last executing test programs: 28.57236842s ago: executing program 2 (id=413): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r3}, 0xc) 28.54006743s ago: executing program 2 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 28.51944304s ago: executing program 2 (id=416): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) 28.5023611s ago: executing program 2 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 28.462922261s ago: executing program 2 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) 28.218369502s ago: executing program 2 (id=429): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x101, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 28.218271142s ago: executing program 32 (id=429): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x101, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 27.368813926s ago: executing program 1 (id=464): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0x1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 27.336845506s ago: executing program 1 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x52, 0x67, 0x0) 27.270362857s ago: executing program 1 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 27.270161886s ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 27.237315237s ago: executing program 1 (id=475): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) llistxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000c00)=""/4096, 0x1000) 27.018034028s ago: executing program 1 (id=484): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 27.010669998s ago: executing program 33 (id=484): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 20.254171954s ago: executing program 6 (id=730): sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8814) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x2}, &(0x7f0000000180)=0x2, 0x0, 0x0, 0x0, 0xea5e, 0x7f, 0x35, 0x9}}], 0x58}, 0x0) 20.200920804s ago: executing program 6 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 19.881067666s ago: executing program 6 (id=742): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 19.753921006s ago: executing program 6 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 19.694016287s ago: executing program 6 (id=757): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0xb, 0x7, 0x0, 0x43, 0x0, 0x8000000000000001, 0x4, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0x8000000000000000}, 0xf14d, 0x9, 0xc, 0x5, 0x8000000000000001, 0x6, 0x5fd, 0x0, 0x7, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4a00, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x4}, 0x1004, 0x3ee53089, 0x8001, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) 19.535552707s ago: executing program 6 (id=767): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) 19.525511457s ago: executing program 34 (id=767): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) 1.077508734s ago: executing program 0 (id=1392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x640ca0b72053fe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 1.022155815s ago: executing program 5 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x63af, &(0x7f0000001940)={0x0, 0xf3f0, 0x10000, 0x10, 0x378}, &(0x7f0000010080), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000002100)=""/4083, 0xff3}], 0x1) 1.021939764s ago: executing program 0 (id=1396): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.021760915s ago: executing program 5 (id=1397): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x248}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.019414845s ago: executing program 0 (id=1398): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0x6, 0x4) 956.305185ms ago: executing program 5 (id=1400): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x27dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0) 903.966835ms ago: executing program 5 (id=1403): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 599.069917ms ago: executing program 7 (id=1421): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='task_newtask\x00', r1}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 598.872697ms ago: executing program 7 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) 542.321667ms ago: executing program 3 (id=1426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 542.124707ms ago: executing program 7 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 541.974527ms ago: executing program 3 (id=1428): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) capget(0x0, 0x0) flock(0xffffffffffffffff, 0x3) 541.818287ms ago: executing program 7 (id=1429): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 540.841567ms ago: executing program 3 (id=1430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 506.808848ms ago: executing program 3 (id=1431): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 470.829157ms ago: executing program 7 (id=1432): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 415.849828ms ago: executing program 7 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 406.430808ms ago: executing program 3 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 393.745458ms ago: executing program 3 (id=1436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000240)=""/252, 0xfc) 122.39045ms ago: executing program 0 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r3, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8c001}, 0x20000094) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 113.083649ms ago: executing program 4 (id=1439): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 107.953899ms ago: executing program 0 (id=1440): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 50.25483ms ago: executing program 0 (id=1441): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0x2000000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 50.09239ms ago: executing program 4 (id=1442): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) 49.97121ms ago: executing program 4 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000500)) 49.83171ms ago: executing program 5 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x983f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xd8\x1e\xc1A\xc9\xadK\x82A\x00\x00\x00\x00\x00\x00\x00\x00\x80~+\x04\xe0\x8e\'\xe2\xdc\x00zL\v6\x19c+g\xe3r\xd8\xd0\xd7W\x18\x10\xd9\xd9KH\xae\xbeE\xcd\x8e\xee/\x80f\x9a#V0\xb9\xe3R\x92\x83\x04;\xf5\xd8<\xd78T\x0f)\x94h\'\xd0\xfa{3w\xcbc\xb3\xf8-\x9e\x8f\xe9=@\xd6(\xac9IT\xb2\x7f:l\xb4\x7f]\b.PxE\x12$\xf3\x178\xddJ\xb9\xde\x17\xfc\xfd\xf76I\xce#\xf3\xd3\xbd\x9d\x01j\xf9\xca\x16\xab\xd4jV\xe6', &(0x7f0000000000)='\xab\x88\xa5\xa9\xbf\v\xfa\xa2:\x0f\xd8\xda\xf1T\xea\xe2\xb4\xa2\xa7d\xa9', 0x0) close(r2) 49.656899ms ago: executing program 4 (id=1445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x205, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x20, 0xc, 0x9dc8, 0x1, 0x0, 0x7, 0x0}) 21.00252ms ago: executing program 4 (id=1446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x400) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000800)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) 302.43µs ago: executing program 4 (id=1447): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 0s ago: executing program 5 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffff8f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf2524"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 22.609412][ T29] audit: type=1400 audit(1761693847.535:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.632440][ T29] audit: type=1400 audit(1761693847.555:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.633177][ T3301] cgroup: Unknown subsys name 'net' [ 22.660138][ T29] audit: type=1400 audit(1761693847.585:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.798854][ T3301] cgroup: Unknown subsys name 'cpuset' [ 22.804953][ T3301] cgroup: Unknown subsys name 'rlimit' [ 22.953717][ T29] audit: type=1400 audit(1761693847.875:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.977031][ T29] audit: type=1400 audit(1761693847.875:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.997450][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.006202][ T29] audit: type=1400 audit(1761693847.875:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.026524][ T29] audit: type=1400 audit(1761693847.875:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.046779][ T29] audit: type=1400 audit(1761693847.885:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.048989][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.071677][ T29] audit: type=1400 audit(1761693847.885:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.104307][ T29] audit: type=1400 audit(1761693847.915:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.176109][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 24.264581][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 24.273459][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.280541][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.287810][ T3318] bridge_slave_0: entered allmulticast mode [ 24.294239][ T3318] bridge_slave_0: entered promiscuous mode [ 24.300666][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.322371][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.331014][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.338060][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.345212][ T3318] bridge_slave_1: entered allmulticast mode [ 24.351608][ T3318] bridge_slave_1: entered promiscuous mode [ 24.382819][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.402316][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.421185][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.457434][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.464578][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.471731][ T3312] bridge_slave_0: entered allmulticast mode [ 24.478025][ T3312] bridge_slave_0: entered promiscuous mode [ 24.499870][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.507018][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.514229][ T3312] bridge_slave_1: entered allmulticast mode [ 24.520558][ T3312] bridge_slave_1: entered promiscuous mode [ 24.535445][ T3318] team0: Port device team_slave_0 added [ 24.541821][ T3318] team0: Port device team_slave_1 added [ 24.557874][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.565021][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.572320][ T3313] bridge_slave_0: entered allmulticast mode [ 24.578768][ T3313] bridge_slave_0: entered promiscuous mode [ 24.598870][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.605965][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.613162][ T3319] bridge_slave_0: entered allmulticast mode [ 24.619437][ T3319] bridge_slave_0: entered promiscuous mode [ 24.625750][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.632832][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.640007][ T3313] bridge_slave_1: entered allmulticast mode [ 24.646304][ T3313] bridge_slave_1: entered promiscuous mode [ 24.662224][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.671459][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.678534][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.685721][ T3314] bridge_slave_0: entered allmulticast mode [ 24.692167][ T3314] bridge_slave_0: entered promiscuous mode [ 24.698624][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.705741][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.713026][ T3319] bridge_slave_1: entered allmulticast mode [ 24.719344][ T3319] bridge_slave_1: entered promiscuous mode [ 24.729757][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.736714][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.762643][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.774217][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.783554][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.790647][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.797719][ T3314] bridge_slave_1: entered allmulticast mode [ 24.804138][ T3314] bridge_slave_1: entered promiscuous mode [ 24.823347][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.830326][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.856231][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.879001][ T3312] team0: Port device team_slave_0 added [ 24.885477][ T3312] team0: Port device team_slave_1 added [ 24.900856][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.916658][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.926951][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.936985][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.946904][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.965660][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.987285][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.994374][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.020338][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.044736][ T3313] team0: Port device team_slave_0 added [ 25.050722][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.057655][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.083591][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.099237][ T3314] team0: Port device team_slave_0 added [ 25.107129][ T3318] hsr_slave_0: entered promiscuous mode [ 25.113115][ T3318] hsr_slave_1: entered promiscuous mode [ 25.119632][ T3313] team0: Port device team_slave_1 added [ 25.132913][ T3314] team0: Port device team_slave_1 added [ 25.143940][ T3319] team0: Port device team_slave_0 added [ 25.150945][ T3319] team0: Port device team_slave_1 added [ 25.185450][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.192451][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.218360][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.240536][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.247491][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.273405][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.291164][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.298118][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.324270][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.346852][ T3312] hsr_slave_0: entered promiscuous mode [ 25.352948][ T3312] hsr_slave_1: entered promiscuous mode [ 25.358792][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 25.364493][ T3312] Cannot create hsr debugfs directory [ 25.370623][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.377555][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.403523][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.414654][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.421686][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.447587][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.469497][ T3314] hsr_slave_0: entered promiscuous mode [ 25.475421][ T3314] hsr_slave_1: entered promiscuous mode [ 25.481220][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 25.486934][ T3314] Cannot create hsr debugfs directory [ 25.497091][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.504081][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.530066][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.574201][ T3319] hsr_slave_0: entered promiscuous mode [ 25.580278][ T3319] hsr_slave_1: entered promiscuous mode [ 25.586071][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 25.591830][ T3319] Cannot create hsr debugfs directory [ 25.607985][ T3313] hsr_slave_0: entered promiscuous mode [ 25.614259][ T3313] hsr_slave_1: entered promiscuous mode [ 25.620148][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 25.625875][ T3313] Cannot create hsr debugfs directory [ 25.742799][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.751532][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.764151][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.777067][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.827082][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.838865][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.847454][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.856475][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.886827][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.895881][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.905103][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.921315][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.944855][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.956139][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.966029][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.975036][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.984029][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.011949][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.040297][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.049663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.056851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.065510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.072559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.085115][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.093413][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.103836][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.122837][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.149442][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.169942][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.183659][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.197021][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.212856][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.221517][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.238537][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.245610][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.254146][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.261287][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.269620][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.276727][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.289355][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.296455][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.308614][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.315716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.328641][ T1434] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.335705][ T1434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.356843][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.386952][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.425942][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.444785][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.451889][ T1434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.463115][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.470221][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.528774][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.547170][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.559870][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.599743][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.609823][ T3318] veth0_vlan: entered promiscuous mode [ 26.623689][ T3318] veth1_vlan: entered promiscuous mode [ 26.659192][ T3318] veth0_macvtap: entered promiscuous mode [ 26.676628][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.696949][ T3318] veth1_macvtap: entered promiscuous mode [ 26.712890][ T3312] veth0_vlan: entered promiscuous mode [ 26.742447][ T3314] veth0_vlan: entered promiscuous mode [ 26.755030][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.763463][ T3314] veth1_vlan: entered promiscuous mode [ 26.771558][ T3312] veth1_vlan: entered promiscuous mode [ 26.784982][ T3319] veth0_vlan: entered promiscuous mode [ 26.791756][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.814544][ T3312] veth0_macvtap: entered promiscuous mode [ 26.824391][ T3312] veth1_macvtap: entered promiscuous mode [ 26.831175][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.840937][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.850240][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.859286][ T3319] veth1_vlan: entered promiscuous mode [ 26.870999][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.883851][ T3314] veth0_macvtap: entered promiscuous mode [ 26.894451][ T3314] veth1_macvtap: entered promiscuous mode [ 26.909455][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.932302][ T3319] veth0_macvtap: entered promiscuous mode [ 26.942445][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.943158][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.952345][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.978925][ T3319] veth1_macvtap: entered promiscuous mode [ 26.997102][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.007719][ T376] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.024342][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.040180][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.047803][ T376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.061558][ T3313] veth0_vlan: entered promiscuous mode [ 27.080832][ T376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.091931][ T376] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.101475][ T376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.125221][ T376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.134843][ T3313] veth1_vlan: entered promiscuous mode [ 27.142110][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.163917][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.180905][ T3313] veth0_macvtap: entered promiscuous mode [ 27.192690][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.211754][ T3313] veth1_macvtap: entered promiscuous mode [ 27.225878][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.250460][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.267792][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.281124][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.290376][ T3491] loop3: detected capacity change from 0 to 1024 [ 27.300558][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.336797][ T3491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.338465][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.399908][ T3500] macvtap0: entered promiscuous mode [ 27.409282][ T3500] macvtap0: left promiscuous mode [ 27.417958][ T3505] loop0: detected capacity change from 0 to 164 [ 27.424264][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.424360][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.441933][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.478995][ T3505] process 'syz.0.10' launched '/dev/fd/6' with NULL argv: empty string added [ 27.501823][ T3510] SELinux: failed to load policy [ 27.520855][ T3509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'. [ 27.530870][ T3505] syz.0.10: attempt to access beyond end of device [ 27.530870][ T3505] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 27.557686][ T3505] syz.0.10: attempt to access beyond end of device [ 27.557686][ T3505] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 27.612565][ T3517] loop4: detected capacity change from 0 to 512 [ 27.622396][ T3519] loop1: detected capacity change from 0 to 512 [ 27.641728][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.674601][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 27.674616][ T29] audit: type=1400 audit(1761693852.595:129): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 27.704986][ T3519] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.15: inode has both inline data and extents flags [ 27.718972][ T3517] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.729590][ T3519] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.15: couldn't read orphan inode 15 (err -117) [ 27.731480][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.750629][ T29] audit: type=1400 audit(1761693852.605:130): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.770222][ T29] audit: type=1400 audit(1761693852.645:131): avc: denied { mount } for pid=3516 comm="syz.4.14" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.810676][ T29] audit: type=1400 audit(1761693852.725:132): avc: denied { read append } for pid=3516 comm="syz.4.14" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.833312][ T29] audit: type=1400 audit(1761693852.725:133): avc: denied { open } for pid=3516 comm="syz.4.14" path="/1/file1/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.838759][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.856158][ T29] audit: type=1400 audit(1761693852.725:134): avc: denied { ioctl } for pid=3516 comm="syz.4.14" path="/1/file1/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.906945][ T3515] mmap: syz.2.13 (3515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.929166][ T29] audit: type=1400 audit(1761693852.825:135): avc: denied { create } for pid=3524 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.948581][ T29] audit: type=1400 audit(1761693852.825:136): avc: denied { read } for pid=3524 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.985586][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.998497][ T29] audit: type=1400 audit(1761693852.875:137): avc: denied { write } for pid=3524 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.102937][ T29] audit: type=1400 audit(1761693852.965:138): avc: denied { write } for pid=3518 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.159166][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 28.347652][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.409647][ T3554] loop3: detected capacity change from 0 to 128 [ 28.421298][ T3554] EXT4-fs: Ignoring removed nobh option [ 28.441158][ T3554] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.456331][ T3554] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.487607][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.600629][ T3571] tipc: Started in network mode [ 28.605548][ T3571] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 28.615133][ T3571] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 28.623449][ T3571] tipc: Enabled bearer , priority 10 [ 28.668173][ T3575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 28.687647][ T3573] SELinux: failed to load policy [ 29.003736][ T3600] Zero length message leads to an empty skb [ 29.034626][ T3602] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 29.206872][ T3617] loop3: detected capacity change from 0 to 1024 [ 29.239177][ T3617] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 29.270818][ T3617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 29.281034][ T3617] EXT4-fs (loop3): failed to initialize system zone (-117) [ 29.290593][ T3617] EXT4-fs (loop3): mount failed [ 29.355700][ T3633] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 29.407195][ T3643] hub 9-0:1.0: USB hub found [ 29.430033][ T3643] hub 9-0:1.0: 8 ports detected [ 29.623902][ T3664] xt_hashlimit: max too large, truncated to 1048576 [ 29.628364][ T23] tipc: Node number set to 1 [ 29.784536][ T3686] pim6reg: entered allmulticast mode [ 29.797011][ T3686] pim6reg: left allmulticast mode [ 29.872779][ T3700] loop4: detected capacity change from 0 to 512 [ 29.914896][ T3700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.952721][ T3700] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.058409][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.109926][ T3721] syz.4.90 uses obsolete (PF_INET,SOCK_PACKET) [ 30.337638][ T3736] $H: renamed from bond0 (while UP) [ 30.347970][ T3736] $H: entered promiscuous mode [ 30.353085][ T3736] bond_slave_0: entered promiscuous mode [ 30.358863][ T3736] bond_slave_1: entered promiscuous mode [ 30.429839][ T10] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 30.437266][ T10] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 30.469071][ T10] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.03 Device [syz0] on syz0 [ 30.578281][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 