last executing test programs: 4m57.446808867s ago: executing program 32 (id=611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) 4m45.038207499s ago: executing program 33 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x2, 0x41, 0x0, 0x5, 0x0}) 3m15.404176569s ago: executing program 34 (id=4666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 2m38.447746033s ago: executing program 35 (id=6026): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') getdents64(r2, 0x0, 0x0) 2m38.327005905s ago: executing program 36 (id=6033): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1m38.281718266s ago: executing program 37 (id=7938): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "01d787"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1m38.146168258s ago: executing program 38 (id=7943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 1m37.593774287s ago: executing program 39 (id=7945): open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m37.120866934s ago: executing program 40 (id=7947): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) 1m18.814160098s ago: executing program 2 (id=8527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1m18.788752958s ago: executing program 2 (id=8528): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e26, 0x7, @empty, 0xb}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3a}, {0x2, 0x9, 0x3, 0x6, 0x9, 0xbffffffffffffffd, 0x5, 0x2000000000000000}, {0x800000fa, 0x1000000000008, 0x2, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in6=@empty, 0x4cf, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3506, 0x1, 0x0, 0x0, 0x5, 0x80000001, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 1m17.98473794s ago: executing program 5 (id=8558): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m17.923410872s ago: executing program 2 (id=8563): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 1m17.876111112s ago: executing program 5 (id=8565): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m17.875784082s ago: executing program 5 (id=8566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) 1m17.867433942s ago: executing program 2 (id=8567): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000011140102040000000000000008004a0001000000080003000100000008004b0013"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x0, 0x1}, {0x45, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000006004500001c00660000001190780a010101e0000001907c000000000000"], 0x0) 1m17.850995493s ago: executing program 5 (id=8568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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") 1m17.814764363s ago: executing program 2 (id=8570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) 1m17.662842416s ago: executing program 5 (id=8572): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r0) 1m17.532315658s ago: executing program 41 (id=8573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='mm_page_free\x00', r1, 0x0, 0x8}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m17.532189148s ago: executing program 2 (id=8575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@auto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0xff, 0x44d, &(0x7f0000000640)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m17.532062348s ago: executing program 42 (id=8575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@auto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0xff, 0x44d, &(0x7f0000000640)="$eJzs3M9rHFUcAPDvzCap/WVirT/6Q41WMfgjadKqPXhRFDwoCHqox5ikpXbbSBPBlqJRpB6l4F08Cv4FnvQi6knwqncpFMml1dPK7M4km83udtNusqH7+cAk78285b3vzLzZN/MyCaBvjWY/kog9EfFnRAzXsmsLjNZ+3Vy+PPPv8uWZJCqVd/5JquVuLF+eKYoWn9udZ8bSiPSLJA41qXfh4qWz0+Xy3IU8P7F47sOJhYuXnj9zbvr03Om581MnThw/NvnSi1MvdCXOrE03Dn4yf/jAG+9dfWvm5NX3f/0+KeJviKNLRtttfKpS6XJ1vbW3Lp0M9LAhbEgpIrLDNVjt/8NRitWDNxyvf97TxgGbqlKpVHa33rxUAe5iSfS6BUBvFF/02f1vsWzR0GNbuP5K7QYoi/tmvtS2DESalxlsuL/tptGIOLn03zfZEpvzHAIAYI0fs/HPc83Gf2k8WFfu3nxuaCQi7ouIfRFxf0Tsj4gHIqplH4qIhzdYf+MkyfrxT3otdtxWaB3Jxn8v53Nba8d/xegvRkp5bm81/sHk1Jny3NF8n4zF4I4sP9mmjp9e++OrVtvqx3/ZktVfjAXzdlwbaIh/dnpx+k5irnf9s4iDA83iT1ZmApKIOBARB2+zjjPPfHe41bZbx99GF+aZKt9GPF07/kvREH8haT8/OXFPlOeOThRnxXq//X7l7Vb131H8XZAd/11Nz/+V+EeS+vnahWTt/HAHrvz1Zct7mmbxD3Vw/g8l71bTQ/m6j6cXFy9MRgwlb9YaXb9+avWzRb4on8U/dqR5/98Xq3viUERkJ/EjEfFoRDyWt/3xiHgiIo60if+XV5/8oPP4k6WtPv6zGzr+q4mhaFzTPFE6+/MPayodaRd/s+vf8WpqLF/T7vpXXBI6aVeW6MY+BAAAgO0ujYg9kaTjK+k0HR+v/b38/tiVlucXFp89Nf/R+dnaOwIjMZgWT7qG656HTua39UV+qiF/LH9u/HVpZzU/PjNfnu118NDndrfo/5m/S71uHbDpvK8F/Uv/h/6l/0P/0v+hfzXp/zt70Q5g6zX7/v+0B+0Atl5D/zftB32k4/v/TXwRE+gNz/+gf3XQ/z0PhLvPws649UvyEhLrEpFui2Zs9J9RSHSY6PWVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DwAA//916+Vd") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m17.435617739s ago: executing program 5 (id=8578): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xe}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 1m17.435358349s ago: executing program 43 (id=8578): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xe}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 56.032489151s ago: executing program 1 (id=9169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 55.985417062s ago: executing program 1 (id=9173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 55.887217123s ago: executing program 1 (id=9182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r2) 55.826219154s ago: executing program 1 (id=9185): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 55.775632905s ago: executing program 1 (id=9188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 55.632502167s ago: executing program 1 (id=9190): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 55.632277767s ago: executing program 44 (id=9190): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 55.520064669s ago: executing program 8 (id=9195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 55.49520823s ago: executing program 8 (id=9196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1, 0x1, 0x0) 55.44528919s ago: executing program 8 (id=9197): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x800000, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2002, 0x0) 55.44472979s ago: executing program 8 (id=9198): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 55.420986501s ago: executing program 8 (id=9199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 55.344126052s ago: executing program 8 (id=9201): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 55.333580462s ago: executing program 45 (id=9201): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 28.491485568s ago: executing program 3 (id=10320): r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x6, @rand_addr=' \x01\x00', 0x200000}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 28.35608377s ago: executing program 3 (id=10323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") 28.136337354s ago: executing program 3 (id=10326): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 28.099530844s ago: executing program 3 (id=10330): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 28.083225985s ago: executing program 3 (id=10331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 27.856889878s ago: executing program 3 (id=10343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 27.832194878s ago: executing program 46 (id=10343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 1.099287013s ago: executing program 0 (id=11459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.091657053s ago: executing program 0 (id=11461): socketpair$tipc(0x1e, 0x4, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 1.068747373s ago: executing program 0 (id=11463): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x8}) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 887.873016ms ago: executing program 6 (id=11471): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) 849.476797ms ago: executing program 6 (id=11473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000100)={0x11, 0x4}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 753.316338ms ago: executing program 6 (id=11476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$rfkill(r2, 0x0, 0x0) 749.660179ms ago: executing program 0 (id=11477): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r1, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 690.63409ms ago: executing program 6 (id=11479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x94173000) mbind(&(0x7f000096e000/0x13000)=nil, 0x13000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4000000, 0x31, 0xffffffffffffffff, 0x0) 690.152339ms ago: executing program 0 (id=11480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) 644.33674ms ago: executing program 0 (id=11487): unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 522.604492ms ago: executing program 7 (id=11493): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 486.409202ms ago: executing program 7 (id=11494): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) 412.450604ms ago: executing program 7 (id=11495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 411.670124ms ago: executing program 7 (id=11497): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000200)=""/38, 0x26) 364.526964ms ago: executing program 6 (id=11500): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d0000000000000000000000040018"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) 304.004755ms ago: executing program 6 (id=11502): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="308af218c507fba195043000030fac571f882167129e3ce9ffb2d4b5e03563b8b8032777302a9b251d128f8ecf8d76d5490ef766de9b3e0ea02211fb", @ANYRES64=0x0, @ANYRES32], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 261.278906ms ago: executing program 4 (id=11504): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x0) 188.529368ms ago: executing program 4 (id=11505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0x8}, 0x18) clock_gettime(0x0, &(0x7f00000003c0)) 175.688108ms ago: executing program 4 (id=11507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000600002"], 0xac}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 164.968478ms ago: executing program 9 (id=11508): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) syz_open_dev$vcsu(0x0, 0x4, 0x40000) getegid() 148.481358ms ago: executing program 7 (id=11509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 124.708748ms ago: executing program 7 (id=11510): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560", 0x28}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 119.427038ms ago: executing program 9 (id=11511): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) 87.849719ms ago: executing program 4 (id=11512): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 87.263659ms ago: executing program 9 (id=11513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mlockall(0x2) 61.926719ms ago: executing program 9 (id=11514): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 35.52107ms ago: executing program 9 (id=11515): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x5, 0x2d) 29.15184ms ago: executing program 4 (id=11516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 12.02651ms ago: executing program 9 (id=11517): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 0s ago: executing program 4 (id=11518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) kernel console output (not intermixed with test programs): xmit_rdma 0000000000000000 [ 288.679693][ T6662] hsr_slave_0: entered promiscuous mode [ 288.686040][ T6662] hsr_slave_1: entered promiscuous mode [ 288.694843][ T7012] loop7: detected capacity change from 0 to 512 [ 288.698056][ T6662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.705405][ T7012] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 288.719083][ T6662] Cannot create hsr debugfs directory [ 288.729918][ T7012] EXT4-fs (loop7): 1 truncate cleaned up [ 288.739296][ T7012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.785440][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 288.814258][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9212'. [ 288.823229][ T7158] netlink: 'syz.0.9212': attribute type 15 has an invalid length. [ 288.831093][ T7158] netlink: 'syz.0.9212': attribute type 18 has an invalid length. [ 288.855787][ T7158] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.864622][ T7158] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.873360][ T7158] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.882221][ T7158] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.894643][ T7158] vxlan0: entered promiscuous mode [ 288.916987][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.931251][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9213'. [ 288.940279][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9213'. [ 