338b096267a008c6f8e548f864daf2b8b0bc7390f045f85d816d95e58c85cb3120565b60d161b400f169e7073c4fd2b07aebca3e6456d46ada12d7a47ddaade96d4c39dba50be29"}, @nested={0x4, 0x4a}]}]}, 0xa4}], 0x2}, 0x2000c005) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @private}, &(0x7f0000000400)=0xc) (async) timer_settime(r8, 0x0, &(0x7f0000000540)={{0x0, 0x989680}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 607.197413ms ago: executing program 0 (id=213): r0 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001000)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb, 0x3}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x48001) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r3, 0x601, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0x68, &(0x7f0000000140)={&(0x7f0000001480)={0x23c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x14, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x14, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0xff}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x81) 606.467683ms ago: executing program 0 (id=214): r0 = open$dir(0x0, 0x408082, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c084) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 585.782582ms ago: executing program 1 (id=215): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x9, 0x0, &(0x7f0000000700)={0xa1, 0x12, 0xffff, 0xf3}, 0x8, 0x9, 0x1, 0x0, 0x0, 0xffff, 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f0000000500)) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x0, 0x0, 0x0, 0x300}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x0, 0x400000, 0x1, 0x6, 0xbb6}, &(0x7f0000000100)=0x98) r5 = dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000680)='net/tcp6\x00') ioctl$PTP_EXTTS_REQUEST2(r5, 0x80503d0a, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 555.106342ms ago: executing program 3 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_ignore}, {@noinit_itable}, {@sysvgroups}, {@errors_remount}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$eJzs3ElvHMUeAPB/j5fEL8mzX957QBbIQEBYIOLYWQ8cCAIpFyQkEApHYztRiJOg2EhJZBGzKEgcQPkEAW5IfAJOcEGAOIC4EsERIUXIBxw4oEE10zOMPTPe4iWxfz9pnKru6q6q7q64lmkHsGEV048sYmtE/BgR3ZXozATFyj+3piaG/piaGMqiVHrht6ycbnpq4sNq0upxW/JIbyGi8E4Wu5rkO3bp8pnB0dGRC5Xo2zfGC/mes4OnRk6NnBs4evTgga4jhwcOLUs9U5mmd75xfveO4y9fe27oxLVXvv40lbeU75+emhiaeUTPInNoa9hSjOLMa1nnkUWe/U63rS6ctaefhbUrDAuWntp0uzrK7b872sqxiu549q1aImDdKZVKpU0NW2sNfrJUL8sqBwDrRKZJwwa0ve43/vRUGqlODDWOg9e3m8eiPAJK9b6Vfyp72ssj2GJPZWzUsUL5/y8iTkz+eT19ouk8BADA8vr8WETp5987Ur+j+qnsKcQ9den+na8N9UTEfyIi9R3/m/df/h9RTntvRNxXd0zqUW6eJ//irHhj/+f7rjyQuqxLrmcrqf/3ZL62NbP/V1u/6GnLY9vK9e/ITp4eHdmfX5Pe6NiU4v2Np65Nq33xzA8ftMq/WNf/S5+Uf7UvmJfj1/ZZE3TDg+ODt1vvqptvli/slcb6Z9GeVUMROyJi5xLOn67Z6cc+2d1qf63+bXH9RKpnQ/3fb33y9iUUaJbSRxGPVu7/ZMyqf9KZh/rGz77WN3bp8hOn69cn+48cHjjUtzlGR/b3VZ+KRt98d/X5PNgwjJj//q+sdP//1fT5r61c9mT167Vji8/j6o13W45plvr8d2YvlsOd+baLg+PjF/ojOrPJxu0D/xx7cbBrRvpU/969zdv/9oi/qovbuyIiPcT3R8QDEbEnL/uDEfFQROydo/5fPf3wq62GkHfC/R9e1P1vFXjq24jmu9rOfPlZQ8bvFRdY/3T/D5ZDvfmW4cHx+X6txFwlrQ/c9gUEAACAu8CeiNgaWWFfPse5NQqFffsittRmUMbGHz95/vVzw5V3BHqio1Cd6equmw/tz+eGUzwdNVAXT/sPlOeNS6VSqSvF0/h9dNvaVh02vC0t2n/yi+/9w/q3qHW0Vm+0AXelpa+jL/8XMoDVtQzfowHuUto/bFwLbv8r9RYcsGaatf8rEbfWoCjAKmvW/l9ag3IAq8/4HzYu7R82Lu0fNqQFvSS/hMD247O31OWVta9Mpq0DhZj7rwD0RFS3VL/gOPcJfypELE8J25a1pl0z7mmhaZrNsRx5RWHeNO2L+EMMqxso3BnFqAQ2RcQ8T2/tYbtSDVxe6YKVG8HHa/u/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO37OwAA//8GPdEz") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x60410, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport}, {@fscache}, {@mmap}, {@cache_fscache}, {@dfltgid}, {@debug={'debug', 0x3d, 0xfffffffffffffff4}}, {@directio}], [{@euid_eq}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x63db, 0x6, 0x1, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r7 = fcntl$dupfd(r2, 0x406, r2) write$sndseq(r7, &(0x7f00000003c0)=[{0x20, 0x0, 0xd, 0x0, @time={0x7, 0xfffffff7}, {0x0, 0xe}, {}, @control={0x4, 0x1, 0xa}}, {0x0, 0x9f, 0x0, 0x0, @time={0x6, 0x5}, {0x6, 0x4}, {}, @raw32={[0x2, 0x80000000, 0x8]}}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="62b877ace456ddf281727634f396e451ca2a4901cb6296aeb69cb1ebcf2ef2b381165dec55a506f3e83150fd6ecc00b222e0bf4c0de97a2baee8", @ANYRES8=r1], 0x0, 0x800, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 522.510002ms ago: executing program 0 (id=218): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700), 0x3, 0x453, &(0x7f0000000740)="$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") mkdir(0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) flock(r3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0) dup3(r3, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x30, 0xffffffffffffffff, 0x2110e000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x78) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0xd9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) 493.212292ms ago: executing program 4 (id=219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x7, 0x2, '%%\x00'}}}]}, 0xfffffffffffffcbf}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x5) 421.241982ms ago: executing program 1 (id=220): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700), 0x3, 0x453, &(0x7f0000000740)="$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") mkdir(0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) flock(r3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0) dup3(r3, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x30, 0xffffffffffffffff, 0x2110e000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x78) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0xd9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 335.518801ms ago: executing program 4 (id=221): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408082, 0x53) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c084) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 334.118361ms ago: executing program 4 (id=222): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x600, 0x0, 0x0, 0x0}) 318.695701ms ago: executing program 4 (id=223): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045430, 0x4000000000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000001100010100000000000000000000000093e0c72a7b0f4eb1d4ae57ec5baa63b4dd41ed2995609b4a0a7129c184ad6b5ee1be387dfa0a", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x20008040) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f0000001a80)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f00000000c0), 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x101840, 0x0) getsockname$l2tp6(r7, &(0x7f0000000580)={0xa, 0x0, 0x0, @empty}, &(0x7f00000005c0)=0x20) socket$key(0xf, 0x3, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040), 0x1) 154.80612ms ago: executing program 0 (id=224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000180)='pstore\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{r0}, 0x0, &(0x7f0000001180)='%+9llu \x00'}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf, &(0x7f0000000380)) alarm(0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000380)={0xf7fffff8, 0x0, 0x3, 0x691f, 0x1c, "90737f0000ff1c00000000fcff95647fffffeb"}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000300)={0xe3, 0x9, 0x9}) r3 = dup(r2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x82f6, 0x0, "fffff5337cffff7f"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000500)=""/248, 0xf8}], 0x1}, 0x11f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 54.98957ms ago: executing program 4 (id=225): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x408082, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c084) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 17.36028ms ago: executing program 1 (id=226): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700), 0x3, 0x453, &(0x7f0000000740)="$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") mkdir(0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) flock(r3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0) dup3(r3, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x30, 0xffffffffffffffff, 0x2110e000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x78) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0xd9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 4 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x3, 0x4) r4 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x88, 0x5, 0x8c, 0x1}]}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40100000, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) read(r11, &(0x7f0000001240)=""/4096, 0x1000) splice(r1, &(0x7f0000000200)=0x8000000000000000, r8, &(0x7f00000003c0)=0x8, 0x0, 0x7) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setpipe(r10, 0x407, 0x5) close_range(r10, 0xffffffffffffffff, 0x0) r13 = getpgrp(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8c50}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x1, 0x48, &(0x7f00000008c0)=""/72, 0x40f00, 0x46, '\x00', 0x0, 0x1b, r12, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xc, 0xffffe68e, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r12, r7, r9, r12, r7, r7], 0x0, 0x10, 0xbc, @void, @value}, 0x94) syz_pidfd_open(r13, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 17.644918][ T29] audit: type=1400 audit(1734182808.091:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 22.757740][ T29] audit: type=1400 audit(1734182813.211:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.758768][ T3287] cgroup: Unknown subsys name 'net' [ 22.780445][ T29] audit: type=1400 audit(1734182813.211:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.807783][ T29] audit: type=1400 audit(1734182813.231:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.947576][ T3287] cgroup: Unknown subsys name 'cpuset' [ 22.953531][ T3287] cgroup: Unknown subsys name 'rlimit' [ 23.062136][ T29] audit: type=1400 audit(1734182813.511:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.085373][ T29] audit: type=1400 audit(1734182813.511:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.105863][ T29] audit: type=1400 audit(1734182813.511:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.126212][ T29] audit: type=1400 audit(1734182813.511:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.146519][ T29] audit: type=1400 audit(1734182813.511:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.171321][ T29] audit: type=1400 audit(1734182813.511:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.178281][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.203330][ T29] audit: type=1400 audit(1734182813.651:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.270534][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.444003][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 24.503698][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.528144][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 24.540089][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 24.562208][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 