30.585983][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 30.594947][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.602859][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.610766][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.618497][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.626290][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.634054][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 30.877380][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 30.894382][ T10] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 30.919652][ T3802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 30.932925][ T3807] wg2: entered promiscuous mode [ 30.937826][ T3807] wg2: entered allmulticast mode [ 31.391009][ T3916] Falling back ldisc for ptm0. [ 31.713217][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 31.751752][ T3952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 31.908663][ T3984] ALSA: seq fatal error: cannot create timer (-19) [ 31.993574][ T3996] Falling back ldisc for ptm0. [ 32.345360][ T4026] vhci_hcd: invalid port number 255 [ 32.350934][ T4026] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 32.356400][ T4028] loop2: detected capacity change from 0 to 512 [ 32.369724][ T4028] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.160: Failed to acquire dquot type 1 [ 32.381850][ T4028] EXT4-fs (loop2): 1 truncate cleaned up [ 32.388036][ T4028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.400942][ T4028] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.428026][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.480844][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 32.499876][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 32.518615][ T4041] Falling back ldisc for ttyS3. [ 32.556110][ T3812] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.691459][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 32.778154][ T4072] netlink: 'syz.4.180': attribute type 3 has an invalid length. [ 32.860153][ T4082] loop3: detected capacity change from 0 to 1024 [ 32.871892][ T4082] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.882914][ T4082] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 32.894046][ T4082] JBD2: no valid journal superblock found [ 32.899848][ T4082] EXT4-fs (loop3): Could not load journal inode [ 32.918290][ T4082] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 32.992032][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 32.992046][ T29] audit: type=1400 audit(1761693857.915:416): avc: denied { read } for pid=4091 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.043196][ T4094] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 33.068033][ T4094] bond1: (slave geneve2): making interface the new active one [ 33.082986][ T29] audit: type=1400 audit(1761693858.005:417): avc: denied { block_suspend } for pid=4095 comm="syz.4.192" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.106336][ T4094] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 33.121211][ T4094] syz.3.191 (4094) used greatest stack depth: 10168 bytes left [ 33.121230][ T3812] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 33.143066][ T3812] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 33.154496][ T3812] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 33.174735][ T4103] netlink: 'syz.3.195': attribute type 4 has an invalid length. [ 33.178406][ T3812] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 33.225150][ T29] audit: type=1400 audit(1761693858.145:418): avc: denied { create } for pid=4108 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.248332][ T29] audit: type=1400 audit(1761693858.145:419): avc: denied { bind } for pid=4108 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.267612][ T29] audit: type=1400 audit(1761693858.145:420): avc: denied { listen } for pid=4108 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.287179][ T29] audit: type=1400 audit(1761693858.145:421): avc: denied { connect } for pid=4108 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.306944][ T29] audit: type=1400 audit(1761693858.145:422): avc: denied { setopt } for pid=4108 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.326562][ T29] audit: type=1400 audit(1761693858.145:423): avc: denied { write } for pid=4108 comm="syz.2.197" path="socket:[5987]" dev="sockfs" ino=5987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.349667][ T29] audit: type=1400 audit(1761693858.145:424): avc: denied { mounton } for pid=4110 comm="syz.3.198" path="/proc/107/task" dev="proc" ino=5994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.372090][ T29] audit: type=1400 audit(1761693858.165:425): avc: denied { associate } for pid=4112 comm="syz.3.198" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.511708][ T4124] vlan2: entered allmulticast mode [ 33.623359][ T4128] netlink: 'syz.3.206': attribute type 12 has an invalid length. [ 34.163073][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 34.163632][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 34.207986][ T4154] ALSA: seq fatal error: cannot create timer (-22) [ 34.245044][ T4156] capability: warning: `syz.4.218' uses deprecated v2 capabilities in a way that may be insecure [ 34.489923][ T4172] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 34.540993][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 34.550897][ T4172] bond1: (slave batadv1): making interface the new active one [ 34.569461][ T4172] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 34.588298][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.589825][ T4055] Bluetooth: hci0: command 0x1003 tx timeout [ 34.605647][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 34.616224][ T4172] bond1 (unregistering): (slave batadv1): Releasing active interface [ 34.627362][ T4172] bond1 (unregistering): Released all slaves [ 35.000574][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 35.009063][ T4196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.051194][ T4222] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.063951][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 35.073100][ T4222] bridge_slave_1: left allmulticast mode [ 35.078950][ T4222] bridge_slave_1: left promiscuous mode [ 35.084756][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.093378][ T4222] bridge_slave_0: left promiscuous mode [ 35.099144][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.186608][ T4239] loop1: detected capacity change from 0 to 2048 [ 35.215292][ T4243] loop3: detected capacity change from 0 to 256 [ 35.230365][ T4243] FAT-fs (loop3): bogus number of FAT sectors [ 35.236497][ T4243] FAT-fs (loop3): Can't find a valid FAT filesystem [ 35.240344][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.283592][ T4239] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.252: bg 0: block 234: padding at end of block bitmap is not set [ 35.338862][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.387717][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 35.391267][ T4258] pimreg: entered allmulticast mode [ 35.406500][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 35.427728][ T4258] pimreg: left allmulticast mode [ 35.486488][ T4270] SELinux: Context is not valid (left unmapped). [ 35.540625][ T4275] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 35.555324][ T4277] loop4: detected capacity change from 0 to 512 [ 35.561928][ T4277] EXT4-fs: Ignoring removed nobh option [ 35.564287][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 35.575991][ T4277] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.268: iget: bad i_size value: 38620345925642 [ 35.576164][ T4275] bond2: (slave batadv1): making interface the new active one [ 35.597072][ T4275] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 35.613764][ T4277] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.268: couldn't read orphan inode 15 (err -117) [ 35.633419][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 35.650793][ T4275] bond2 (unregistering): (slave batadv1): Releasing active interface [ 35.655353][ T4277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.678983][ T4275] bond2 (unregistering): Released all slaves [ 35.721242][ T4277] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 35.737997][ T4277] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.268: bg 0: block 5: invalid block bitmap [ 35.768833][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.814061][ T4297] netlink: 'syz.3.276': attribute type 30 has an invalid length. [ 35.854234][ T4294] SELinux: failed to load policy [ 35.951929][ T4315] loop1: detected capacity change from 0 to 512 [ 35.958440][ T4313] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4313 comm=syz.3.284 [ 35.978277][ T4315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.991939][ T4315] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.044741][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.058996][ T4328] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.060191][ T4321] hub 6-0:1.0: USB hub found [ 36.074154][ T4321] hub 6-0:1.0: 8 ports detected [ 36.075303][ T4328] SELinux: failed to load policy [ 36.100291][ T4325] SELinux: failed to load policy [ 36.159044][ T4339] netlink: 'syz.0.296': attribute type 30 has an invalid length. [ 36.206612][ T4343] loop3: detected capacity change