288.949277][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9213'. [ 288.958858][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9213'. [ 288.967847][ T7180] netlink: 'syz.3.9213': attribute type 6 has an invalid length. [ 288.980874][ T7197] loop7: detected capacity change from 0 to 512 [ 288.996498][T29558] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.008784][ T7197] EXT4-fs (loop7): too many log groups per flexible block group [ 289.016670][ T7197] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 289.025382][ T7197] EXT4-fs (loop7): mount failed [ 289.044132][ T7208] xt_hashlimit: max too large, truncated to 1048576 [ 289.044133][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.044160][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.044322][ T6858] bridge_slave_0: entered allmulticast mode [ 289.075737][ T6858] bridge_slave_0: entered promiscuous mode [ 289.084364][T29558] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.096605][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.103779][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.112057][ T6858] bridge_slave_1: entered allmulticast mode [ 289.119505][ T6858] bridge_slave_1: entered promiscuous mode [ 289.143691][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.159763][T29558] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.162305][ T7274] loop7: detected capacity change from 0 to 1024 [ 289.179236][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.205222][ T7274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.221087][ T6858] team0: Port device team_slave_0 added [ 289.228165][ T6858] team0: Port device team_slave_1 added [ 289.235033][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.250456][T29558] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.274600][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.281620][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.307652][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.321834][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.323978][ T7324] loop7: detected capacity change from 0 to 8192 [ 289.328976][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.361475][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.384154][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 289.384167][ T29] audit: type=1326 audit(1751042687.740:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.429471][ T29] audit: type=1326 audit(1751042687.740:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.432350][ T7326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9224'. [ 289.453000][ T29] audit: type=1326 audit(1751042687.740:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.485523][ T29] audit: type=1326 audit(1751042687.740:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.508987][ T29] audit: type=1326 audit(1751042687.740:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.532381][ T29] audit: type=1326 audit(1751042687.750:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.556011][ T29] audit: type=1326 audit(1751042687.750:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.579495][ T29] audit: type=1326 audit(1751042687.750:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.602965][ T29] audit: type=1326 audit(1751042687.750:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.626375][ T29] audit: type=1326 audit(1751042687.750:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.7.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 289.655325][ T6662] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 289.678373][ T6858] hsr_slave_0: entered promiscuous mode [ 289.684814][ T6858] hsr_slave_1: entered promiscuous mode [ 289.691069][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.698873][ T6858] Cannot create hsr debugfs directory [ 289.709281][ T6662] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 289.744588][ T6662] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 289.765892][ T6662] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 289.827882][T29558] bond0 (unregistering): Released all slaves [ 289.840907][ T7391] veth3: entered promiscuous mode [ 289.846061][ T7391] veth3: entered allmulticast mode [ 289.912320][T29558] tipc: Left network mode [ 289.920676][ T7482] xt_hashlimit: max too large, truncated to 1048576 [ 289.950675][T29558] hsr_slave_0: left promiscuous mode [ 289.957705][T29558] hsr_slave_1: left promiscuous mode [ 289.975981][T29558] veth1_macvtap: left promiscuous mode [ 289.981488][T29558] veth0_macvtap: left promiscuous mode [ 289.991602][T29558] veth1_vlan: left promiscuous mode [ 289.997272][T29558] veth0_vlan: left promiscuous mode [ 290.093202][ T6662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.106954][ T6662] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.116895][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.124020][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.134845][T28120] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.142064][T28120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.196216][ T6662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.288094][ T6662] veth0_vlan: entered promiscuous mode [ 290.296127][ T6662] veth1_vlan: entered promiscuous mode [ 290.311077][ T6662] veth0_macvtap: entered promiscuous mode [ 290.318453][ T6662] veth1_macvtap: entered promiscuous mode [ 290.328571][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.337246][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.348304][ T6662] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.357118][ T6662] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.366020][ T6662] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.374699][ T6662] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.475951][ T7537] veth3: entered promiscuous mode [ 290.481051][ T7537] veth3: entered allmulticast mode [ 290.521770][T29558] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.543087][ T6858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.554165][ T6858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.567016][ T6858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.594208][ T6858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.617814][T29558] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.636082][ T7577] xt_hashlimit: max too large, truncated to 1048576 [ 290.701465][T29558] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.778079][T29558] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.791272][ T7614] xt_hashlimit: max too large, truncated to 1048576 [ 290.833972][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.880582][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.917733][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9260'. [ 290.978413][T29558] bond0 (unregistering): Released all slaves [ 290.989324][ T7719] bridge0: port 3(batadv1) entered blocking state [ 290.995888][ T7719] bridge0: port 3(batadv1) entered disabled state [ 291.002572][ T7719] batadv1: entered allmulticast mode [ 291.008523][ T7719] batadv1: entered promiscuous mode [ 291.018634][T28120] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.025716][T28120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.036731][T29558] tipc: Left network mode [ 291.041672][ T7549] chnl_net:caif_netlink_parms(): no params data found [ 291.056496][T28120] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.063772][T28120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.073880][T29558] hsr_slave_0: left promiscuous mode [ 291.080414][T29558] hsr_slave_1: left promiscuous mode [ 291.089406][T29558] veth1_macvtap: left promiscuous mode [ 291.095052][T29558] veth0_macvtap: left promiscuous mode [ 291.100629][T29558] veth1_vlan: left promiscuous mode [ 291.106037][T29558] veth0_vlan: left promiscuous mode [ 291.251802][ T7549] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.259049][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.267841][ T7549] bridge_slave_0: entered allmulticast mode [ 291.274753][ T7549] bridge_slave_0: entered promiscuous mode [ 291.283382][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.290817][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.298333][ T7549] bridge_slave_1: entered allmulticast mode [ 291.304673][ T7549] bridge_slave_1: entered promiscuous mode [ 291.337780][ T7549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.361421][ T7549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.383405][ T7828] netlink: 'syz.9.9270': attribute type 1 has an invalid length. [ 291.413326][ T7549] team0: Port device team_slave_0 added [ 291.431221][ T7549] team0: Port device team_slave_1 added [ 291.441954][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.487119][ T7549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.494156][ T7549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.520128][ T7549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.520622][T28405] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 291.531465][ T7549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.539926][T28405] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 291.556217][ T7549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.582313][ T7549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.693691][ T7549] hsr_slave_0: entered promiscuous mode [ 291.710639][ T7549] hsr_slave_1: entered promiscuous mode [ 291.723223][ T7549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.740798][ T7549] Cannot create hsr debugfs directory [ 291.859833][ T7975] x_tables: duplicate underflow at hook 2 [ 291.914258][ T6858] veth0_vlan: entered promiscuous mode [ 291.924952][ T6858] veth1_vlan: entered promiscuous mode [ 291.949276][ T6858] veth0_macvtap: entered promiscuous mode [ 291.967784][ T6858] veth1_macvtap: entered promiscuous mode [ 292.004152][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.020682][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.031294][ T8014] hub 6-0:1.0: USB hub found [ 292.042327][ T8014] hub 6-0:1.0: 8 ports detected [ 292.048182][ T6858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.056955][ T6858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.065859][ T6858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.074627][ T6858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.128441][ T7549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.158208][ T7549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.185601][ T7549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.200228][ T8044] loop9: detected capacity change from 0 to 512 [ 292.217449][ T8044] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 292.221041][ T7549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.241810][ T8044] EXT4-fs (loop9): 1 truncate cleaned up [ 292.262133][ T8044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.285950][ T7549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.297424][ T7549] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.307192][T28222] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.314312][T28222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.329322][ T8062] netlink: 'syz.4.9203': attribute type 1 has an invalid length. [ 292.338540][ T8044] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.363668][ T8062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.414395][T28222] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.421495][T28222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.460526][ T8104] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.462901][ T8114] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì44§/@®qæž [ 292.482576][ T23] IPVS: starting estimator thread 0... [ 292.494125][ T8110] netlink: 'syz.4.9296': attribute type 12 has an invalid length. [ 292.510006][ T7549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.575347][ T8115] IPVS: using max 2832 ests per chain, 141600 per kthread [ 292.651248][ T7549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.691728][ T8147] x_tables: duplicate underflow at hook 2 [ 292.772223][ T3393] IPVS: starting estimator thread 0... [ 292.778176][ T8155] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.840991][ T7549] veth0_vlan: entered promiscuous mode [ 292.857705][ T7549] veth1_vlan: entered promiscuous mode [ 292.865086][ T8165] IPVS: using max 2736 ests per chain, 136800 per kthread [ 292.974521][ T7549] veth0_macvtap: entered promiscuous mode [ 292.982050][ T7549] veth1_macvtap: entered promiscuous mode [ 293.043917][ T7549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.104716][ T7549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.163535][ T7549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.172302][ T7549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.181099][ T7549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.190126][ T7549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.433855][ T8208] netlink: 'syz.4.9331': attribute type 1 has an invalid length. [ 293.457872][ T8211] loop9: detected capacity change from 0 to 256 [ 293.484366][ T8211] FAT-fs (loop9): Directory bread(block 64) failed [ 293.505794][ T8216] xt_TCPMSS: Only works on TCP SYN packets [ 293.507680][ T8211] FAT-fs (loop9): Directory bread(block 65) failed [ 293.532195][ T8211] FAT-fs (loop9): Directory bread(block 66) failed [ 293.569254][ T8211] FAT-fs (loop9): Directory bread(block 67) failed [ 293.585573][ T8211] FAT-fs (loop9): Directory bread(block 68) failed [ 293.592130][ T8211] FAT-fs (loop9): Directory bread(block 69) failed [ 293.632958][ T8211] FAT-fs (loop9): Directory bread(block 70) failed [ 293.649497][ T8211] FAT-fs (loop9): Directory bread(block 71) failed [ 293.657040][ T8211] FAT-fs (loop9): Directory bread(block 72) failed [ 293.663659][ T8211] FAT-fs (loop9): Directory bread(block 73) failed [ 293.691631][ T8211] syz.9.9332: attempt to access beyond end of device [ 293.691631][ T8211] loop9: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 293.705513][ T8211] syz.9.9332: attempt to access beyond end of device [ 293.705513][ T8211] loop9: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 294.098300][ T8283] netlink: 'syz.7.9361': attribute type 1 has an invalid length. [ 294.386045][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 294.386060][ T29] audit: type=1400 audit(1751042692.750:8961): avc: denied { read } for pid=8296 comm="syz.0.9368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.485856][ T8305] xt_TCPMSS: Only works on TCP SYN packets [ 294.502499][ T8307] loop9: detected capacity change from 0 to 1024 [ 294.510208][ T8307] EXT4-fs: Ignoring removed nobh option [ 294.515831][ T8307] EXT4-fs: Ignoring removed bh option [ 294.526952][ T8307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.549407][ T6662] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.595181][ T8318] loop9: detected capacity change from 0 to 8192 [ 294.616876][ T8318] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 294.625532][ T8318] FAT-fs (loop9): Filesystem has been set read-only [ 294.686016][ T8327] loop9: detected capacity change from 0 to 256 [ 294.692754][ T8327] FAT-fs (loop9): bogus number of FAT sectors [ 294.698883][ T8327] FAT-fs (loop9): Can't find a valid FAT filesystem [ 294.718009][T28222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.884675][ T8332] chnl_net:caif_netlink_parms(): no params data found [ 294.938472][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.945600][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.964187][ T8332] bridge_slave_0: entered allmulticast mode [ 294.971967][ T8332] bridge_slave_0: entered promiscuous mode [ 294.980076][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.987293][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.994741][ T8332] bridge_slave_1: entered allmulticast mode [ 295.001530][ T8332] bridge_slave_1: entered promiscuous mode [ 295.041908][ T8332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.069019][ T8332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.103863][ T8332] team0: Port device team_slave_0 added [ 295.113206][ T8332] team0: Port device team_slave_1 added [ 295.135781][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.142821][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.168973][ T8332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.182218][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.189229][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.215649][ T8332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.249059][ T8332] hsr_slave_0: entered promiscuous mode [ 295.257176][ T8332] hsr_slave_1: entered promiscuous mode [ 295.263238][ T8332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.271061][ T8332] Cannot create hsr debugfs directory [ 295.358048][ T8703] loop7: detected capacity change from 0 to 512 [ 295.379686][ T8703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.403017][ T8703] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.440774][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.478619][ T8736] loop7: detected capacity change from 0 to 164 [ 295.487282][ T29] audit: type=1400 audit(1751042693.850:8962): avc: denied { mount } for pid=8732 comm="syz.7.9410" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 295.523596][ T29] audit: type=1400 audit(1751042693.880:8963): avc: denied { unmount } for pid=4295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 295.561133][ T29] audit: type=1400 audit(1751042693.920:8964): avc: denied { watch watch_reads } for pid=8757 comm="syz.7.9404" path="/162" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 295.607032][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 295.659874][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.667021][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.674365][ T8674] bridge_slave_0: entered allmulticast mode [ 295.681235][ T8674] bridge_slave_0: entered promiscuous mode [ 295.688567][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.695673][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.702935][ T8674] bridge_slave_1: entered allmulticast mode [ 295.709536][ T8674] bridge_slave_1: entered promiscuous mode [ 295.729336][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.740084][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.763721][ T8674] team0: Port device team_slave_0 added [ 295.771557][ T8674] team0: Port device team_slave_1 added [ 295.798521][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.805552][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.816964][ T29] audit: type=1400 audit(1751042694.170:8965): avc: denied { mount } for pid=8973 comm="syz.0.9414" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 295.831656][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.866645][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.873654][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.899923][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.917300][T28222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.959858][ T8674] hsr_slave_0: entered promiscuous mode [ 295.966108][ T8674] hsr_slave_1: entered promiscuous mode [ 295.972207][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.980046][ T8674] Cannot create hsr debugfs directory [ 296.059464][T28222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.117805][T28222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.168625][T28222] bridge_slave_1: left allmulticast mode [ 296.174416][T28222] bridge_slave_1: left promiscuous mode [ 296.180315][T28222] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.189146][T28222] bridge_slave_0: left allmulticast mode [ 296.194821][T28222] bridge_slave_0: left promiscuous mode [ 296.200637][T28222] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.239740][ T29] audit: type=1400 audit(1751042694.600:8966): avc: denied { ioctl } for pid=9103 comm="syz.0.9430" path="socket:[87347]" dev="sockfs" ino=87347 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 296.338032][T28222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.349412][T28222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.360924][T28222] bond0 (unregistering): Released all slaves [ 296.399844][T28222] hsr_slave_0: left promiscuous mode [ 296.405610][T28222] hsr_slave_1: left promiscuous mode [ 296.411445][T28222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.418968][T28222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.428802][T28222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.436391][T28222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.448896][T28222] veth1_macvtap: left promiscuous mode [ 296.455546][T28222] veth0_macvtap: left promiscuous mode [ 296.461150][T28222] veth1_vlan: left promiscuous mode [ 296.467381][T28222] veth0_vlan: left promiscuous mode [ 296.570086][T28222] team0 (unregistering): Port device team_slave_1 removed [ 296.580759][T28222] team0 (unregistering): Port device team_slave_0 removed [ 296.762353][ T9179] loop9: detected capacity change from 0 to 512 [ 296.789111][ T9179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.802737][ T9179] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.804051][ T9187] loop7: detected capacity change from 0 to 128 [ 296.832249][ T6662] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.872267][ T8674] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.920412][ T29] audit: type=1400 audit(1751042695.280:8967): avc: denied { unmount } for pid=4295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 296.961219][ T8674] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.992018][ T29] audit: type=1326 audit(1751042695.350:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 297.015650][ T29] audit: type=1326 audit(1751042695.350:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 297.055462][ T29] audit: type=1326 audit(1751042695.400:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 297.082835][ T8674] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.112435][ T9234] __nla_validate_parse: 3 callbacks suppressed [ 297.112451][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9471'. [ 297.127721][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9471'. [ 297.157549][ T8674] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.192843][ T9245] loop7: detected capacity change from 0 to 512 [ 297.227553][ T9245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.236111][ T8674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.240635][ T9245] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.272149][ T8674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.291383][ T8674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.305229][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.307035][ T8674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.329257][ T8332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.345726][ T8332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.362950][ T8332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.363667][ T9295] loop9: detected capacity change from 0 to 1024 [ 297.379523][ T8332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.387647][ T9295] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.400865][ T9295] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.424792][ T6662] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.434599][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.450659][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.467816][T28222] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.474937][T28222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.489545][ T8332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.504653][ T8674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.515146][ T8674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.532741][T28222] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.540098][T28222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.575984][ T8332] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.586374][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.593550][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.628303][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.635475][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.704177][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.768749][ T8332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.776519][ T9340] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.912047][ T8332] veth0_vlan: entered promiscuous mode [ 297.933930][ T8332] veth1_vlan: entered promiscuous mode [ 297.976114][ T8674] veth0_vlan: entered promiscuous mode [ 297.984390][ T8674] veth1_vlan: entered promiscuous mode [ 298.010578][ T9373] loop7: detected capacity change from 0 to 1024 [ 298.021865][ T8674] veth0_macvtap: entered promiscuous mode [ 298.040124][ T8674] veth1_macvtap: entered promiscuous mode [ 298.052579][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.063558][ T9373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.065466][ T8332] veth0_macvtap: entered promiscuous mode [ 298.083279][ T8332] veth1_macvtap: entered promiscuous mode [ 298.103041][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.119687][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.129037][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.137480][ T8332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.146371][ T8332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.155133][ T8332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.163879][ T8332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.164645][ T9373] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.9503: Allocating blocks 497-513 which overlap fs metadata [ 298.190289][ T8674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.199077][ T8674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.207854][ T8674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.214178][ T9372] EXT4-fs (loop7): pa ffff888106e778c0: logic 128, phys. 273, len 15 [ 298.217217][ T8674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.234086][ T9372] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 298.292750][ T9392] xt_connbytes: Forcing CT accounting to be enabled [ 298.299975][ T9392] Cannot find set identified by id 0 to match [ 298.321762][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.478359][ T9434] loop9: detected capacity change from 0 to 256 [ 298.508503][ T9434] msdos: Unknown parameter '18446744073709551615' [ 298.540461][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9533'. [ 298.643648][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9540'. [ 298.799190][ T9494] netem: change failed [ 299.382840][ T9558] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9579'. [ 299.392044][ T9558] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9579'. [ 299.401218][ T9558] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9579'. [ 299.456526][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 299.456541][ T29] audit: type=1400 audit(1751042697.820:9063): avc: denied { write } for pid=9563 comm="syz.3.9581" path="socket:[87953]" dev="sockfs" ino=87953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.521726][ T29] audit: type=1400 audit(1751042697.880:9064): avc: denied { bind } for pid=9561 comm="syz.0.9580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 299.569320][ T29] audit: type=1326 audit(1751042697.930:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.592871][ T29] audit: type=1326 audit(1751042697.930:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.625386][ T29] audit: type=1326 audit(1751042697.980:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.640738][ T9582] loop7: detected capacity change from 0 to 128 [ 299.648868][ T29] audit: type=1326 audit(1751042697.980:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.679429][ T29] audit: type=1326 audit(1751042697.980:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.702892][ T29] audit: type=1326 audit(1751042697.980:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.726343][ T29] audit: type=1326 audit(1751042697.980:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.734824][ T9582] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.749724][ T29] audit: type=1326 audit(1751042697.980:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.9588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7bb5e929 code=0x7ffc0000 [ 299.891992][ T9608] $Hÿ: renamed from bond0 (while UP) [ 299.902645][ T9608] $Hÿ: entered promiscuous mode [ 299.907833][ T9608] bond_slave_0: entered promiscuous mode [ 299.913662][ T9608] bond_slave_1: entered promiscuous mode [ 300.067507][ T9642] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O€!ÝëL [ 300.224635][ T9665] netlink: 'syz.9.9625': attribute type 10 has an invalid length. [ 300.232556][ T9665] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9625'. [ 300.257174][ T9665] team0: Port device geneve1 added [ 300.308561][ T9673] binfmt_misc: register: failed to install interpreter file ./file0 [ 300.379062][ T9685] netlink: 'syz.7.9634': attribute type 13 has an invalid length. [ 300.497193][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.504360][ T9685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.511756][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.519340][ T9685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.533725][ T9685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.703428][ T9711] vlan2: entered allmulticast mode [ 302.217782][ T9938] netlink: 'syz.7.9736': attribute type 1 has an invalid length. [ 302.267982][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9741'. [ 302.471910][ T9977] loop9: detected capacity change from 0 to 512 [ 302.478684][ T9977] EXT4-fs: Ignoring removed bh option [ 302.484472][ T9977] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 302.494528][ T9977] EXT4-fs (loop9): 1 truncate cleaned up [ 302.500572][ T9977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.529952][ T6662] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.805498][T10021] netlink: 'syz.3.9770': attribute type 8 has an invalid length. [ 303.018830][T10039] netem: change failed [ 303.077614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.173735][T10058] loop9: detected capacity change from 0 to 512 [ 303.185886][T10058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.228202][T10065] xt_bpf: check failed: parse error [ 303.235747][T10058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.249168][T10058] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.276030][ T6662] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.504502][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9806'. [ 303.513598][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9806'. [ 303.531838][T10107] rdma_op ffff88812140f580 conn xmit_rdma 0000000000000000 [ 303.567354][T10114] loop7: detected capacity change from 0 to 1024 [ 303.603210][T10114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.622414][T10114] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.645651][T10114] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 1: comm syz.7.9811: lblock 1 mapped to illegal pblock 1 (length 3) [ 303.664288][T10114] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 303.676618][T10114] EXT4-fs (loop7): This should not happen!! Data will be lost [ 303.676618][T10114] [ 303.707940][T28222] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 4: comm kworker/u8:112: lblock 4 mapped to illegal pblock 4 (length 5) [ 303.729300][T28222] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 5 with error 117 [ 303.741625][T28222] EXT4-fs (loop7): This should not happen!! Data will be lost [ 303.741625][T28222] [ 303.773916][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.792560][T10143] xt_hashlimit: max too large, truncated to 1048576 [ 304.110853][T10212] loop9: detected capacity change from 0 to 1024 [ 304.152459][T10212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.179914][T10212] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.9854: Allocating blocks 497-513 which overlap fs metadata [ 304.201525][T10211] EXT4-fs (loop9): pa ffff888106ded1c0: logic 128, phys. 273, len 15 [ 304.209835][T10211] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 304.297742][ T6662] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.407652][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9872'. [ 304.486671][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 304.486684][ T29] audit: type=1400 audit(1751042702.850:9286): avc: denied { watch } for pid=10269 comm="syz.4.9879" path="/65/file1" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 304.539924][ T29] audit: type=1326 audit(1751042702.900:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.563630][ T29] audit: type=1326 audit(1751042702.900:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.587304][ T29] audit: type=1326 audit(1751042702.900:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.611046][ T29] audit: type=1326 audit(1751042702.900:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.635123][ T29] audit: type=1326 audit(1751042702.900:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.659642][ T29] audit: type=1326 audit(1751042702.900:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.683147][ T29] audit: type=1326 audit(1751042702.900:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.706728][ T29] audit: type=1326 audit(1751042702.900:9294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.730278][ T29] audit: type=1326 audit(1751042702.900:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10275 comm="syz.3.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c32d1e929 code=0x7ffc0000 [ 304.786120][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9888'. [ 304.801643][T10296] loop9: detected capacity change from 0 to 128 [ 304.810349][T10296] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.822929][T10296] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.852201][ T6662] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.862486][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9890'. [ 304.871759][T10300] bridge_slave_1: left allmulticast mode [ 304.877483][T10300] bridge_slave_1: left promiscuous mode [ 304.883273][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.891904][T10300] bridge_slave_0: left allmulticast mode [ 304.897674][T10300] bridge_slave_0: left promiscuous mode [ 304.903516][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.965223][T10315] netem: change failed [ 305.597186][T10322] xt_hashlimit: max too large, truncated to 1048576 [ 305.687928][T10342] 9pnet: p9_errstr2errno: server reported unknown error @íÎ [ 305.776987][T10357] netlink: 'syz.7.9916': attribute type 10 has an invalid length. [ 305.800161][T10362] loop9: detected capacity change from 0 to 128 [ 305.829544][T10357] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 306.016378][T10395] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 306.023835][T10395] macsec1: entered allmulticast mode [ 306.034962][T10395] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 306.151944][T10417] loop7: detected capacity change from 0 to 512 [ 306.180616][T10417] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.9939: bad orphan inode 15 [ 306.229829][T10417] ext4_test_bit(bit=14, block=5) = 0 [ 306.238175][T10428] binfmt_misc: register: failed to install interpreter file ./file0 [ 306.246707][T10417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.322551][T10417] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 306.343956][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.798206][T28405] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.873175][T10478] loop7: detected capacity change from 0 to 512 [ 306.883311][T10478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.892130][T28405] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.907442][T10478] EXT4-fs (loop7): failed to initialize system zone (-117) [ 306.914760][T10478] EXT4-fs (loop7): mount failed [ 306.944781][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9966'. [ 306.978127][T28405] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.041195][T28405] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.095097][T10507] loop7: detected capacity change from 0 to 4096 [ 307.111611][T10507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.191512][T28405] bridge_slave_1: left allmulticast mode [ 307.197319][T28405] bridge_slave_1: left promiscuous mode [ 307.203021][T28405] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.225713][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.243645][T28405] bridge_slave_0: left promiscuous mode [ 307.249667][T28405] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.359451][T28405] team0: Port device geneve1 removed [ 307.437803][T28405] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.452607][T28405] bond_slave_0: left promiscuous mode [ 307.462011][T28405] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.479241][T28405] bond_slave_1: left promiscuous mode [ 307.496077][T28405] $Hÿ (unregistering): Released all slaves [ 307.592967][T28405] hsr_slave_0: left promiscuous mode [ 307.610431][T28405] hsr_slave_1: left promiscuous mode [ 307.628438][T28405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.635938][T28405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.680956][T28405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.688417][T28405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.705038][T28405] veth1_macvtap: left promiscuous mode [ 307.714198][T28405] veth0_macvtap: left promiscuous mode [ 307.720396][T28405] veth1_vlan: left promiscuous mode [ 307.725867][T28405] veth0_vlan: left promiscuous mode [ 307.757640][T10677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10677 comm=syz.0.9995 [ 307.770358][T10677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10677 comm=syz.0.9995 [ 307.847040][T28405] team0 (unregistering): Port device team_slave_1 removed [ 307.857723][T28405] team0 (unregistering): Port device team_slave_0 removed [ 307.894032][T10593] syzkaller1: entered promiscuous mode [ 307.899568][T10593] syzkaller1: entered allmulticast mode [ 307.946113][T10488] chnl_net:caif_netlink_parms(): no params data found [ 307.966688][T10702] 9pnet_fd: Insufficient options for proto=fd [ 307.991233][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10009'. [ 308.095841][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.102984][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.139461][T10488] bridge_slave_0: entered allmulticast mode [ 308.150988][T10488] bridge_slave_0: entered promiscuous mode [ 308.163012][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.170125][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.185595][T10488] bridge_slave_1: entered allmulticast mode [ 308.201390][T10488] bridge_slave_1: entered promiscuous mode [ 308.231221][T10798] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10021'. [ 308.261632][T28405] IPVS: stop unused estimator thread 0... [ 308.269305][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.293140][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.324397][T10488] team0: Port device team_slave_0 added [ 308.338696][T10488] team0: Port device team_slave_1 added [ 308.339123][T10857] netlink: 'syz.4.10030': attribute type 10 has an invalid length. [ 308.352395][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10030'. [ 308.370037][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.377084][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.403058][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.458083][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.465105][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.491194][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.507539][T10857] team0: Port device geneve1 added [ 308.545588][T10488] hsr_slave_0: entered promiscuous mode [ 308.551862][T10488] hsr_slave_1: entered promiscuous mode [ 308.560845][ T2958] Process accounting resumed [ 308.566013][T10488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.577488][T10488] Cannot create hsr debugfs directory [ 308.715515][T10998] loop7: detected capacity change from 0 to 164 [ 308.745437][T10998] syz.7.10046: attempt to access beyond end of device [ 308.745437][T10998] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 308.853318][T11035] xt_cluster: node mask cannot exceed total number of nodes [ 308.875577][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10063'. [ 308.967226][T10488] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 308.990419][T10488] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 309.011422][T10488] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 309.035826][T10488] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 309.102041][T11081] loop7: detected capacity change from 0 to 512 [ 309.134088][T11081] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.10066: casefold flag without casefold feature [ 309.166224][T11081] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10066: couldn't read orphan inode 15 (err -117) [ 309.184380][T10488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.193327][T11081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.212567][T10488] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.226924][T28405] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.234034][T28405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.252853][T27878] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.260052][T27878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.273396][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.427785][T10488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.700167][T10488] veth0_vlan: entered promiscuous mode [ 309.710470][T10488] veth1_vlan: entered promiscuous mode [ 309.736046][T10488] veth0_macvtap: entered promiscuous mode [ 309.743356][T10488] veth1_macvtap: entered promiscuous mode [ 309.760891][T10488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.774172][T10488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.784459][T10488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.793293][T10488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.802124][T10488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.810898][T10488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.820480][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 309.820535][ T29] audit: type=1400 audit(1751042708.180:9385): avc: denied { ioctl } for pid=11156 comm="syz.4.10090" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.895055][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.910301][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.971875][ T29] audit: type=1326 audit(1751042708.330:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 309.995591][ T29] audit: type=1326 audit(1751042708.330:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.019338][ T29] audit: type=1326 audit(1751042708.330:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.063486][ T29] audit: type=1326 audit(1751042708.330:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.087663][ T29] audit: type=1326 audit(1751042708.330:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.111307][ T29] audit: type=1326 audit(1751042708.330:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.135291][ T29] audit: type=1326 audit(1751042708.330:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.159571][ T29] audit: type=1326 audit(1751042708.330:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.183143][ T29] audit: type=1326 audit(1751042708.330:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.0.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 310.303853][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10100'. [ 310.390697][T11224] pim6reg: entered allmulticast mode [ 310.459319][T11224] pim6reg: left allmulticast mode [ 310.549214][T11249] netlink: 'syz.7.10118': attribute type 1 has an invalid length. [ 310.704808][T11265] SELinux: Context system_u:object is not valid (left unmapped). [ 310.908119][T11288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11288 comm=syz.3.10135 [ 310.920860][T11288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11288 comm=syz.3.10135 [ 311.191131][T11302] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10142'. [ 311.316305][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10146'. [ 311.327267][T11304] infiniband syz0: set active [ 311.331972][T11304] infiniband syz0: added veth0_to_team [ 311.357968][T11304] RDS/IB: syz0: added [ 311.362450][T11304] smc: adding ib device syz0 with port count 1 [ 311.368873][T11304] smc: ib device syz0 port 1 has pnetid [ 312.011808][T11382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10174'. [ 312.020973][T11382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10174'. [ 312.031441][T11382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10174'. [ 312.350520][T11408] openvswitch: netlink: Message has 6 unknown bytes. [ 312.655994][T11455] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 313.103421][T11539] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 313.653899][T11587] __nla_validate_parse: 8 callbacks suppressed [ 313.653920][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10252'. [ 313.669250][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10252'. [ 313.684301][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10252'. [ 313.731846][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10252'. [ 313.741136][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10252'. [ 313.751490][T11602] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.10254'. [ 313.761171][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10252'. [ 313.774959][T11592] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.10254'. [ 313.793391][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10256'. [ 313.805388][T11587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10252'. [ 314.609518][T11739] loop7: detected capacity change from 0 to 8192 [ 314.736797][T11770] loop9: detected capacity change from 0 to 128 [ 314.756897][T11770] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.772867][T11770] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.842153][T27973] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.880286][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 314.880300][ T29] audit: type=1326 audit(1751042713.240:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72a54e929 code=0x7ffc0000 [ 314.960439][T11795] loop9: detected capacity change from 0 to 8192 [ 314.967633][ T29] audit: type=1326 audit(1751042713.270:9588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff72a54e929 code=0x7ffc0000 [ 314.991317][ T29] audit: type=1326 audit(1751042713.270:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff72a54e963 code=0x7ffc0000 [ 315.014845][ T29] audit: type=1400 audit(1751042713.290:9590): avc: denied { write } for pid=11797 comm="syz.3.10320" path="socket:[94778]" dev="sockfs" ino=94778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 315.038641][ T29] audit: type=1326 audit(1751042713.290:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff72a54d3df code=0x7ffc0000 [ 315.062486][ T29] audit: type=1400 audit(1751042713.310:9592): avc: denied { connect } for pid=11800 comm="syz.7.10322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.082334][ T29] audit: type=1326 audit(1751042713.320:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff72a54e9b7 code=0x7ffc0000 [ 315.106045][ T29] audit: type=1326 audit(1751042713.320:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff72a54d290 code=0x7ffc0000 [ 315.129746][ T29] audit: type=1326 audit(1751042713.320:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff72a54e52b code=0x7ffc0000 [ 315.156305][ T29] audit: type=1326 audit(1751042713.500:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.9.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff72a54d58a code=0x7ffc0000 [ 315.224032][T11810] infiniband syz!: set active [ 315.228797][T11810] infiniband syz!: added team_slave_0 [ 315.245406][T11810] RDS/IB: syz!: added [ 315.250597][T11810] smc: adding ib device syz! with port count 1 [ 315.264987][T11810] smc: ib device syz! port 1 has pnetid [ 315.699659][T11897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11897 comm=syz.4.10348 [ 315.712392][T11897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11897 comm=syz.4.10348 [ 316.035261][T11868] chnl_net:caif_netlink_parms(): no params data found [ 316.078416][T11868] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.085648][T11868] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.093065][T11868] bridge_slave_0: entered allmulticast mode [ 316.100156][T11868] bridge_slave_0: entered promiscuous mode [ 316.107020][T11868] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.114138][T11868] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.121810][T11868] bridge_slave_1: entered allmulticast mode [ 316.128314][T11868] bridge_slave_1: entered promiscuous mode [ 316.138149][T27938] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.161914][T11868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.172869][T11868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.195669][T27938] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.207395][T11868] team0: Port device team_slave_0 added [ 316.214015][T11868] team0: Port device team_slave_1 added [ 316.231733][T11868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.238883][T11868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.264991][T11868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.277614][T27938] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.289633][T11868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.296623][T11868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.322678][T11868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.359355][T27938] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 316.387081][T27938] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.433273][T11868] hsr_slave_0: entered promiscuous mode [ 316.440685][T11868] hsr_slave_1: entered promiscuous mode [ 316.447002][T11868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.454745][T11868] Cannot create hsr debugfs directory [ 316.629292][T27938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.639620][T27938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.649756][T27938] bond0 (unregistering): Released all slaves [ 316.700000][T12268] loop7: detected capacity change from 0 to 1024 [ 316.712649][T12268] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 316.740731][T12268] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 316.854135][T27938] hsr_slave_0: left promiscuous mode [ 316.862779][T27938] hsr_slave_1: left promiscuous mode [ 