24.617151][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.624226][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.631364][ T3297] bridge_slave_0: entered allmulticast mode [ 24.637835][ T3297] bridge_slave_0: entered promiscuous mode [ 24.650663][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.657828][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.664918][ T3302] bridge_slave_0: entered allmulticast mode [ 24.671309][ T3302] bridge_slave_0: entered promiscuous mode [ 24.677524][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.684584][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.691878][ T3297] bridge_slave_1: entered allmulticast mode [ 24.698385][ T3297] bridge_slave_1: entered promiscuous mode [ 24.715074][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.722148][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.729326][ T3302] bridge_slave_1: entered allmulticast mode [ 24.735596][ T3302] bridge_slave_1: entered promiscuous mode [ 24.768222][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.775286][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.782589][ T3296] bridge_slave_0: entered allmulticast mode [ 24.788868][ T3296] bridge_slave_0: entered promiscuous mode [ 24.795123][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.802198][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.809375][ T3305] bridge_slave_0: entered allmulticast mode [ 24.815708][ T3305] bridge_slave_0: entered promiscuous mode [ 24.827078][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.840935][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.847995][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.855127][ T3296] bridge_slave_1: entered allmulticast mode [ 24.861475][ T3296] bridge_slave_1: entered promiscuous mode [ 24.867780][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.874822][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.881992][ T3305] bridge_slave_1: entered allmulticast mode [ 24.888319][ T3305] bridge_slave_1: entered promiscuous mode [ 24.895316][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.905241][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.915009][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.924231][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.931305][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.938521][ T3298] bridge_slave_0: entered allmulticast mode [ 24.944912][ T3298] bridge_slave_0: entered promiscuous mode [ 24.967274][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.974355][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.981542][ T3298] bridge_slave_1: entered allmulticast mode [ 24.987961][ T3298] bridge_slave_1: entered promiscuous mode [ 25.014960][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.024889][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.034524][ T3297] team0: Port device team_slave_0 added [ 25.040893][ T3297] team0: Port device team_slave_1 added [ 25.047351][ T3302] team0: Port device team_slave_0 added [ 25.058118][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.071984][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.089152][ T3302] team0: Port device team_slave_1 added [ 25.095714][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.109345][ T3296] team0: Port device team_slave_0 added [ 25.128426][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.137904][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.144843][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.170755][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.181880][ T3296] team0: Port device team_slave_1 added [ 25.192701][ T3305] team0: Port device team_slave_0 added [ 25.199155][ T3305] team0: Port device team_slave_1 added [ 25.212449][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.219406][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.245308][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.268930][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.275887][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.301842][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.319135][ T3298] team0: Port device team_slave_0 added [ 25.326143][ T3298] team0: Port device team_slave_1 added [ 25.332254][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.339221][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.365155][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.376109][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.383077][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.408967][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.420125][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.427114][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.453016][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.463880][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.470928][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.496894][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.515184][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.522214][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.548248][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.578108][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.585112][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.611021][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.629669][ T3297] hsr_slave_0: entered promiscuous mode [ 25.635683][ T3297] hsr_slave_1: entered promiscuous mode [ 25.641880][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.648870][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.674780][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.705249][ T3296] hsr_slave_0: entered promiscuous mode [ 25.711273][ T3296] hsr_slave_1: entered promiscuous mode [ 25.717335][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.724971][ T3296] Cannot create hsr debugfs directory [ 25.741117][ T3305] hsr_slave_0: entered promiscuous mode [ 25.747188][ T3305] hsr_slave_1: entered promiscuous mode [ 25.752990][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.760577][ T3305] Cannot create hsr debugfs directory [ 25.773720][ T3302] hsr_slave_0: entered promiscuous mode [ 25.779698][ T3302] hsr_slave_1: entered promiscuous mode [ 25.785493][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.793064][ T3302] Cannot create hsr debugfs directory [ 25.853769][ T3298] hsr_slave_0: entered promiscuous mode [ 25.859826][ T3298] hsr_slave_1: entered promiscuous mode [ 25.865642][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.873212][ T3298] Cannot create hsr debugfs directory [ 25.998480][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.006658][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.024890][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.035179][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.049537][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.058210][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.066821][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.079064][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.099106][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.118343][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.128663][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.139741][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.153510][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.166643][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.190267][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.198701][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.209780][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.223191][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.231835][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.242058][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.250895][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.288003][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.310133][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.317268][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.325917][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.333050][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.352886][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.366218][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.396144][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.409745][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.419347][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.442089][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.451234][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.458309][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.466803][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.473859][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.482553][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.489748][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.503529][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.510677][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.529844][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.545664][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.572011][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.579095][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.591856][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.600919][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.615598][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.622688][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.645748][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.656188][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.668619][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.675822][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.685052][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.692120][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.724792][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.736526][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.774761][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.864181][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.878501][ T3302] veth0_vlan: entered promiscuous mode [ 26.903536][ T3296] veth0_vlan: entered promiscuous mode [ 26.913687][ T3302] veth1_vlan: entered promiscuous mode [ 26.921645][ T3296] veth1_vlan: entered promiscuous mode [ 26.943764][ T3302] veth0_macvtap: entered promiscuous mode [ 26.955367][ T3302] veth1_macvtap: entered promiscuous mode [ 26.966773][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.980897][ T3298] veth0_vlan: entered promiscuous mode [ 26.987794][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.999713][ T3296] veth0_macvtap: entered promiscuous mode [ 27.006835][ T3296] veth1_macvtap: entered promiscuous mode [ 27.022816][ T3305] veth0_vlan: entered promiscuous mode [ 27.031943][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.042443][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.054548][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.062088][ T3298] veth1_vlan: entered promiscuous mode [ 27.069670][ T3305] veth1_vlan: entered promiscuous mode [ 27.080719][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.089518][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.098228][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.106981][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.126344][ T3305] veth0_macvtap: entered promiscuous mode [ 27.133877][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.144370][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.155019][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.168432][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.177158][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.185839][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.194547][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.209049][ T3305] veth1_macvtap: entered promiscuous mode [ 27.225225][ T3298] veth0_macvtap: entered promiscuous mode [ 27.235032][ T3297] veth0_vlan: entered promiscuous mode [ 27.243235][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.253723][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.263537][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.274011][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.284432][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.293573][ T3297] veth1_vlan: entered promiscuous mode [ 27.300535][ T3298] veth1_macvtap: entered promiscuous mode [ 27.308532][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.310769][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.333502][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.343324][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.353840][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.364192][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.380943][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.389735][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.398468][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.407220][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.420926][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.431447][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.441341][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.451764][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.461567][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.472083][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.490642][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.501949][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.512465][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.522358][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.532808][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.542653][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.553173][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.564643][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.575300][ T3297] veth0_macvtap: entered promiscuous mode [ 27.590264][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.599040][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.607859][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.616675][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.638500][ T3297] veth1_macvtap: entered promiscuous mode [ 27.660626][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.671198][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.681057][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.691520][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.701349][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.711922][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.721755][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.732277][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.742818][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.760785][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.771322][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.781179][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.791385][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 27.791399][ T29] audit: type=1400 audit(1734182818.231:127): avc: denied { ioctl } for pid=3445 comm="syz.4.5" path="socket:[4256]" dev="sockfs" ino=4256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.791616][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.832765][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.843215][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.853103][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.863593][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.873920][ T29] audit: type=1400 audit(1734182818.311:128): avc: denied { read write } for pid=3445 comm="syz.4.5" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.882020][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.896899][ T29] audit: type=1400 audit(1734182818.311:129): avc: denied { open } for pid=3445 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.905023][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.926716][ T29] audit: type=1400 audit(1734182818.311:130): avc: denied { map_read map_write } for pid=3445 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.954937][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.963678][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.972511][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.011350][ T29] audit: type=1400 audit(1734182818.461:131): avc: denied { ioctl } for pid=3445 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.137242][ T3456] loop2: detected capacity change from 0 to 512 [ 28.157355][ T29] audit: type=1400 audit(1734182818.581:132): avc: denied { write } for pid=3439 comm="syz.1.2" name="tcp" dev="proc" ino=4026532734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.202726][ T29] audit: type=1400 audit(1734182818.651:133): avc: denied { read write } for pid=3450 comm="syz.0.1" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 28.226627][ T29] audit: type=1400 audit(1734182818.651:134): avc: denied { open } for pid=3450 comm="syz.0.1" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 28.451541][ T29] audit: type=1400 audit(1734182818.841:135): avc: denied { open } for pid=3459 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.470474][ T29] audit: type=1400 audit(1734182818.841:136): avc: denied { kernel } for pid=3459 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.515682][ T3456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.554482][ T3472] pim6reg: entered allmulticast mode [ 28.560023][ T3456] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.573030][ T3472] pim6reg: left allmulticast mode [ 28.659292][ T3476] 9pnet_fd: Insufficient options for proto=fd [ 28.722960][ T3474] loop4: detected capacity change from 0 to 512 [ 28.741863][ T3480] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #18: comm syz.2.3: corrupted inode contents [ 28.759239][ T3474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.793023][ T3474] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.808904][ T3474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.819617][ T3477] IPv6: Can't replace route, no match found [ 28.829597][ T3480] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #18: comm syz.2.3: mark_inode_dirty error [ 28.879657][ T3480] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #18: comm syz.2.3: corrupted inode contents [ 28.894096][ T3480] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #18: comm syz.2.3: mark_inode_dirty error [ 28.907549][ T3480] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #18: comm syz.2.3: mark inode dirty (error -117) [ 28.920866][ T3480] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 28.980637][ T3490] loop3: detected capacity change from 0 to 512 [ 28.994051][ T3490] ======================================================= [ 28.994051][ T3490] WARNING: The mand mount option has been deprecated and [ 28.994051][ T3490] and is ignored by this kernel. Remove the mand [ 28.994051][ T3490] option from the mount to silence this warning. [ 28.994051][ T3490] ======================================================= [ 29.013019][ T3488] loop1: detected capacity change from 0 to 512 [ 29.065132][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.081250][ T3488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.094403][ T3488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.107717][ T3488] EXT4-fs (loop1): 1 truncate cleaned up [ 29.113664][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.118360][ T3490] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.407725][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.469054][ T3510] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.14: corrupted inode contents [ 29.508069][ T3510] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.14: mark_inode_dirty error [ 29.558619][ T3510] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.14: corrupted inode contents [ 29.628987][ T3522] loop1: detected capacity change from 0 to 512 [ 29.645470][ T3510] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.14: mark_inode_dirty error [ 29.690446][ T3510] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.14: mark inode dirty (error -117) [ 29.723159][ T3510] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 29.723296][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.754649][ T3512] xt_CT: No such helper "syz0" [ 29.832876][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.854866][ T3538] loop2: detected capacity change from 0 to 512 [ 29.863714][ T3522] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.18: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 29.969689][ T3538] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.19: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 29.992414][ T3522] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.18: Bad quota inode: 3, type: 0 [ 30.010801][ T3552] loop4: detected capacity change from 0 to 512 [ 30.024482][ T3538] EXT4-fs error (device loop2): ext4_quota_enable:7115: comm syz.2.19: Bad quota inode: 3, type: 0 [ 30.051323][ T3538] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 30.069115][ T3552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.091759][ T3522] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 30.108511][ T3538] EXT4-fs (loop2): mount failed [ 30.120738][ T3552] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.137007][ T3522] EXT4-fs (loop1): mount failed [ 30.290573][ T3560] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.22'. [ 30.324768][ T3559] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.22'. [ 30.338963][ T3560] IPv6: Can't replace route, no match found [ 30.415554][ T3563] loop0: detected capacity change from 0 to 512 [ 30.449407][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.467013][ T3563] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.600676][ T3569] loop1: detected capacity change from 0 to 512 [ 30.700035][ T3569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.733276][ T3569] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.186650][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.350295][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.380255][ T3581] pim6reg1: entered promiscuous mode [ 31.385580][ T3581] pim6reg1: entered allmulticast mode [ 31.635319][ T3591] loop3: detected capacity change from 0 to 256 [ 31.645834][ T3591] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.691865][ T3593] loop1: detected capacity change from 0 to 128 [ 31.703271][ T3591] FAT-fs (loop3): Directory bread(block 64) failed [ 31.719973][ T3591] FAT-fs (loop3): Directory bread(block 65) failed [ 31.726551][ T3591] FAT-fs (loop3): Directory bread(block 66) failed [ 31.760070][ T3591] FAT-fs (loop3): Directory bread(block 67) failed [ 31.781317][ T3591] FAT-fs (loop3): Directory bread(block 68) failed [ 31.782025][ T3593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.798592][ T3591] FAT-fs (loop3): Directory bread(block 69) failed [ 31.815297][ T3591] FAT-fs (loop3): Directory bread(block 70) failed [ 31.828605][ T3591] FAT-fs (loop3): Directory bread(block 71) failed [ 31.848393][ T3591] FAT-fs (loop3): Directory bread(block 72) failed [ 31.865214][ T3591] FAT-fs (loop3): Directory bread(block 73) failed [ 31.875356][ T3593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.906206][ T3600] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.998879][ T3602] loop3: detected capacity change from 0 to 128 [ 32.038143][ T3593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.091303][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.102924][ T3593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.126590][ T3602] syz.3.35: attempt to access beyond end of device [ 32.126590][ T3602] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.159704][ T3602] syz.3.35: attempt to access beyond end of device [ 32.159704][ T3602] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 32.173576][ T3602] syz.3.35: attempt to access beyond end of device [ 32.173576][ T3602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.186754][ T3602] syz.3.35: attempt to access beyond end of device [ 32.186754][ T3602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.200036][ T3602] syz.3.35: attempt to access beyond end of device [ 32.200036][ T3602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.213428][ T3602] syz.3.35: attempt to access beyond end of device [ 32.213428][ T3602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.237442][ T3610] loop0: detected capacity change from 0 to 512 [ 32.244415][ T3605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.259954][ T3610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.272641][ T3610] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.292283][ T3593] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.314104][ T3593] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.340501][ T3619] loop3: detected capacity change from 0 to 512 [ 32.349207][ T3593] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.349700][ T3619] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.368516][ T3593] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.388051][ T3605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.399816][ T3619] EXT4-fs (loop3): 1 truncate cleaned up [ 32.406713][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.444968][ T3623] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.37'. [ 32.461049][ T3623] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #18: comm syz.0.37: corrupted inode contents [ 32.473051][ T3623] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #18: comm syz.0.37: mark_inode_dirty error [ 32.484501][ T3605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.497723][ T3623] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #18: comm syz.0.37: corrupted inode contents [ 32.512107][ T3622] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.37'. [ 32.527868][ T3623] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #18: comm syz.0.37: mark_inode_dirty error [ 32.553748][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.555976][ T3628] Zero length message leads to an empty skb [ 32.577508][ T3623] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #18: comm syz.0.37: mark inode dirty (error -117) [ 32.599846][ T3623] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 32.625748][ T3605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.629770][ T3632] loop3: detected capacity change from 0 to 128 [ 32.679542][ T3632] syz.3.41: attempt to access beyond end of device [ 32.679542][ T3632] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.710403][ T3605] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.726079][ T3605] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.742279][ T3605] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.767601][ T3632] syz.3.41: attempt to access beyond end of device [ 32.767601][ T3632] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 32.769240][ T3605] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.787298][ T3632] syz.3.41: attempt to access beyond end of device [ 32.787298][ T3632] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.803571][ T3632] syz.3.41: attempt to access beyond end of device [ 32.803571][ T3632] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.822152][ T3634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.834560][ T3636] loop1: detected capacity change from 0 to 256 [ 32.842687][ T29] kauditd_printk_skb: 773 callbacks suppressed [ 32.842699][ T29] audit: type=1326 audit(1734182823.291:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 32.872444][ T29] audit: type=1326 audit(1734182823.291:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 32.915346][ T29] audit: type=1326 audit(1734182823.361:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 32.949360][ T29] audit: type=1326 audit(1734182823.361:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 32.972612][ T29] audit: type=1326 audit(1734182823.361:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 32.995779][ T29] audit: type=1326 audit(1734182823.361:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 33.019279][ T29] audit: type=1326 audit(1734182823.361:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 33.042800][ T29] audit: type=1326 audit(1734182823.361:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 33.048074][ T3642] loop4: detected capacity change from 0 to 512 [ 33.065942][ T29] audit: type=1326 audit(1734182823.361:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 33.095542][ T29] audit: type=1326 audit(1734182823.361:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3631 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 33.101233][ T3642] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.45: corrupted xattr block 255: invalid header [ 33.160800][ T3642] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 33.172089][ T3642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.185036][ T3642] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.45: corrupted xattr block 255: invalid header [ 33.216969][ T3642] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 33.226606][ T3634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.239177][ T3642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.288674][ T3648] loop3: detected capacity change from 0 to 256 [ 33.305293][ T3634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.389630][ T3634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.473895][ T3634] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.505198][ T3634] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.527561][ T3634] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.546354][ T3634] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.621333][ T3658] loop1: detected capacity change from 0 to 512 [ 33.666155][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.714266][ T3658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.730052][ T3658] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.745275][ T3666] loop0: detected capacity change from 0 to 512 [ 33.772752][ T3667] loop2: detected capacity change from 0 to 512 [ 33.791820][ T3667] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.51: corrupted xattr block 255: invalid header [ 33.805872][ T3666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 33.815120][ T3667] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 33.823484][ T3666] System zones: 1-12 [ 33.827759][ T3667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.880529][ T3667] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.51: corrupted xattr block 255: invalid header [ 33.885341][ T3666] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.50: invalid block [ 33.894283][ T3667] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 33.913518][ T3666] EXT4-fs (loop0): Remounting filesystem read-only [ 33.920446][ T3667] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.930487][ T3666] EXT4-fs (loop0): 1 truncate cleaned up [ 33.936516][ T3666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.948649][ T3666] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 33.955559][ T3666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.975407][ T3675] 9pnet_fd: Insufficient options for proto=fd [ 34.150769][ T3682] pim6reg1: entered promiscuous mode [ 34.156143][ T3682] pim6reg1: entered allmulticast mode [ 34.172672][ T3680] loop4: detected capacity change from 0 to 512 [ 34.173223][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.198284][ T3680] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.222375][ T3680] EXT4-fs (loop4): 1 truncate cleaned up [ 34.228783][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.297649][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.326810][ T3695] proc: Unknown parameter 'giiå/ÚŽùÁÏkSšœ¹"ØÒM¬O{ZÃvó?' [ 34.355701][ T3696] loop4: detected capacity change from 0 to 512 [ 34.375937][ T3691] loop2: detected capacity change from 0 to 512 [ 34.385307][ T3691] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.58: corrupted xattr block 255: invalid header [ 34.392264][ T3696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.419388][ T3691] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 34.426295][ T3696] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.442894][ T3691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.455830][ T3691] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.58: corrupted xattr block 255: invalid header [ 34.469857][ T3691] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 34.479557][ T3691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.698358][ T3725] loop2: detected capacity change from 0 to 512 [ 34.724971][ T3725] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.754155][ T3725] EXT4-fs (loop2): 1 truncate cleaned up [ 