from 0 to 512 [ 36.260290][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.273058][ T4343] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.301760][ T4363] sd 0:0:1:0: device reset [ 36.445263][ T4343] syz.3.295 (4343) used greatest stack depth: 10000 bytes left [ 36.460277][ T4377] bridge0: entered promiscuous mode [ 36.510633][ T4377] macsec1: entered promiscuous mode [ 36.526883][ T4377] bridge0: port 3(macsec1) entered blocking state [ 36.533481][ T4377] bridge0: port 3(macsec1) entered disabled state [ 36.540622][ T4377] macsec1: entered allmulticast mode [ 36.545991][ T4377] bridge0: entered allmulticast mode [ 36.551724][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.562514][ T4377] macsec1: left allmulticast mode [ 36.567566][ T4377] bridge0: left allmulticast mode [ 36.576423][ T4377] bridge0: left promiscuous mode [ 36.669671][ T3415] kernel write not supported for file /ppp (pid: 3415 comm: kworker/0:3) [ 36.781880][ T4392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 37.095205][ T4419] loop1: detected capacity change from 0 to 512 [ 37.104249][ T4419] EXT4-fs: Ignoring removed nobh option [ 37.108659][ T3388] kernel write not supported for file /ppp (pid: 3388 comm: kworker/1:3) [ 37.120236][ T4419] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.328: iget: bad i_size value: 38620345925642 [ 37.134578][ T4419] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.328: couldn't read orphan inode 15 (err -117) [ 37.147412][ T4419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.163013][ T4419] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.328: bg 0: block 5: invalid block bitmap [ 37.198144][ T4425] loop3: detected capacity change from 0 to 2048 [ 37.201271][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.204873][ T4425] EXT4-fs: Ignoring removed bh option [ 37.240329][ T4425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.303344][ T4438] SELinux: policydb version 0 does not match my version range 15-35 [ 37.311732][ T4438] SELinux: failed to load policy [ 37.316837][ T4425] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.331802][ T4425] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 37.344230][ T4425] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.344230][ T4425] [ 37.354294][ T4425] EXT4-fs (loop3): Total free blocks count 0 [ 37.360320][ T4425] EXT4-fs (loop3): Free/Dirty block details [ 37.366413][ T4425] EXT4-fs (loop3): free_blocks=2415919104 [ 37.372274][ T4425] EXT4-fs (loop3): dirty_blocks=32 [ 37.377384][ T4425] EXT4-fs (loop3): Block reservation details [ 37.383524][ T4425] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 37.386797][ T4443] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.449106][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 37.474989][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 37.486783][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 37.556489][ T4457] loop4: detected capacity change from 0 to 8192 [ 37.656575][ T3415] kernel write not supported for file /ppp (pid: 3415 comm: kworker/0:3) [ 37.671130][ T4460] infiniband !yz!: set active [ 37.675867][ T4460] infiniband !yz!: added team_slave_0 [ 37.696175][ T4460] RDS/IB: !yz!: added [ 37.706994][ T4460] smc: adding ib device !yz! with port count 1 [ 37.713792][ T4460] smc: ib device !yz! port 1 has no pnetid [ 37.731108][ T4467] __nla_validate_parse: 1 callbacks suppressed [ 37.731121][ T4467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.357'. [ 37.785933][ T4472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.347'. [ 37.851792][ T4478] loop4: detected capacity change from 0 to 512 [ 37.884185][ T4478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.943337][ T4478] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.011386][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 38.011401][ T29] audit: type=1326 audit(1761693862.935:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 38.041183][ T29] audit: type=1326 audit(1761693862.935:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 38.068392][ T4496] nfs4: Bad value for 'source' [ 38.090956][ T4499] netlink: 96 bytes leftover after parsing attributes in process `syz.0.359'. [ 38.105978][ T29] audit: type=1326 audit(1761693862.935:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 38.129296][ T29] audit: type=1326 audit(1761693862.935:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 38.159485][ T4501] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 38.167701][ T4501] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 38.212233][ T4507] sd 0:0:1:0: device reset [ 38.236525][ T4509] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 38.256452][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.269982][ T4511] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 38.278590][ T29] audit: type=1400 audit(1761693863.195:503): avc: denied { bind } for pid=4510 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.298725][ T29] audit: type=1400 audit(1761693863.195:504): avc: denied { setopt } for pid=4510 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.322786][ T4511] team0: Port device dummy0 added [ 38.351345][ T29] audit: type=1326 audit(1761693863.275:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c1cefc9 code=0x7ffc0000 [ 38.405892][ T29] audit: type=1326 audit(1761693863.275:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c1cefc9 code=0x7ffc0000 [ 38.429270][ T29] audit: type=1326 audit(1761693863.275:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f888c1cefc9 code=0x7ffc0000 [ 38.452533][ T29] audit: type=1326 audit(1761693863.275:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888c1cefc9 code=0x7ffc0000 [ 39.110308][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 39.119242][ T4561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.390'. [ 39.280628][ T4587] serio: Serial port ptm1 [ 39.317958][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 39.360041][ T4590] bridge_slave_1: left allmulticast mode [ 39.365728][ T4590] bridge_slave_1: left promiscuous mode [ 39.371473][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.400132][ T4590] bridge_slave_0: left allmulticast mode [ 39.405803][ T4590] bridge_slave_0: left promiscuous mode [ 39.411648][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.432860][ T4597] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 39.488156][ T4597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.517693][ T4604] bond1: (slave gretap1): making interface the new active one [ 39.525998][ T4604] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 39.551558][ T4604] syz.1.404 (4604) used greatest stack depth: 9680 bytes left [ 39.799041][ T4635] vlan2: entered allmulticast mode [ 39.804363][ T4635] bridge_slave_0: entered allmulticast mode [ 39.879067][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 40.292051][ T4653] chnl_net:caif_netlink_parms(): no params data found [ 40.359612][ T4703] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 40.369069][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.376127][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.383370][ T4653] bridge_slave_0: entered allmulticast mode [ 40.394744][ T4653] bridge_slave_0: entered promiscuous mode [ 40.402770][ T4709] loop3: detected capacity change from 0 to 512 [ 40.422585][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 40.431088][ T4703] bond2: (slave batadv1): making interface the new active one [ 40.439757][ T4703] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 40.450514][ T4709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.454178][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 40.471462][ T4653] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.478581][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.485663][ T4709] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 40.503077][ T4653] bridge_slave_1: entered allmulticast mode [ 40.509702][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.509940][ T4653] bridge_slave_1: entered promiscuous mode [ 40.533164][ T4703] bond2 (unregistering): (slave batadv1): Releasing active interface [ 40.542368][ T4703] bond2 (unregistering): Released all slaves [ 40.560653][ T4653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.575321][ T4653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.614741][ T4653] team0: Port device team_slave_0 added [ 40.621689][ T4653] team0: Port device team_slave_1 added [ 40.673869][ T4653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.680884][ T4653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.706857][ T4653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.754952][ T4653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.762027][ T4653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.787990][ T4653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.829935][ T4653] hsr_slave_0: entered promiscuous mode [ 40.836009][ T4653] hsr_slave_1: entered promiscuous mode [ 40.848695][ T4653] debugfs: 'hsr0' already exists in 'hsr' [ 40.854446][ T4653] Cannot create hsr debugfs directory [ 40.976603][ T4653] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.002577][ T4653] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.021961][ T4759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 41.050340][ T4653] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.074008][ T4653] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.135869][ T4653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.165383][ T4653] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.181324][ T4783] loop4: detected capacity change from 0 to 512 [ 41.220940][ T4783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.243937][ T4781] syzkaller0: entered promiscuous mode [ 41.249496][ T4781] syzkaller0: entered allmulticast mode [ 41.260864][ T4783] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.287488][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.312117][ T3809] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.319221][ T3809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.353307][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.367513][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.392163][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.399263][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.467631][ T4653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.478101][ T4653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.520922][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.532909][ T4809] batadv_slave_1: entered promiscuous mode [ 41.540308][ T4809] batadv_slave_1: left promiscuous mode [ 41.581570][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.661998][ T4653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.693717][ T31] bridge_slave_1: left allmulticast mode [ 41.699474][ T31] bridge_slave_1: left promiscuous mode [ 41.705119][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.728932][ T31] bridge_slave_0: left allmulticast mode [ 41.734687][ T31] bridge_slave_0: left promiscuous mode [ 41.740528][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.804128][ T31] bond1 (unregistering): (slave gretap1): Releasing active interface [ 41.890735][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.905920][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.919193][ T31] bond0 (unregistering): Released all slaves [ 41.939188][ T31] bond1 (unregistering): Released all slaves [ 41.968802][ T4851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.507'. [ 42.005531][ T4852] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 42.070862][ T31] hsr_slave_0: left promiscuous mode [ 42.077126][ T31] hsr_slave_1: left promiscuous mode [ 42.086494][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.093945][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.102440][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.110032][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.121298][ T31] veth1_macvtap: left promiscuous mode [ 42.126821][ T31] veth0_macvtap: left promiscuous mode [ 42.132565][ T31] veth1_vlan: left promiscuous mode [ 42.137842][ T31] veth0_vlan: left promiscuous mode [ 42.219755][ T4789] chnl_net:caif_netlink_parms(): no params data found [ 42.268415][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.275519][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.283021][ T4789] bridge_slave_0: entered allmulticast mode [ 42.289741][ T4789] bridge_slave_0: entered promiscuous mode [ 42.296818][ T4653] veth0_vlan: entered promiscuous mode [ 42.303676][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.310761][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.317946][ T4789] bridge_slave_1: entered allmulticast mode [ 42.324683][ T4789] bridge_slave_1: entered promiscuous mode [ 42.340727][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.351217][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.371492][ T4653] veth1_vlan: entered promiscuous mode [ 42.378817][ T4789] team0: Port device team_slave_0 added [ 42.386719][ T4789] team0: Port device team_slave_1 added [ 42.403562][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.410554][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.436674][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.448489][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.455460][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.481374][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.507900][ T4789] hsr_slave_0: entered promiscuous mode [ 42.514174][ T4789] hsr_slave_1: entered promiscuous mode [ 42.520035][ T4789] debugfs: 'hsr0' already exists in 'hsr' [ 42.525738][ T4789] Cannot create hsr debugfs directory [ 42.544903][ T4653] veth0_macvtap: entered promiscuous mode [ 42.564150][ T4653] veth1_macvtap: entered promiscuous mode [ 42.577770][ T4653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.590208][ T4653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.610863][ T3796] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.619783][ T3796] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.628801][ T3796] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.645059][ T3796] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.721775][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.781124][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.820833][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.867435][ T4789] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 42.892223][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.910249][ T4789] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 42.921777][ T4789] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 42.933881][ T4789] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 42.939481][ T4902] ALSA: seq fatal error: cannot create timer (-22) [ 42.964569][ T4913] __nla_validate_parse: 2 callbacks suppressed [ 42.964583][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 42.970402][ T4906] pim6reg: entered allmulticast mode [ 42.993934][ T4913] team1: entered promiscuous mode [ 42.999169][ T4913] team1: entered allmulticast mode [ 43.004648][ T4913] 8021q: adding VLAN 0 to HW filter on device team1 [ 43.016524][ T4906] pim6reg: left allmulticast mode [ 43.026366][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 43.026379][ T29] audit: type=1326 audit(1761693867.945:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 43.055903][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.060494][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.071164][ T29] audit: type=1326 audit(1761693867.995:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 43.094534][ T29] audit: type=1326 audit(1761693867.995:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 43.117771][ T29] audit: type=1326 audit(1761693867.995:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 43.141304][ T29] audit: type=1326 audit(1761693867.995:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 43.164712][ T29] audit: type=1326 audit(1761693867.995:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 43.188119][ T29] audit: type=1326 audit(1761693867.995:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250aedefc9 code=0x7ffc0000 [ 43.217708][ T4920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.524'. [ 43.230506][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.237564][ T3845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.246772][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.253878][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.261132][ T29] audit: type=1400 audit(1761693868.165:724): avc: denied { write } for pid=4921 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.282576][ T4915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.524'. [ 43.347440][ T4789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.366512][ T31] bridge_slave_1: left allmulticast mode [ 43.372216][ T31] bridge_slave_1: left promiscuous mode [ 43.377994][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.388032][ T29] audit: type=1400 audit(1761693868.305:725): avc: denied { load_policy } for pid=4926 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.388347][ T4927] SELinux: ebitmap: truncated map [ 43.416803][ T4927] SELinux: failed to load policy [ 43.428849][ T31] bridge_slave_0: left allmulticast mode [ 43.434507][ T31] bridge_slave_0: left promiscuous mode [ 43.440286][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.445573][ T4938] loop5: detected capacity change from 0 to 512 [ 43.462341][ T29] audit: type=1400 audit(1761693868.385:726): avc: denied { allowed } for pid=4939 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.503524][ T4938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.518116][ T4938] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.538817][ T31] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.547715][ T31] bond_slave_0: left promiscuous mode [ 43.567438][ T31] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.568042][ T4653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.585471][ T31] bond_slave_1: left promiscuous mode [ 43.591836][ T31] $H (unregistering): Released all slaves [ 43.610039][ T4949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 43.662809][ T4961] bridge_slave_0: entered promiscuous mode [ 43.673160][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 43.682060][ T4961] bridge_slave_0: left promiscuous mode [ 43.711781][ T31] hsr_slave_0: left promiscuous mode [ 43.738436][ T31] hsr_slave_1: left promiscuous mode [ 