316.876030][T27938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.883519][T27938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.898770][T27938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.906358][T27938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.920385][T27938] veth1_macvtap: left promiscuous mode [ 316.928244][T27938] veth0_macvtap: left promiscuous mode [ 316.935148][T27938] veth1_vlan: left promiscuous mode [ 316.948795][T27938] veth0_vlan: left promiscuous mode [ 317.047302][T12356] rdma_op ffff8881035e0180 conn xmit_rdma 0000000000000000 [ 317.108105][T27938] team0 (unregistering): Port device team_slave_1 removed [ 317.126786][T27938] team0 (unregistering): Port device team_slave_0 removed [ 317.135876][T28362] smc: removing ib device syz0 [ 317.167407][ T3393] syz0: Port: 1 Link DOWN [ 317.397182][T11868] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 317.418882][T11868] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 317.438772][T11868] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 317.460119][T11868] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 317.502509][T12435] loop9: detected capacity change from 0 to 512 [ 317.514593][T12431] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 317.536230][T12435] EXT4-fs: Ignoring removed oldalloc option [ 317.591655][T12435] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.10408: Parent and EA inode have the same ino 15 [ 317.614958][T11868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.634418][T12435] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.10408: Parent and EA inode have the same ino 15 [ 317.652096][T11868] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.668283][T12435] EXT4-fs (loop9): 1 orphan inode deleted [ 317.677794][T30117] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.684899][T30117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.692979][T12435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.715842][ T3893] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.722914][ T3893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.746520][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.783259][T12465] 9pnet: Unknown protocol version 9 [ 317.918424][T12486] loop9: detected capacity change from 0 to 1024 [ 317.940817][T12486] EXT4-fs: Ignoring removed bh option [ 317.972203][T11868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.988298][T12486] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 318.087001][T11868] veth0_vlan: entered promiscuous mode [ 318.094458][T11868] veth1_vlan: entered promiscuous mode [ 318.108888][T11868] veth0_macvtap: entered promiscuous mode [ 318.116398][T11868] veth1_macvtap: entered promiscuous mode [ 318.117566][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 318.126740][T11868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.144329][T11868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.151865][T12519] tipc: Started in network mode [ 318.156894][T12519] tipc: Node identity ac14140f, cluster identity 4711 [ 318.165125][T12519] tipc: New replicast peer: 255.255.255.83 [ 318.170980][T12519] tipc: Enabled bearer , priority 10 [ 318.178559][T11868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.187336][T11868] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.196081][T11868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.204787][T11868] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.601740][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.608970][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.714595][T12557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.757829][T12557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.787387][T12557] hsr0: left promiscuous mode [ 318.834389][T12557] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.843134][T12557] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.851565][T12557] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.859996][T12557] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.899796][T12557] veth3: left promiscuous mode [ 319.110870][T12598] __nla_validate_parse: 18 callbacks suppressed [ 319.110885][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10458'. [ 319.140950][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10458'. [ 319.179653][T12603] loop7: detected capacity change from 0 to 512 [ 319.195057][T12603] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 319.210811][T12603] EXT4-fs (loop7): 1 truncate cleaned up [ 319.222523][T12603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.284999][T12574] tipc: Node number set to 2886997007 [ 319.345583][T12615] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 319.470906][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.151648][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10472'. [ 320.218846][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 320.218859][ T29] audit: type=1326 audit(1751042718.580:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.10481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72a54e929 code=0x7ffc0000 [ 320.294979][ T29] audit: type=1400 audit(1751042718.590:9709): avc: denied { mount } for pid=12680 comm="syz.0.10483" name="/" dev="configfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 320.317842][ T29] audit: type=1400 audit(1751042718.590:9710): avc: denied { search } for pid=12680 comm="syz.0.10483" name="/" dev="configfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.340173][ T29] audit: type=1400 audit(1751042718.590:9711): avc: denied { search } for pid=12680 comm="syz.0.10483" name="/" dev="configfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.363018][ T29] audit: type=1400 audit(1751042718.590:9712): avc: denied { read open } for pid=12680 comm="syz.0.10483" path="/" dev="configfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.385742][ T29] audit: type=1326 audit(1751042718.610:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.10481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff72a54e929 code=0x7ffc0000 [ 320.409534][ T29] audit: type=1326 audit(1751042718.610:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.10481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff72a54e929 code=0x0 [ 320.556352][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.563617][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.708147][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.742724][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.762652][T12688] hsr0: left promiscuous mode [ 320.806741][T12688] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.815795][T12688] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.824731][T12688] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.833787][T12688] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.893870][T12688] veth3: left promiscuous mode [ 320.902217][T12688] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.911327][T12688] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.920316][T12688] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.929384][T12688] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.959319][ T29] audit: type=1326 audit(1751042719.300:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.7.10473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7fc00000 [ 321.008314][T12688] vxlan0: left promiscuous mode [ 321.186411][ T29] audit: type=1326 audit(1751042719.550:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 321.248066][T12736] sd 0:0:1:0: device reset [ 321.269070][ T29] audit: type=1326 audit(1751042719.570:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.7.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 321.426510][T12767] loop9: detected capacity change from 0 to 256 [ 321.524866][T12789] pim6reg1: entered promiscuous mode [ 321.530426][T12789] pim6reg1: entered allmulticast mode [ 321.569844][T12793] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10524'. [ 321.900538][T12862] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 322.060936][T12879] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.068312][T12879] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.135947][T12879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.159374][T12879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.208100][T12879] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.217251][T12879] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.226402][T12879] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.235411][T12879] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.253407][T12887] $Hÿ: renamed from bond0 [ 322.261048][T12887] $Hÿ: entered promiscuous mode [ 322.266247][T12887] @ÿ: entered promiscuous mode [ 322.271587][T12887] bond_slave_1: entered promiscuous mode [ 323.058771][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.066133][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.132478][T13012] hub 2-0:1.0: USB hub found [ 323.134498][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.145018][T13012] hub 2-0:1.0: 8 ports detected [ 323.149446][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.194645][T13003] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.203743][T13003] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.212959][T13003] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.222396][T13003] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.279363][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10581'. [ 323.345758][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10586'. [ 323.354758][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10586'. [ 323.372212][T13035] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 323.382552][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10586'. [ 323.416280][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10586'. [ 323.425416][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10586'. [ 323.703293][T13069] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.710536][T13069] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.787982][T13069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.818952][T13069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.878268][T13069] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.887271][T13069] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.896198][T13069] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.905135][T13069] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.463701][T13146] infiniband syz2: set down [ 324.468404][T13146] infiniband syz2: added veth0_to_bond [ 324.474646][T13148] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 324.492635][T13146] RDS/IB: syz2: added [ 324.496846][T13146] smc: adding ib device syz2 with port count 1 [ 324.515275][T13146] smc: ib device syz2 port 1 has pnetid [ 324.522951][T13148] team0: Device ipvlan2 is already an upper device of the team interface [ 324.548756][T13161] SELinux: syz.9.10637 (13161) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 324.608641][T13163] __nla_validate_parse: 5 callbacks suppressed [ 324.608697][T13163] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10638'. [ 324.872180][T13205] loop9: detected capacity change from 0 to 1024 [ 324.885309][T13205] EXT4-fs: Ignoring removed orlov option [ 324.891089][T13205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.917930][T13205] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.934208][T13205] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 324.976487][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.070290][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10664'. [ 325.070786][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10667'. [ 325.097521][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10668'. [ 325.207647][T13256] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 325.295540][T13268] vhci_hcd: invalid port number 96 [ 325.300721][T13268] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 325.493465][T13277] syz_tun: entered promiscuous mode [ 325.499299][T13277] batadv_slave_0: entered promiscuous mode [ 325.506180][T13277] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 325.513803][T13277] Cannot create hsr debugfs directory [ 325.519439][T13277] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 325.529446][T13277] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.540104][T13277] hsr1: entered allmulticast mode [ 325.545204][T13277] syz_tun: entered allmulticast mode [ 325.550514][T13277] batadv_slave_0: entered allmulticast mode [ 325.741114][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 325.741128][ T29] audit: type=1326 audit(1751042724.100:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72a54e929 code=0x7ffc0000 [ 325.771392][T13310] loop9: detected capacity change from 0 to 512 [ 325.773170][ T29] audit: type=1326 audit(1751042724.110:9810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff72a54e929 code=0x7ffc0000 [ 325.801625][ T29] audit: type=1326 audit(1751042724.110:9811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff72a54e963 code=0x7ffc0000 [ 325.825331][ T29] audit: type=1326 audit(1751042724.110:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff72a54d3df code=0x7ffc0000 [ 325.848966][ T29] audit: type=1326 audit(1751042724.110:9813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff72a54e9b7 code=0x7ffc0000 [ 325.850313][T13310] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 325.873336][ T29] audit: type=1326 audit(1751042724.130:9814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff72a54d290 code=0x7ffc0000 [ 325.886028][T13310] EXT4-fs (loop9): orphan cleanup on readonly fs [ 325.905085][ T29] audit: type=1326 audit(1751042724.130:9815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff72a54e52b code=0x7ffc0000 [ 325.913843][T13310] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.10700: iget: bad i_size value: 360287970189639680 [ 325.937234][ T29] audit: type=1326 audit(1751042724.140:9816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff72a54d58a code=0x7ffc0000 [ 325.971556][ T29] audit: type=1326 audit(1751042724.140:9817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff72a54d58a code=0x7ffc0000 [ 325.994980][ T29] audit: type=1326 audit(1751042724.140:9818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.9.10700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff72a54d197 code=0x7ffc0000 [ 326.031901][T13310] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.10700: couldn't read orphan inode 15 (err -117) [ 326.049936][T13310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.099885][T13324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.134160][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.409766][T13390] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 326.420388][T13392] netem: change failed [ 326.455870][T13400] 9pnet: p9_errstr2errno: server reported unknown error -control [ 326.579975][T13431] SET target dimension over the limit! [ 326.586573][T13426] vcan0: MTU too low for tipc bearer [ 326.591888][T13426] tipc: Enabling of bearer rejected, failed to enable media [ 326.652228][T13442] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10755'. [ 326.772628][T13466] loop9: detected capacity change from 0 to 1024 [ 326.781072][T13466] EXT4-fs: Ignoring removed nobh option [ 326.786749][T13466] EXT4-fs: Ignoring removed bh option [ 326.800278][T13466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.968904][T13486] tipc: New replicast peer: 255.255.255.255 [ 326.975091][T13486] tipc: Enabled bearer , priority 10 [ 326.982375][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10773'. [ 326.988041][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.991492][T13486] tipc: Disabling bearer [ 327.018586][T13490] netlink: 132 bytes leftover after parsing attributes in process `syz.9.10774'. [ 327.508972][T13518] loop7: detected capacity change from 0 to 512 [ 327.516352][T13518] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 327.541043][T13518] EXT4-fs (loop7): 1 truncate cleaned up [ 327.548558][T13518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.594492][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.705099][T13535] Cannot find add_set index 0 as target [ 327.819113][T13548] netlink: 'syz.4.10798': attribute type 298 has an invalid length. [ 328.010786][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10805'. [ 328.032230][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10805'. [ 328.077564][T13575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10809'. [ 328.235044][T13599] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 328.267970][T13603] netlink: 'syz.0.10823': attribute type 298 has an invalid length. [ 328.483863][T13629] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 328.673205][T13663] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 328.690743][T13665] xt_hashlimit: max too large, truncated to 1048576 [ 328.742640][T13678] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 329.042277][T13693] x_tables: duplicate underflow at hook 1 [ 329.185594][T13701] sd 0:0:1:0: device reset [ 329.482308][T13734] sd 0:0:1:0: device reset [ 329.497089][T13735] SELinux: syz.9.10881 (13735) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 329.581062][T13763] loop7: detected capacity change from 0 to 1024 [ 329.590093][T13763] EXT4-fs: Ignoring removed nobh option [ 329.595889][T13763] EXT4-fs: Ignoring removed bh option [ 329.621540][T13763] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.805649][T13793] loop9: detected capacity change from 0 to 512 [ 329.829025][T13793] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 329.856671][T13804] SELinux: syz.6.10901 (13804) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 329.885955][T13793] EXT4-fs (loop9): 1 truncate cleaned up [ 329.911978][T13793] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.921138][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.987491][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.218999][T13864] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 330.261682][T13876] __nla_validate_parse: 2 callbacks suppressed [ 330.261697][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10918'. [ 330.338369][T13891] x_tables: duplicate underflow at hook 1 [ 330.421398][T13906] loop9: detected capacity change from 0 to 1024 [ 330.430972][T13906] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 330.441994][T13906] EXT4-fs (loop9): group descriptors corrupted! [ 330.469326][T13911] $Hÿ: renamed from bond0 [ 330.475030][T13906] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 330.494328][T13911] $Hÿ: entered promiscuous mode [ 330.499454][T13911] bond_slave_0: entered promiscuous mode [ 330.505260][T13911] bond_slave_1: entered promiscuous mode [ 330.616559][T13933] x_tables: duplicate underflow at hook 1 [ 330.716337][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.725379][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.742763][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.770732][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.779822][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.789468][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.849759][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.858916][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.870464][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10955'. [ 330.941007][T13973] hub 2-0:1.0: USB hub found [ 330.947430][T13973] hub 2-0:1.0: 8 ports detected [ 331.092426][T13994] loop7: detected capacity change from 0 to 512 [ 331.111347][T13994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.128312][T13994] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.204361][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 331.204374][ T29] audit: type=1400 audit(1751042729.560:9989): avc: denied { ioctl } for pid=13993 comm="syz.7.10970" path="/496/bus/file1" dev="loop7" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 331.333770][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.494264][T14013] loop7: detected capacity change from 0 to 512 [ 331.503849][T14013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.516748][T14013] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.703141][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.717608][T14031] loop9: detected capacity change from 0 to 512 [ 331.738830][T14031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.753614][T14031] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.817031][ T29] audit: type=1326 audit(1751042730.180:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.7.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 331.841532][ T29] audit: type=1326 audit(1751042730.180:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.7.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 331.871349][ T29] audit: type=1326 audit(1751042730.230:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.7.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa7e28ae929 code=0x7ffc0000 [ 331.895315][ T29] audit: type=1326 audit(1751042730.230:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.7.10987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7e28ae929 code=0x0 [ 331.973305][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.991823][T14058] hub 2-0:1.0: USB hub found [ 331.993871][T14064] loop9: detected capacity change from 0 to 512 [ 331.998800][T14058] hub 2-0:1.0: 8 ports detected [ 332.028439][T14064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.041361][T14064] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.185604][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.196629][ T29] audit: type=1326 audit(1751042730.560:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.0.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 332.231843][ T29] audit: type=1326 audit(1751042730.560:9995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.0.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 332.255558][ T29] audit: type=1326 audit(1751042730.560:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.0.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 332.279389][ T29] audit: type=1326 audit(1751042730.560:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.0.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 332.303163][ T29] audit: type=1326 audit(1751042730.560:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14085 comm="syz.0.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 333.121989][T14149] $Hÿ: renamed from bond0 [ 333.136094][T14149] $Hÿ: entered promiscuous mode [ 333.141228][T14149] bond_slave_0: entered promiscuous mode [ 333.147095][T14149] bond_slave_1: entered promiscuous mode [ 333.160285][T14149] dummy0: entered promiscuous mode [ 333.603121][T14234] serio: Serial port ptm0 [ 333.885965][T14312] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 334.423326][T14421] loop9: detected capacity change from 0 to 512 [ 334.440261][T14421] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.453769][T14421] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.582016][T14449] syz_tun: entered promiscuous mode [ 334.594916][T14449] batadv_slave_0: entered promiscuous mode [ 334.602117][T14449] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 334.609827][T14449] Cannot create hsr debugfs directory [ 334.615463][T14449] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 334.625487][T14449] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.636331][T14449] hsr1: entered allmulticast mode [ 334.641489][T14449] syz_tun: entered allmulticast mode [ 334.646847][T14449] batadv_slave_0: entered allmulticast mode [ 334.670501][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.772394][T14479] syz_tun (unregistering): left promiscuous mode [ 334.791377][T14484] loop9: detected capacity change from 0 to 128 [ 334.803324][T14484] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.817890][T14484] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.870186][T10488] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.040036][T14535] syz_tun: entered promiscuous mode [ 335.046461][T14535] batadv_slave_0: entered promiscuous mode [ 335.052979][T14535] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 335.061062][T14535] Cannot create hsr debugfs directory [ 335.075607][T14535] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 335.085811][T14535] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.099843][T14535] hsr1: entered allmulticast mode [ 335.104945][T14535] syz_tun: entered allmulticast mode [ 335.110371][T14535] batadv_slave_0: entered allmulticast mode [ 335.153150][T14551] loop7: detected capacity change from 0 to 512 [ 335.166084][T14551] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 335.180941][T14552] vhci_hcd: invalid port number 96 [ 335.181512][T14551] EXT4-fs (loop7): orphan cleanup on readonly fs [ 335.186292][T14552] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 335.208300][T14551] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.11105: iget: bad i_size value: 360287970189639680 [ 335.222166][T14551] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.11105: couldn't read orphan inode 15 (err -117) [ 335.252137][T14551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.302138][ T4295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.321884][T14573] __nla_validate_parse: 9 callbacks suppressed [ 335.321969][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11125'. [ 