34.760755][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.852914][ T3736] 9pnet_fd: Insufficient options for proto=fd [ 34.891103][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.946564][ T3744] loop1: detected capacity change from 0 to 512 [ 34.960269][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.972251][ T3744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.994878][ T3744] EXT4-fs (loop1): 1 truncate cleaned up [ 35.001910][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.079009][ T3757] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.087990][ T3748] loop2: detected capacity change from 0 to 512 [ 35.117256][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.128869][ T3748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.141851][ T3748] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.189061][ T3748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.207802][ T3757] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.261694][ T3772] pim6reg1: entered promiscuous mode [ 35.267058][ T3772] pim6reg1: entered allmulticast mode [ 35.317946][ T3757] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.368230][ T3757] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.565544][ T3795] 9pnet_fd: Insufficient options for proto=fd [ 35.640199][ T3799] loop0: detected capacity change from 0 to 512 [ 35.687455][ T3799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.716377][ T3799] EXT4-fs (loop0): 1 truncate cleaned up [ 35.745821][ T3799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.869792][ T3807] loop1: detected capacity change from 0 to 512 [ 35.896932][ T3807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.907171][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.077171][ T3807] EXT4-fs (loop1): 1 truncate cleaned up [ 36.083152][ T3807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.126737][ T3823] loop0: detected capacity change from 0 to 512 [ 36.164121][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.174438][ T3823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.199242][ T3830] loop1: detected capacity change from 0 to 128 [ 36.208783][ T3823] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.250966][ T3830] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.322364][ T3839] loop2: detected capacity change from 0 to 256 [ 36.360301][ T3830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.391646][ T3849] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.82'. [ 36.415270][ T3830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.430426][ T3842] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.82'. [ 36.445671][ T3849] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #18: comm syz.0.82: corrupted inode contents [ 36.478306][ T3830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.493196][ T3849] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #18: comm syz.0.82: mark_inode_dirty error [ 36.505396][ T3849] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #18: comm syz.0.82: corrupted inode contents [ 36.521631][ T3849] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #18: comm syz.0.82: mark_inode_dirty error [ 36.530000][ T3853] pim6reg1: entered promiscuous mode [ 36.538715][ T3853] pim6reg1: entered allmulticast mode [ 36.554206][ T3849] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #18: comm syz.0.82: mark inode dirty (error -117) [ 36.588061][ T3849] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 36.776395][ T3861] 9pnet_fd: Insufficient options for proto=fd [ 36.810346][ T3863] loop2: detected capacity change from 0 to 512 [ 36.820119][ T3863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.831531][ T3863] EXT4-fs (loop2): 1 truncate cleaned up [ 36.851494][ T3863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.866141][ T3867] loop3: detected capacity change from 0 to 512 [ 36.878553][ T3867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 36.886586][ T3867] System zones: 1-12 [ 36.890866][ T3867] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.91: invalid indirect mapped block 8 (level 2) [ 36.906430][ T3867] EXT4-fs (loop3): Remounting filesystem read-only [ 36.913157][ T3867] EXT4-fs (loop3): 1 truncate cleaned up [ 36.921859][ T3867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.933940][ T3867] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 36.940932][ T3867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.984303][ T3830] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.999062][ T3757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.011603][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.023165][ T3757] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.061138][ T3757] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.079906][ T3757] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.102700][ T3880] loop2: detected capacity change from 0 to 512 [ 37.109939][ T3830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.128275][ T3880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.173523][ T3880] EXT4-fs (loop2): 1 truncate cleaned up [ 37.188277][ T3880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.213802][ T3890] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.269289][ T3890] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.272833][ T3884] loop4: detected capacity change from 0 to 512 [ 37.303572][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.340321][ T3884] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.94: corrupted xattr block 255: invalid header [ 37.358180][ T3890] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.371207][ T3884] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 37.389174][ T3884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.415846][ T3884] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.94: corrupted xattr block 255: invalid header [ 37.432108][ T3884] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 37.441958][ T3906] loop2: detected capacity change from 0 to 512 [ 37.451092][ T3890] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.476566][ T3906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 37.488412][ T3884] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.490165][ T3906] System zones: 1-12 [ 37.502304][ T3906] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.96: invalid block [ 37.514287][ T3906] EXT4-fs (loop2): Remounting filesystem read-only [ 37.520915][ T3906] EXT4-fs (loop2): 1 truncate cleaned up [ 37.527072][ T3906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.539829][ T3906] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 37.551767][ T3890] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.564300][ T3890] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.577640][ T3906] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.599961][ T3890] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.613276][ T3890] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.796749][ T3920] loop3: detected capacity change from 0 to 512 [ 37.838964][ T3920] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.99: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 37.865169][ T3920] EXT4-fs error (device loop3): ext4_quota_enable:7115: comm syz.3.99: Bad quota inode: 3, type: 0 [ 37.915097][ T3920] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 37.934613][ T3926] loop4: detected capacity change from 0 to 512 [ 37.951169][ T3920] EXT4-fs (loop3): mount failed [ 37.980301][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 37.980317][ T29] audit: type=1326 audit(1734182828.431:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 37.984014][ T3928] loop2: detected capacity change from 0 to 512 [ 37.986497][ T29] audit: type=1326 audit(1734182828.431:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.039270][ T29] audit: type=1326 audit(1734182828.431:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.062885][ T29] audit: type=1326 audit(1734182828.431:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.086507][ T29] audit: type=1326 audit(1734182828.511:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.109975][ T29] audit: type=1326 audit(1734182828.511:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.133213][ T29] audit: type=1326 audit(1734182828.511:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.156538][ T29] audit: type=1326 audit(1734182828.541:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.179793][ T29] audit: type=1326 audit(1734182828.541:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.203090][ T29] audit: type=1326 audit(1734182828.541:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7bde65d19 code=0x7ffc0000 [ 38.238021][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.263103][ T3926] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.100: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 38.268845][ T3928] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.102: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 38.298889][ T3928] EXT4-fs error (device loop2): ext4_quota_enable:7115: comm syz.2.102: Bad quota inode: 3, type: 0 [ 38.310339][ T3926] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.100: Bad quota inode: 3, type: 0 [ 38.310850][ T3928] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 38.335906][ T3928] EXT4-fs (loop2): mount failed [ 38.337340][ T3926] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 38.357021][ T3926] EXT4-fs (loop4): mount failed [ 38.635883][ T3941] loop0: detected capacity change from 0 to 512 [ 38.692481][ T3951] loop0: detected capacity change from 0 to 256 [ 38.856277][ T3956] loop2: detected capacity change from 0 to 128 [ 38.899929][ T3956] bio_check_eod: 2 callbacks suppressed [ 38.900001][ T3956] syz.2.111: attempt to access beyond end of device [ 38.900001][ T3956] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 38.947410][ T3956] syz.2.111: attempt to access beyond end of device [ 38.947410][ T3956] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 38.962986][ T3956] syz.2.111: attempt to access beyond end of device [ 38.962986][ T3956] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 38.976366][ T3956] syz.2.111: attempt to access beyond end of device [ 38.976366][ T3956] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 38.990764][ T3956] syz.2.111: attempt to access beyond end of device [ 38.990764][ T3956] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.003990][ T3956] syz.2.111: attempt to access beyond end of device [ 39.003990][ T3956] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.029550][ T3961] loop4: detected capacity change from 0 to 512 [ 39.048730][ T3961] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.110: corrupted xattr block 255: invalid header [ 39.063038][ T3961] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 39.071801][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.085465][ T3961] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.110: corrupted xattr block 255: invalid header [ 39.100427][ T3961] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 39.107802][ T3961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.198067][ T3969] loop0: detected capacity change from 0 to 512 [ 39.218989][ T3969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.232497][ T3969] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.322122][ T3973] loop2: detected capacity change from 0 to 512 [ 39.329530][ T3973] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.335968][ T3973] EXT4-fs: Ignoring removed bh option [ 39.342554][ T3973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.394684][ T3973] EXT4-fs (loop2): 1 truncate cleaned up [ 39.400825][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.484350][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.520533][ T3979] netlink: 'syz.3.117': attribute type 1 has an invalid length. [ 39.528289][ T3979] netlink: 224 bytes leftover after parsing attributes in process `syz.3.117'. [ 39.553471][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.557526][ T3982] loop2: detected capacity change from 0 to 1024 [ 39.568699][ T3986] loop4: detected capacity change from 0 to 512 [ 39.570101][ T3982] EXT4-fs: Ignoring removed nobh option [ 39.580593][ T3982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.588135][ T3982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.602071][ T3982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.617665][ T3979] hub 6-0:1.0: USB hub found [ 39.625613][ T3979] hub 6-0:1.0: 8 ports detected [ 39.629121][ T3982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.640799][ T3982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.641786][ T3986] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.118: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 39.675633][ T3986] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.118: Bad quota inode: 3, type: 0 [ 39.687923][ T3979] netlink: 'syz.3.117': attribute type 1 has an invalid length. [ 39.694733][ T3986] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.710890][ T3986] EXT4-fs (loop4): mount failed [ 39.720623][ T3979] bond1: entered promiscuous mode [ 39.728857][ T3979] team0: Port device team_slave_1 removed [ 39.736349][ T3979] bond1: (slave team_slave_1): making interface the new active one [ 39.744289][ T3979] team_slave_1: entered promiscuous mode [ 39.750520][ T3979] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 39.756228][ T3995] loop0: detected capacity change from 0 to 512 [ 39.791675][ T3995] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.120: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 39.809748][ T3995] EXT4-fs error (device loop0): ext4_quota_enable:7115: comm syz.0.120: Bad quota inode: 3, type: 0 [ 39.820924][ T3995] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.835687][ T3995] EXT4-fs (loop0): mount failed [ 40.180676][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.317889][ T3979] syz.3.117 (3979) used greatest stack depth: 10728 bytes left [ 40.373339][ T4007] loop3: detected capacity change from 0 to 512 [ 40.381855][ T4007] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.411053][ T4007] EXT4-fs (loop3): 1 truncate cleaned up [ 40.431136][ T4007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.456346][ T4010] loop4: detected capacity change from 0 to 128 [ 40.503214][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.522901][ T4010] syz.4.125: attempt to access beyond end of device [ 40.522901][ T4010] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 40.555531][ T4010] syz.4.125: attempt to access beyond end of device [ 40.555531][ T4010] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 40.587057][ T4010] syz.4.125: attempt to access beyond end of device [ 40.587057][ T4010] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 40.621328][ T4010] syz.4.125: attempt to access beyond end of device [ 40.621328][ T4010] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 40.623036][ T4014] loop0: detected capacity change from 0 to 128 [ 40.646052][ T4012] loop3: detected capacity change from 0 to 512 [ 40.663559][ T4012] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.126: corrupted xattr block 255: invalid header [ 40.680926][ T4012] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 40.691040][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.713952][ T4012] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.126: corrupted xattr block 255: invalid header [ 40.746624][ T4012] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 40.766519][ T4012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.900558][ T4026] loop3: detected capacity change from 0 to 512 [ 40.921429][ T4027] loop0: detected capacity change from 0 to 512 [ 40.928516][ T4026] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.130: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 40.950401][ T4026] EXT4-fs error (device loop3): ext4_quota_enable:7115: comm syz.3.130: Bad quota inode: 3, type: 0 [ 40.961988][ T4026] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 40.986784][ T4026] EXT4-fs (loop3): mount failed [ 41.014071][ T4027] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.129: corrupted xattr block 255: invalid header [ 41.041437][ T4027] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 41.050192][ T4027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.063153][ T4027] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.129: corrupted xattr block 255: invalid header [ 41.086003][ T4027] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 41.093198][ T4027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.150046][ T4038] dvmrp1: entered allmulticast mode [ 41.199443][ T4043] loop1: detected capacity change from 0 to 256 [ 41.238505][ T4038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 41.294321][ T4038] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 55387 - 0 [ 41.302640][ T4038] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 55387 - 0 [ 41.311056][ T4038] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 55387 - 0 [ 41.319349][ T4038] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 55387 - 0 [ 41.327891][ T4038] geneve2: entered promiscuous mode [ 41.333186][ T4038] geneve2: entered allmulticast mode [ 41.349802][ T4047] loop0: detected capacity change from 0 to 512 [ 41.359616][ T4047] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.371559][ T4047] EXT4-fs (loop0): 1 truncate cleaned up [ 41.377849][ T4047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.476273][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.500417][ T4055] loop2: detected capacity change from 0 to 128 [ 41.545116][ T4065] loop0: detected capacity change from 0 to 256 [ 41.761308][ T4082] loop2: detected capacity change from 0 to 512 [ 41.787973][ T4082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 41.796011][ T4082] System zones: 1-12 [ 41.797136][ T4084] loop3: detected capacity change from 0 to 512 [ 41.812928][ T4082] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.140: invalid indirect mapped block 8 (level 2) [ 41.836406][ T4082] EXT4-fs (loop2): Remounting filesystem read-only [ 41.846295][ T4084] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.846313][ T4082] EXT4-fs (loop2): 1 truncate cleaned up [ 41.862134][ T4082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.874265][ T4082] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 41.881308][ T4082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.900606][ T4084] EXT4-fs (loop3): 1 truncate cleaned up [ 41.929554][ T4084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.017781][ T4093] loop4: detected capacity change from 0 to 128 [ 42.078591][ T4093] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.088398][ T4093] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55387 - 0 [ 42.114479][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.172886][ T4093] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.178231][ T4104] loop2: detected capacity change from 0 to 512 [ 42.182751][ T4093] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55387 - 0 [ 42.203775][ T4104] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.145: corrupted xattr block 255: invalid header [ 42.227484][ T4104] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 42.236046][ T4104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.293152][ T4112] loop0: detected capacity change from 0 to 256 [ 42.316765][ T4104] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.145: corrupted xattr block 255: invalid header [ 42.365126][ T4104] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 42.377859][ T4118] loop1: detected capacity change from 0 to 512 [ 42.385320][ T4104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.404788][ T4093] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.414640][ T4093] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55387 - 0 [ 42.425102][ T4118] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.151: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 42.467156][ T4118] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.151: Bad quota inode: 3, type: 0 [ 42.492326][ T4118] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 42.492933][ T4093] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.516821][ T4093] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55387 - 0 [ 42.519137][ T4118] EXT4-fs (loop1): mount failed [ 42.573682][ T4093] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 55387 - 0 [ 42.582081][ T4093] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.619751][ T4125] loop2: detected capacity change from 0 to 512 [ 42.620098][ T4093] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 55387 - 0 [ 42.634396][ T4093] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.675498][ T4125] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.152: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 42.679384][ T4131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=4131 comm=syz.3.154 [ 42.713450][ T4093] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 55387 - 0 [ 42.716635][ T4125] EXT4-fs error (device loop2): ext4_quota_enable:7115: comm syz.2.152: Bad quota inode: 3, type: 0 [ 42.721937][ T4093] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.734823][ T4125] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 42.743484][ T4093] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 55387 - 0 [ 42.755567][ T4125] EXT4-fs (loop2): mount failed [ 42.763669][ T4093] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 42.915749][ T4138] FAULT_INJECTION: forcing a failure. [ 42.915749][ T4138] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.928946][ T4138] CPU: 0 UID: 0 PID: 4138 Comm: syz.4.156 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 42.939617][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.949755][ T4138] Call Trace: [ 42.953132][ T4138] [ 42.956108][ T4138] dump_stack_lvl+0xf2/0x150 [ 42.960761][ T4138] dump_stack+0x15/0x1a [ 42.964928][ T4138] should_fail_ex+0x223/0x230 [ 42.969619][ T4138] should_fail+0xb/0x10 [ 42.973801][ T4138] should_fail_usercopy+0x1a/0x20 [ 42.978907][ T4138] strncpy_from_user+0x25/0x210 [ 42.983805][ T4138] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 42.989491][ T4138] ? getname_flags+0x81/0x3b0 [ 42.991938][ T29] kauditd_printk_skb: 2003 callbacks suppressed [ 42.991949][ T29] audit: type=1326 audit(1734182833.441:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d606bcce7 code=0x7ffc0000 [ 42.994163][ T4138] getname_flags+0xb0/0x3b0 [ 43.001747][ T29] audit: type=1326 audit(1734182833.451:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6827bcce7 code=0x7ffc0000 [ 43.023535][ T4138] __x64_sys_renameat2+0x61/0xa0 [ 43.028117][ T29] audit: type=1326 audit(1734182833.451:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa682761f29 code=0x7ffc0000 [ 43.051233][ T4138] x64_sys_call+0x1bf1/0x2dc0 [ 43.051279][ T4138] do_syscall_64+0xc9/0x1c0 [ 43.056167][ T29] audit: type=1326 audit(1734182833.451:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 43.079300][ T4138] ? clear_bhb_loop+0x55/0xb0 [ 43.079322][ T4138] ? clear_bhb_loop+0x55/0xb0 [ 43.114251][ T29] audit: type=1326 audit(1734182833.531:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d60661f29 code=0x7ffc0000 [ 43.116169][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.121040][ T29] audit: type=1326 audit(1734182833.531:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d606bcce7 code=0x7ffc0000 [ 43.121061][ T29] audit: type=1326 audit(1734182833.531:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d60661f29 code=0x7ffc0000 [ 43.121082][ T29] audit: type=1326 audit(1734182833.531:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9d606c5d19 code=0x7ffc0000 [ 43.121101][ T29] audit: type=1326 audit(1734182833.541:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6827bcce7 code=0x7ffc0000 [ 43.144334][ T4138] RIP: 0033:0x7fa69d565d19 [ 43.144356][ T4138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.150245][ T29] audit: type=1326 audit(1734182833.541:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa682761f29 code=0x7ffc0000 [ 43.173367][ T4138] RSP: 002b:00007fa69bbd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 43.173456][ T4138] RAX: ffffffffffffffda RBX: 00007fa69d755fa0 RCX: 00007fa69d565d19 [ 43.173467][ T4138] RDX: 0000000000000003 RSI: 00000000200006c0 RDI: 0000000000000003 [ 43.173478][ T4138] RBP: 00007fa69bbd1090 R08: 0000000000000000 R09: 0000000000000000 [ 43.173490][ T4138] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 43.173501][ T4138] R13: 0000000000000000 R14: 00007fa69d755fa0 R15: 00007ffc862660a8 [ 43.173518][ T4138] [ 43.420940][ T4152] loop1: detected capacity change from 0 to 512 [ 43.472707][ T4155] 9pnet_fd: Insufficient options for proto=fd [ 43.499875][ T4152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.520738][ T4159] FAULT_INJECTION: forcing a failure. [ 43.520738][ T4159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.533998][ T4159] CPU: 0 UID: 0 PID: 4159 Comm: syz.2.164 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 43.544719][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.554778][ T4159] Call Trace: [ 43.558053][ T4159] [ 43.560984][ T4159] dump_stack_lvl+0xf2/0x150 [ 43.565593][ T4159] dump_stack+0x15/0x1a [ 43.569821][ T4159] should_fail_ex+0x223/0x230 [ 43.574508][ T4159] should_fail+0xb/0x10 [ 43.578710][ T4159] should_fail_usercopy+0x1a/0x20 [ 43.583756][ T4159] _copy_from_iter+0xd5/0xd00 [ 43.588535][ T4159] ? kmalloc_reserve+0x16e/0x190 [ 43.593532][ T4159] ? __build_skb_around+0x196/0x1f0 [ 43.598842][ T4159] ? __alloc_skb+0x21f/0x310 [ 43.603434][ T4159] ? __virt_addr_valid+0x1ed/0x250 [ 43.608572][ T4159] ? __check_object_size+0x364/0x520 [ 43.613872][ T4159] netlink_sendmsg+0x460/0x6e0 [ 43.618668][ T4159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.623967][ T4159] __sock_sendmsg+0x140/0x180 [ 43.627041][ T4152] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.628641][ T4159] ____sys_sendmsg+0x312/0x410 [ 43.643569][ T4159] __sys_sendmsg+0x19d/0x230 [ 43.648228][ T4159] __x64_sys_sendmsg+0x46/0x50 [ 43.653070][ T4159] x64_sys_call+0x2734/0x2dc0 [ 43.657757][ T4159] do_syscall_64+0xc9/0x1c0 [ 43.662264][ T4159] ? clear_bhb_loop+0x55/0xb0 [ 43.667085][ T4159] ? clear_bhb_loop+0x55/0xb0 [ 43.671831][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.677736][ T4159] RIP: 0033:0x7f9d606c5d19 [ 43.682147][ T4159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.701759][ T4159] RSP: 002b:00007f9d5ed37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.710187][ T4159] RAX: ffffffffffffffda RBX: 00007f9d608b5fa0 RCX: 00007f9d606c5d19 [ 43.718213][ T4159] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 43.726182][ T4159] RBP: 00007f9d5ed37090 R08: 0000000000000000 R09: 0000000000000000 [ 43.734145][ T4159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.742109][ T4159] R13: 0000000000000000 R14: 00007f9d608b5fa0 R15: 00007ffe7b453648 [ 43.750251][ T4159] [ 43.873893][ T4167] loop2: detected capacity change from 0 to 512 [ 43.881349][ T4167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.903839][ T4167] EXT4-fs (loop2): 1 truncate cleaned up [ 43.910111][ T4167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.950192][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.992366][ T4175] loop3: detected capacity change from 0 to 512 [ 44.006386][ T4176] FAULT_INJECTION: forcing a failure. [ 44.006386][ T4176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.019502][ T4176] CPU: 1 UID: 0 PID: 4176 Comm: syz.2.169 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 44.030091][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.040143][ T4176] Call Trace: [ 44.043444][ T4176] [ 44.046365][ T4176] dump_stack_lvl+0xf2/0x150 [ 44.051029][ T4176] dump_stack+0x15/0x1a [ 44.055244][ T4176] should_fail_ex+0x223/0x230 [ 44.060007][ T4176] should_fail+0xb/0x10 [ 44.064153][ T4176] should_fail_usercopy+0x1a/0x20 [ 44.069205][ T4176] _copy_from_iter+0xd5/0xd00 [ 44.073874][ T4176] ? kmalloc_reserve+0x16e/0x190 [ 44.078800][ T4176] ? __build_skb_around+0x196/0x1f0 [ 44.084015][ T4176] ? __alloc_skb+0x21f/0x310 [ 44.088613][ T4176] ? __virt_addr_valid+0x1ed/0x250 [ 44.093729][ T4176] ? __check_object_size+0x364/0x520 [ 44.099053][ T4176] netlink_sendmsg+0x460/0x6e0 [ 44.103929][ T4176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.109223][ T4176] __sock_sendmsg+0x140/0x180 [ 44.113954][ T4176] ____sys_sendmsg+0x312/0x410 [ 44.118737][ T4176] __sys_sendmsg+0x19d/0x230 [ 44.123332][ T4176] __x64_sys_sendmsg+0x46/0x50 [ 44.128088][ T4176] x64_sys_call+0x2734/0x2dc0 [ 44.132758][ T4176] do_syscall_64+0xc9/0x1c0 [ 44.137305][ T4176] ? clear_bhb_loop+0x55/0xb0 [ 44.141972][ T4176] ? clear_bhb_loop+0x55/0xb0 [ 44.146641][ T4176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.152543][ T4176] RIP: 0033:0x7f9d606c5d19 [ 44.156951][ T4176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.176567][ T4176] RSP: 002b:00007f9d5ed37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.184968][ T4176] RAX: ffffffffffffffda RBX: 00007f9d608b5fa0 RCX: 00007f9d606c5d19 [ 44.192929][ T4176] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 44.200934][ T4176] RBP: 00007f9d5ed37090 R08: 0000000000000000 R09: 0000000000000000 [ 44.208944][ T4176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.216904][ T4176] R13: 0000000000000000 R14: 00007f9d608b5fa0 R15: 00007ffe7b453648 [ 44.224869][ T4176] [ 44.261272][ T4175] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.170: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 44.306092][ T4175] EXT4-fs error (device loop3): ext4_quota_enable:7115: comm syz.3.170: Bad quota inode: 3, type: 0 [ 44.321479][ T4175] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.339013][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.352478][ T4175] EXT4-fs (loop3): mount failed [ 44.387312][ T4185] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.398071][ T4185] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 44.405498][ T4187] loop1: detected capacity change from 0 to 512 [ 44.428724][ T4187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.440025][ T4187] EXT4-fs (loop1): 1 truncate cleaned up [ 44.445902][ T4187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.508737][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.595899][ T4198] loop2: detected capacity change from 0 to 128 [ 44.605435][ T4196] loop0: detected capacity change from 0 to 128 [ 44.613778][ T4198] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.637008][ T4196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.669212][ T4198] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.693412][ T4208] loop4: detected capacity change from 0 to 256 [ 44.702331][ T4196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.748122][ T4198] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.789748][ T4196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.842025][ T4198] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.864512][ T4196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.914085][ T4198] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.935034][ T4198] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.970901][ T4196] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.989566][ T4198] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.010121][ T4198] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.030393][ T4196] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.068584][ T4196] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.091740][ T4196] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.118259][ T4231] loop1: detected capacity change from 0 to 256 [ 45.407843][ T4244] loop3: detected capacity change from 0 to 512 [ 45.419413][ T4244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.447125][ T4244] EXT4-fs (loop3): 1 truncate cleaned up [ 45.453195][ T4244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.591119][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.841810][ T4262] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.193'. [ 45.879386][ T4270] loop1: detected capacity change from 0 to 256 [ 45.886730][ T4272] FAULT_INJECTION: forcing a failure. [ 45.886730][ T4272] name failslab, interval 1, probability 0, space 0, times 1 [ 45.899494][ T4272] CPU: 1 UID: 0 PID: 4272 Comm: syz.2.196 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 45.910091][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.920159][ T4272] Call Trace: [ 45.920167][ T4272] [ 45.920174][ T4272] dump_stack_lvl+0xf2/0x150 [ 45.920206][ T4272] dump_stack+0x15/0x1a [ 45.920231][ T4272] should_fail_ex+0x223/0x230 [ 45.939912][ T4272] should_failslab+0x8f/0xb0 [ 45.944568][ T4272] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 45.950941][ T4272] ? __kvmalloc_node_noprof+0x72/0x170 [ 45.956486][ T4272] ? simple_xattr_set+0xa3/0x2a0 [ 45.961433][ T4272] kstrdup+0x38/0x80 [ 45.965446][ T4272] simple_xattr_set+0xa3/0x2a0 [ 45.970244][ T4272] ? strlen+0x19/0x30 [ 45.974229][ T4272] shmem_xattr_handler_set+0x129/0x220 [ 45.979700][ T4272] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 45.985730][ T4272] __vfs_setxattr+0x2e5/0x310 [ 45.990417][ T4272] __vfs_setxattr_noperm+0xed/0x420 [ 45.995693][ T4272] __vfs_setxattr_locked+0x1af/0x1d0 [ 46.000994][ T4272] vfs_setxattr+0x140/0x290 [ 46.005580][ T4272] file_setxattr+0x139/0x1b0 [ 46.010204][ T4272] path_setxattrat+0x2c2/0x310 [ 46.014985][ T4272] __x64_sys_fsetxattr+0x6d/0x80 [ 46.020014][ T4272] x64_sys_call+0x29d2/0x2dc0 [ 46.024703][ T4272] do_syscall_64+0xc9/0x1c0 [ 46.029209][ T4272] ? clear_bhb_loop+0x55/0xb0 [ 46.033940][ T4272] ? clear_bhb_loop+0x55/0xb0 [ 46.038623][ T4272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.044581][ T4272] RIP: 0033:0x7f9d606c5d19 [ 46.049030][ T4272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.068761][ T4272] RSP: 002b:00007f9d5ed37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 46.077176][ T4272] RAX: ffffffffffffffda RBX: 00007f9d608b5fa0 RCX: 00007f9d606c5d19 [ 46.085147][ T4272] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 46.093111][ T4272] RBP: 00007f9d5ed37090 R08: 0000000000000000 R09: 0000000000000000 [ 46.101154][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.109211][ T4272] R13: 0000000000000000 R14: 00007f9d608b5fa0 R15: 00007ffe7b453648 [ 46.117175][ T4272] [ 46.220661][ T4295] loop2: detected capacity change from 0 to 128 [ 46.235946][ T4299] loop0: detected capacity change from 0 to 512 [ 46.247780][ T4295] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.267950][ T4299] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.201: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 46.296309][ T4302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.202'. [ 46.322223][ T4299] EXT4-fs error (device loop0): ext4_quota_enable:7115: comm syz.0.201: Bad quota inode: 3, type: 0 [ 46.323487][ T4307] loop4: detected capacity change from 0 to 128 [ 46.334716][ T4302] loop3: detected capacity change from 0 to 512 [ 46.347477][ T4295] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.354583][ T4302] EXT4-fs: Ignoring removed i_version option [ 46.364691][ T4299] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 46.381611][ T4302] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.385462][ T4299] EXT4-fs (loop0): mount failed [ 46.399689][ T4302] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.423439][ T4302] EXT4-fs (loop3): 1 truncate cleaned up [ 46.435313][ T4302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.446339][ T4295] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.499964][ T4295] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.538864][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.604916][ T4321] loop1: detected capacity change from 0 to 512 [ 46.613877][ T4321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.642733][ T4321] EXT4-fs (loop1): 1 truncate cleaned up [ 46.651009][ T4321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.692875][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.924857][ T4331] loop1: detected capacity change from 0 to 8192 [ 47.101432][ T4336] FAULT_INJECTION: forcing a failure. [ 47.101432][ T4336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.114536][ T4336] CPU: 0 UID: 0 PID: 4336 Comm: syz.0.210 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 47.125169][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.135292][ T4336] Call Trace: [ 47.138559][ T4336] [ 47.141519][ T4336] dump_stack_lvl+0xf2/0x150 [ 47.146194][ T4336] dump_stack+0x15/0x1a [ 47.150444][ T4336] should_fail_ex+0x223/0x230 [ 47.155116][ T4336] should_fail+0xb/0x10 [ 47.159281][ T4336] should_fail_usercopy+0x1a/0x20 [ 47.164387][ T4336] strncpy_from_user+0x25/0x210 [ 47.169243][ T4336] ? kstrtouint_from_user+0xb0/0xe0 [ 47.174436][ T4336] path_setxattrat+0xed/0x310 [ 47.179175][ T4336] __x64_sys_fsetxattr+0x6d/0x80 [ 47.184199][ T4336] x64_sys_call+0x29d2/0x2dc0 [ 47.188883][ T4336] do_syscall_64+0xc9/0x1c0 [ 47.193383][ T4336] ? clear_bhb_loop+0x55/0xb0 [ 47.198057][ T4336] ? clear_bhb_loop+0x55/0xb0 [ 47.202800][ T4336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.208836][ T4336] RIP: 0033:0x7fde38a15d19 [ 47.213283][ T4336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.232954][ T4336] RSP: 002b:00007fde37081038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 47.241448][ T4336] RAX: ffffffffffffffda RBX: 00007fde38c05fa0 RCX: 00007fde38a15d19 [ 47.249408][ T4336] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000004 [ 47.257427][ T4336] RBP: 00007fde37081090 R08: 0000000000000000 R09: 0000000000000000 [ 47.265390][ T4336] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 47.273360][ T4336] R13: 0000000000000000 R14: 00007fde38c05fa0 R15: 00007ffc5f530768 [ 47.281336][ T4336] [ 47.295354][ T4335] loop1: detected capacity change from 0 to 512 [ 47.309435][ T4335] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.330494][ T4335] EXT4-fs (loop1): 1 truncate cleaned up [ 47.336645][ T4335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.362128][ T4335] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 47.421330][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.500747][ T4359] loop0: detected capacity change from 0 to 512 [ 47.534520][ T4366] loop3: detected capacity change from 0 to 512 [ 47.567524][ T4359] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.629604][ T4375] loop1: detected capacity change from 0 to 512 [ 47.639588][ T4359] EXT4-fs (loop0): 1 truncate cleaned up [ 47.645645][ T4359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.670485][ T4366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 47.687256][ T4366] System zones: 1-12 [ 47.690536][ T4385] loop4: detected capacity change from 0 to 128 [ 47.698811][ T4366] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.217: invalid block [ 47.710469][ T4375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.726210][ T4366] EXT4-fs (loop3): Remounting filesystem read-only [ 47.728356][ T4375] EXT4-fs (loop1): 1 truncate cleaned up [ 47.738969][ T4375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.743004][ T4366] EXT4-fs (loop3): 1 truncate cleaned up [ 47.760863][ T4366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.773998][ T4385] bio_check_eod: 14 callbacks suppressed [ 47.774010][ T4385] syz.4.223: attempt to access beyond end of device [ 47.774010][ T4385] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 47.782226][ T4366] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 47.803429][ T4385] syz.4.223: attempt to access beyond end of device [ 47.803429][ T4385] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 47.803803][ T4366] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.819705][ T4375] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 47.845520][ T4385] syz.4.223: attempt to access beyond end of device [ 47.845520][ T4385] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.859302][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.867360][ T4385] syz.4.223: attempt to access beyond end of device [ 47.867360][ T4385] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.881977][ T4385] syz.4.223: attempt to access beyond end of device [ 47.881977][ T4385] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.898594][ T4385] syz.4.223: attempt to access beyond end of device [ 47.898594][ T4385] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.985321][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.012375][ T3558] ================================================================== [ 48.020481][ T3558] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 48.027520][ T3558] [ 48.029843][ T3558] write to 0xffff8881020fb82c of 4 bytes by task 4188 on cpu 0: [ 48.037475][ T3558] shmem_unlink+0x13b/0x170 [ 48.041990][ T3558] shmem_rename2+0x1d4/0x2c0 [ 48.046595][ T3558] vfs_rename+0x875/0x9c0 [ 48.050940][ T3558] do_renameat2+0x6a2/0xa70 [ 48.055464][ T3558] __x64_sys_rename+0x58/0x70 [ 48.060158][ T3558] x64_sys_call+0x2b1c/0x2dc0 [ 48.064845][ T3558] do_syscall_64+0xc9/0x1c0 [ 48.069358][ T3558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.075275][ T3558] [ 48.077611][ T3558] read to 0xffff8881020fb82c of 4 bytes by task 3558 on cpu 1: [ 48.085152][ T3558] fill_mg_cmtime+0x58/0x280 [ 48.089740][ T3558] generic_fillattr+0x241/0x330 [ 48.094585][ T3558] shmem_getattr+0x17b/0x200 [ 48.099170][ T3558] vfs_statx_path+0x171/0x2d0 [ 48.103840][ T3558] vfs_statx+0xe1/0x170 [ 48.107986][ T3558] __se_sys_newfstatat+0xdc/0x300 [ 48.113009][ T3558] __x64_sys_newfstatat+0x55/0x70 [ 48.118028][ T3558] x64_sys_call+0x236d/0x2dc0 [ 48.122702][ T3558] do_syscall_64+0xc9/0x1c0 [ 48.127195][ T3558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.133086][ T3558] [ 48.135392][ T3558] value changed: 0x1b88e633 -> 0x1c01874f [ 48.141093][ T3558] [ 48.143401][ T3558] Reported by Kernel Concurrency Sanitizer on: [ 48.149542][ T3558] CPU: 1 UID: 0 PID: 3558 Comm: udevd Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 48.159779][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.169830][ T3558] ================================================================== [ 48.191520][ T29] kauditd_printk_skb: 1271 callbacks suppressed [ 48.191534][ T29] audit: type=1326 audit(1734182838.641:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.4.227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa69d565d19 code=0x0 [ 48.221042][ T29] audit: type=1326 audit(1734182838.671:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.223732][ T4407] loop1: detected capacity change from 0 to 512 [ 48.244490][ T29] audit: type=1326 audit(1734182838.671:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.274145][ T29] audit: type=1326 audit(1734182838.671:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.297405][ T29] audit: type=1326 audit(1734182838.671:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.320726][ T29] audit: type=1326 audit(1734182838.671:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.338433][ T4407] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.344062][ T29] audit: type=1326 audit(1734182838.671:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.357027][ T4407] EXT4-fs (loop1): 1 truncate cleaned up [ 48.377128][ T29] audit: type=1326 audit(1734182838.671:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.377153][ T29] audit: type=1326 audit(1734182838.671:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 48.377177][ T29] audit: type=1326 audit(1734182838.671:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6827c5d19 code=0x7ffc0000 [ 50.081853][ T4295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.092889][ T4295] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.103774][ T4295] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.114437][ T4295] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0