43.750551][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.758044][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.788280][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.795696][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.818681][ T31] veth1_macvtap: left promiscuous mode [ 43.824547][ T31] veth0_macvtap: left promiscuous mode [ 43.830226][ T31] veth1_vlan: left promiscuous mode [ 43.838417][ T31] veth0_vlan: left promiscuous mode [ 43.845982][ T4975] atomic_op ffff88811b5af928 conn xmit_atomic 0000000000000000 [ 43.955362][ T31] team0 (unregistering): Port device team_slave_1 removed [ 43.972641][ T31] team0 (unregistering): Port device team_slave_0 removed [ 43.988890][ T3818] smc: removing ib device !yz! [ 44.028459][ T31] team0 (unregistering): Port device dummy0 removed [ 44.089320][ T4987] netlink: 76 bytes leftover after parsing attributes in process `syz.5.548'. [ 44.102958][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.456780][ T5035] loop5: detected capacity change from 0 to 512 [ 44.474470][ T5035] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.487616][ T5035] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 44.491529][ T4789] veth0_vlan: entered promiscuous mode [ 44.516857][ T4789] veth1_vlan: entered promiscuous mode [ 44.523196][ T5035] EXT4-fs (loop5): 1 truncate cleaned up [ 44.529332][ T5035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.533171][ T4789] veth0_macvtap: entered promiscuous mode [ 44.563421][ T4789] veth1_macvtap: entered promiscuous mode [ 44.574448][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.585016][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.595009][ T3812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.612417][ T5042] netem: change failed [ 44.638964][ T3812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.656128][ T4653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.668649][ T3812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.701485][ T3812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.996945][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.588'. [ 45.015706][ T5093] Illegal XDP return value 2039702929 on prog (id 414) dev syz_tun, expect packet loss! [ 45.156203][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 45.165630][ T5101] bridge_slave_1: left allmulticast mode [ 45.171306][ T5101] bridge_slave_1: left promiscuous mode [ 45.177024][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.185180][ T5101] bridge_slave_0: left allmulticast mode [ 45.190923][ T5101] bridge_slave_0: left promiscuous mode [ 45.196634][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.389270][ T5117] capability: warning: `syz.5.600' uses 32-bit capabilities (legacy support in use) [ 45.491289][ T5137] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 45.520449][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.538183][ T5142] IPv6: Can't replace route, no match found [ 45.542494][ T5143] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 45.546587][ T5137] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 45.551891][ T5143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.610'. [ 45.569626][ T5143] batadv0: entered promiscuous mode [ 45.574846][ T5143] batadv0: entered allmulticast mode [ 45.619103][ T5143] bond0: (slave batadv0): Releasing backup interface [ 45.644159][ T5143] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 45.712519][ T5158] pim6reg: entered allmulticast mode [ 45.722934][ T5158] pim6reg: left allmulticast mode [ 45.818654][ T5167] syz.5.622 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.041889][ T5201] netlink: 'syz.6.636': attribute type 1 has an invalid length. [ 46.058727][ T5201] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 46.227282][ T5213] macvlan1: entered promiscuous mode [ 46.235988][ T5213] ipvlan0: entered promiscuous mode [ 46.242268][ T5213] ipvlan0: left promiscuous mode [ 46.247421][ T5213] macvlan1: left promiscuous mode [ 46.258747][ T5218] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.379227][ T5231] vlan2: entered allmulticast mode [ 46.531766][ T5243] loop6: detected capacity change from 0 to 1024 [ 46.538553][ T5243] ======================================================= [ 46.538553][ T5243] WARNING: The mand mount option has been deprecated and [ 46.538553][ T5243] and is ignored by this kernel. Remove the mand [ 46.538553][ T5243] option from the mount to silence this warning. [ 46.538553][ T5243] ======================================================= [ 46.573700][ T5243] EXT4-fs: Ignoring removed nobh option [ 46.579284][ T5243] EXT4-fs: Ignoring removed bh option [ 46.595245][ T5243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.625628][ C0] hrtimer: interrupt took 27070 ns [ 46.635527][ T4789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.743019][ T5263] loop6: detected capacity change from 0 to 512 [ 46.769876][ T5263] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.663: error while reading EA inode 32 err=-116 [ 46.782725][ T5263] EXT4-fs (loop6): Remounting filesystem read-only [ 46.789337][ T5263] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.802380][ T5263] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 46.814169][ T5263] EXT4-fs (loop6): 1 orphan inode deleted [ 46.820471][ T5263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.857013][ T4789] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.899938][ T5268] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.129214][ T5309] loop5: detected capacity change from 0 to 1024 [ 47.135887][ T5309] EXT4-fs: Ignoring removed orlov option [ 47.151843][ T5309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.226396][ T4653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.235343][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8fd800: rx timeout, send abort [ 47.275467][ T5323] syzkaller0: entered promiscuous mode [ 47.281030][ T5323] syzkaller0: entered allmulticast mode [ 47.442647][ T5348] SELinux: failed to load policy [ 47.490963][ T5358] netlink: 'syz.5.704': attribute type 39 has an invalid length. [ 47.501206][ T5359] SELinux: security_context_str_to_sid ($\;Bk(#N1-u4LK p4 < p5 p6 > [ 62.834963][ T6629] loop0: p1 start 460800 is beyond EOD, truncated [ 62.841491][ T6629] loop0: p2 size 83886080 extends beyond EOD, truncated [ 62.850386][ T6637] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 62.859730][ T6629] loop0: p5 start 460800 is beyond EOD, truncated [ 62.866177][ T6629] loop0: p6 size 83886080 extends beyond EOD, truncated [ 62.883491][ T6637] bond1 (unregistering): Released all slaves [ 63.006290][ T6651] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.047690][ T4653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.081559][ T6651] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.150963][ T6651] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.211648][ T6651] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.227950][ T6669] loop5: detected capacity change from 0 to 128 [ 63.258949][ T6672] netlink: 'syz.3.1245': attribute type 11 has an invalid length. [ 63.278032][ T31] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.291801][ T3818] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.303643][ T3818] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.328252][ T3818] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.356806][ T6686] loop3: detected capacity change from 0 to 512 [ 63.369900][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.382659][ T6686] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.409322][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.482983][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 63.482997][ T29] audit: type=1400 audit(1761693888.405:1965): avc: denied { append } for pid=6697 comm="syz.3.1256" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.515469][ T6696] $H: renamed from bond0 (while UP) [ 63.522740][ T6696] $H: entered promiscuous mode [ 63.527792][ T6696] bond_slave_0: entered promiscuous mode [ 63.533641][ T6696] bond_slave_1: entered promiscuous mode [ 63.558690][ T6700] netlink: 'syz.7.1257': attribute type 12 has an invalid length. [ 63.609794][ T29] audit: type=1400 audit(1761693888.535:1966): avc: denied { execute } for pid=6705 comm="syz.7.1260" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 63.912959][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.925259][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.940677][ T29] audit: type=1326 audit(1761693888.865:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 63.970467][ T29] audit: type=1326 audit(1761693888.865:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 63.993887][ T29] audit: type=1326 audit(1761693888.865:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 64.017280][ T29] audit: type=1326 audit(1761693888.865:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 64.040614][ T29] audit: type=1326 audit(1761693888.865:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 64.064061][ T29] audit: type=1326 audit(1761693888.865:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 64.087482][ T29] audit: type=1326 audit(1761693888.865:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 64.110991][ T29] audit: type=1326 audit(1761693888.885:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509faefc9 code=0x7ffc0000 [ 64.154983][ T6756] __nla_validate_parse: 7 callbacks suppressed [ 64.154999][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 65.064172][ T6782] loop7: detected capacity change from 0 to 512 [ 65.095007][ T6782] EXT4-fs: Ignoring removed oldalloc option [ 65.124792][ T6782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.137811][ T6782] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.203800][ T6782] SELinux: failed to load policy [ 65.284270][ T5497] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.448512][ T6822] loop4: detected capacity change from 0 to 512 [ 65.467560][ T6822] EXT4-fs: Ignoring removed oldalloc option [ 65.494893][ T6822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.508572][ T6822] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.571351][ T6822] SELinux: failed to load policy [ 65.590844][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.645014][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6835 comm=syz.4.1314 [ 65.762005][ T6844] syzkaller0: entered promiscuous mode [ 65.767503][ T6844] syzkaller0: entered allmulticast mode [ 65.851330][ T6852] loop0: detected capacity change from 0 to 512 [ 65.862528][ T6852] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 65.898453][ T6855] Falling back ldisc for ttyS3. [ 65.910675][ T6859] loop0: detected capacity change from 0 to 512 [ 65.923850][ T6859] EXT4-fs: Ignoring removed oldalloc option [ 65.937370][ T6861] loop5: detected capacity change from 0 to 512 [ 65.950467][ T6861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.964178][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.978130][ T6861] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.989362][ T6861] EXT4-fs warning (device loop5): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 66.010616][ T6859] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.023845][ T6861] netlink: 'syz.5.1327': attribute type 3 has an invalid length. [ 66.031645][ T6861] netlink: 'syz.5.1327': attribute type 3 has an invalid length. [ 66.076777][ T6859] SELinux: failed to load policy [ 66.102740][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.135090][ T4653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.169208][ T6877] syzkaller0: entered promiscuous mode [ 66.174721][ T6877] syzkaller0: entered allmulticast mode [ 66.319344][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.332700][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.375597][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.392261][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.422383][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.453379][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.481498][ T6926] loop0: detected capacity change from 0 to 512 [ 66.504572][ T6926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.517519][ T6926] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.530103][ T6926] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.549332][ T6936] netlink: 'syz.7.1347': attribute type 13 has an invalid length. [ 66.582236][ T6936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.652417][ T6950] loop7: detected capacity change from 0 to 1024 [ 66.659677][ T6950] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.670754][ T6950] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.682484][ T6950] JBD2: no valid journal superblock found [ 66.688317][ T6950] EXT4-fs (loop7): Could not load journal inode [ 66.695316][ T6956] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.703547][ T6956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.710852][ T6956] IPv6: NLM_F_CREATE should be set when creating new route [ 66.745051][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 66.778970][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 66.798797][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 66.831414][ T6976] loop4: detected capacity change from 0 to 512 [ 66.850968][ T6976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.865331][ T6976] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.883592][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1371'. [ 66.896652][ T6976] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1366: Failed to acquire dquot type 1 [ 66.923047][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.983540][ T7002] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 66.983540][ T7002] program syz.0.1378 not setting count and/or reply_len properly [ 67.004282][ T7004] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 67.004282][ T7004] program syz.4.1379 not setting count and/or reply_len properly [ 67.043409][ T7010] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 67.072057][ T7014] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1384'. [ 67.117188][ T7023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7023 comm=syz.5.1388 [ 67.172649][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'. [ 67.310556][ T7060] netlink: 664 bytes leftover after parsing attributes in process `+}[@'. [ 67.677065][ T7120] lo speed is unknown, defaulting to 1000 [ 67.683245][ T7120] lo speed is unknown, defaulting to 1000 [ 67.689149][ T7120] lo speed is unknown, defaulting to 1000 [ 67.695267][ T7120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.703296][ T7120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.713431][ T7120] lo speed is unknown, defaulting to 1000 [ 67.719574][ T7120] lo speed is unknown, defaulting to 1000 [ 67.727358][ T7120] lo speed is unknown, defaulting to 1000 [ 67.733483][ T7120] lo speed is unknown, defaulting to 1000 [ 67.739436][ T7120] lo speed is unknown, defaulting to 1000 [ 67.782393][ T7128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.784500][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 67.801674][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 67.845554][ T7128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.907304][ T7128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.967677][ T7128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.033887][ T3812] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.044785][ T3812] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.061726][ T3812] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.073575][ T3812] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.185218][ T7155] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 68.268395][ T3399] ================================================================== [ 68.276480][ T3399] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 68.283484][ T3399] [ 68.285786][ T3399] read-write to 0xffff888237c29de4 of 4 bytes by task 6915 on cpu 0: [ 68.293820][ T3399] wq_worker_running+0x95/0x120 [ 68.298650][ T3399] schedule_timeout+0xb7/0x170 [ 68.303390][ T3399] msleep+0x50/0x90 [ 68.307179][ T3399] nsim_fib_event_work+0x3b21/0x4790 [ 68.312527][ T3399] process_scheduled_works+0x4ce/0x9d0 [ 68.317970][ T3399] worker_thread+0x582/0x770 [ 68.322535][ T3399] kthread+0x489/0x510 [ 68.326582][ T3399] ret_from_fork+0x122/0x1b0 [ 68.331147][ T3399] ret_from_fork_asm+0x1a/0x30 [ 68.335900][ T3399] [ 68.338210][ T3399] read to 0xffff888237c29de4 of 4 bytes by task 3399 on cpu 1: [ 68.345727][ T3399] kick_pool+0x49/0x2d0 [ 68.349872][ T3399] __queue_work+0x8cb/0xb50 [ 68.354352][ T3399] queue_work_on+0xd1/0x160 [ 68.358835][ T3399] wg_packet_encrypt_worker+0xc0a/0xe10 [ 68.364358][ T3399] process_scheduled_works+0x4ce/0x9d0 [ 68.369798][ T3399] worker_thread+0x582/0x770 [ 68.374367][ T3399] kthread+0x489/0x510 [ 68.378411][ T3399] ret_from_fork+0x122/0x1b0 [ 68.382975][ T3399] ret_from_fork_asm+0x1a/0x30 [ 68.387712][ T3399] [ 68.390011][ T3399] value changed: 0x00000000 -> 0x00000001 [ 68.395699][ T3399] [ 68.397996][ T3399] Reported by Kernel Concurrency Sanitizer on: [ 68.404131][ T3399] CPU: 1 UID: 0 PID: 3399 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.413916][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.423952][ T3399] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 68.430450][ T3399] ================================================================== [ 68.470526][ T7169] loop0: detected capacity change from 0 to 1024 [ 68.479252][ T7169] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1451: Failed to acquire dquot type 0 [ 68.491167][ T7169] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 68.505675][ T7169] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1451: corrupted inode contents [ 68.517970][ T7169] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.1451: mark_inode_dirty error [ 68.530035][ T7169] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1451: corrupted inode contents [ 68.542107][ T7169] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1451: mark_inode_dirty error [ 68.553607][ T7169] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1451: corrupted inode contents [ 68.565781][ T7169] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 68.574736][ T7169] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1451: corrupted inode contents [ 68.586972][ T7169] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.1451: mark_inode_dirty error [ 68.598331][ T7169] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 68.607536][ T7169] EXT4-fs (loop0): 1 truncate cleaned up [ 68.618050][ T7169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.639880][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.