335.464827][T14584] loop7: detected capacity change from 0 to 1024 [ 335.471852][T14584] EXT4-fs: Ignoring removed orlov option [ 335.478854][T14584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.487687][T14584] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.499007][T14584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 335.507437][T14584] System zones: 0-1, 3-12 [ 335.514237][T14584] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.11118: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.534597][T14594] netem: change failed [ 335.535808][T14584] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.11118: Failed to acquire dquot type 0 [ 335.564435][T14584] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.11118: Freeing blocks not in datazone - block = 0, count = 4096 [ 335.582745][T14584] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.11118: Invalid inode bitmap blk 0 in block_group 0 [ 335.596739][ T3914] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.600490][T14584] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 335.620325][T14584] EXT4-fs (loop7): 1 orphan inode deleted [ 335.626885][T14584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.639839][ T3914] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0 [ 335.655650][T14584] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.687222][T14584] loop7: detected capacity change from 0 to 512 [ 335.706258][T14584] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.11118: Failed to acquire dquot type 1 [ 335.718315][T14584] EXT4-fs (loop7): 1 truncate cleaned up [ 335.724311][T14584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.736856][T14584] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.748076][T14584] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.782014][T14612] loop9: detected capacity change from 0 to 1024 [ 335.817717][T14612] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.831370][T14612] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.847161][T14612] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 8: comm syz.9.11127: lblock 8 mapped to illegal pblock 8 (length 1) [ 335.863347][T14612] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 335.875732][T14612] EXT4-fs (loop9): This should not happen!! Data will be lost [ 335.875732][T14612] [ 335.897534][T14612] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 335.914711][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11134'. [ 335.924012][T14612] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 335.936580][T14612] EXT4-fs (loop9): This should not happen!! Data will be lost [ 335.936580][T14612] [ 335.946360][T14612] EXT4-fs (loop9): Total free blocks count 0 [ 335.952507][T14612] EXT4-fs (loop9): Free/Dirty block details [ 335.958531][T14612] EXT4-fs (loop9): free_blocks=4293918720 [ 335.964258][T14612] EXT4-fs (loop9): dirty_blocks=480 [ 335.969526][T14612] EXT4-fs (loop9): Block reservation details [ 335.969938][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11136'. [ 336.000858][T28555] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:124: lblock 1 mapped to illegal pblock 1 (length 7) [ 336.197708][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11156'. [ 336.215388][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 336.215465][ T29] audit: type=1326 audit(1751042734.570:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.245564][ T29] audit: type=1326 audit(1751042734.570:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.269269][ T29] audit: type=1326 audit(1751042734.570:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.293141][ T29] audit: type=1326 audit(1751042734.570:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14688 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2565d11e5 code=0x7ffc0000 [ 336.316880][ T29] audit: type=1326 audit(1751042734.570:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.344601][ T29] audit: type=1326 audit(1751042734.580:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.368489][ T29] audit: type=1326 audit(1751042734.580:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.392800][ T29] audit: type=1326 audit(1751042734.580:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.416478][ T29] audit: type=1326 audit(1751042734.580:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.440359][ T29] audit: type=1326 audit(1751042734.580:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.6.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25659e929 code=0x7ffc0000 [ 336.577473][T14721] loop7: detected capacity change from 0 to 1024 [ 336.586602][T14721] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 336.597570][T14721] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 336.609328][T14721] JBD2: no valid journal superblock found [ 336.615125][T14721] EXT4-fs (loop7): Could not load journal inode [ 336.631769][T14721] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 336.641981][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11170'. [ 336.737976][T14760] netlink: 332 bytes leftover after parsing attributes in process `syz.7.11173'. [ 336.749079][T14760] netlink: 'syz.7.11173': attribute type 9 has an invalid length. [ 336.756995][T14760] netlink: 108 bytes leftover after parsing attributes in process `syz.7.11173'. [ 336.766260][T14760] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11173'. [ 336.796492][T14764] netlink: 'syz.0.11180': attribute type 1 has an invalid length. [ 336.838552][T14764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.848540][T14802] program syz.6.11183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.861292][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11182'. [ 336.865425][T14804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.877868][T14804] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 336.889565][T14804] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 336.914384][T14806] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 336.983854][T14820] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 337.021613][T14822] loop7: detected capacity change from 0 to 8192 [ 337.053933][T14829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11192'. [ 337.074836][T14834] netlink: 'syz.9.11193': attribute type 9 has an invalid length. [ 337.093806][T14838] 0ªX¹¦À: renamed from caif0 [ 337.105505][T14838] 0ªX¹¦À: entered allmulticast mode [ 337.111184][T14838] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 337.157361][T14843] hsr_slave_0: left promiscuous mode [ 337.163419][T14843] hsr_slave_1: left promiscuous mode [ 337.316272][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.323728][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.331225][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.343030][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.350508][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.358058][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.365496][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.372893][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.380371][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.388057][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.395541][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.402964][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.410394][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.417956][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.429169][T14883] tipc: Started in network mode [ 337.434113][T14883] tipc: Node identity 2000007, cluster identity 4711 [ 337.441001][T14883] tipc: Node number set to 33554439 [ 337.462298][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.469788][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.477244][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.484693][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.492215][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.499642][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.507066][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.514491][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.521986][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.529406][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.536811][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.544368][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.551808][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.559235][ T1035] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 337.568815][ T1035] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 337.678595][T14917] tipc: Started in network mode [ 337.683495][T14917] tipc: Node identity 2000007, cluster identity 4711 [ 337.690290][T14917] tipc: Node number set to 33554439 [ 337.760238][T14926] program syz.9.11228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.822711][T14942] xt_bpf: check failed: parse error [ 337.954796][T14958] loop9: detected capacity change from 0 to 764 [ 337.973206][T14958] rock: directory entry would overflow storage [ 337.979490][T14958] rock: sig=0x4654, size=5, remaining=4 [ 338.045964][T14965] netlink: 'syz.7.11241': attribute type 1 has an invalid length. [ 338.071373][T14965] bond0: entered promiscuous mode [ 338.084999][T14965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.114789][T15001] bond0: (slave bridge1): making interface the new active one [ 338.122393][T15001] bridge1: entered promiscuous mode [ 338.138594][T15001] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 338.162748][T15009] loop9: detected capacity change from 0 to 512 [ 338.226869][T15022] netlink: 'syz.9.11250': attribute type 1 has an invalid length. [ 338.244373][T15022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.262663][T15022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.273564][T15022] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.287063][T15022] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 338.299872][T15067] 0ªX¹¦À: renamed from caif0 [ 338.306541][T15067] 0ªX¹¦À: entered allmulticast mode [ 338.311770][T15067] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 338.348068][T15075] $Hÿ: left promiscuous mode [ 338.352969][T15075] bond_slave_0: left promiscuous mode [ 338.358689][T15075] bond_slave_1: left promiscuous mode [ 338.364295][T15075] dummy0: left promiscuous mode [ 338.369586][T15075] 0ªX¹¦À: left allmulticast mode [ 338.380091][T15075] veth3: left allmulticast mode [ 338.385736][T15075] hsr1: left allmulticast mode [ 338.390552][T15075] syz_tun: left allmulticast mode [ 338.395705][T15075] batadv_slave_0: left allmulticast mode [ 338.402606][T15075] bond0: left promiscuous mode [ 338.407493][T15075] bridge1: left promiscuous mode [ 338.416942][T15079] 0ªX¹¦À: renamed from caif0 [ 338.426754][T15079] 0ªX¹¦À: entered allmulticast mode [ 338.432002][T15079] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 338.475278][T15083] loop7: detected capacity change from 0 to 512 [ 338.673381][T15102] netlink: 'syz.7.11268': attribute type 1 has an invalid length. [ 338.713925][T15102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.756332][T15138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.780989][T15138] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.798131][T15138] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 339.068708][T15182] loop9: detected capacity change from 0 to 512 [ 339.087058][T15182] EXT4-fs: inline encryption not supported [ 339.094822][T15182] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 339.138758][T15189] 0ªX¹¦À: renamed from caif0 [ 339.144681][T15182] EXT4-fs (loop9): 1 truncate cleaned up [ 339.150863][T15182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.163926][T15189] 0ªX¹¦À: entered allmulticast mode [ 339.169869][T15189] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 339.196557][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.351920][ T3914] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x5 [ 339.478457][T15241] 0ªX¹¦À: renamed from caif0 [ 339.496973][T15241] 0ªX¹¦À: entered allmulticast mode [ 339.502570][T15241] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 339.706903][T15282] 1ªX¹¦À: renamed from 60ªX¹¦À [ 339.725090][T15282] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 339.771951][T15293] sd 0:0:1:0: device reset [ 340.145765][T15348] 1ªX¹¦À: renamed from 60ªX¹¦À [ 340.165486][T15348] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 340.232438][T15361] loop9: detected capacity change from 0 to 512 [ 340.240855][T15361] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.250373][T15361] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 340.263348][T15361] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 340.271609][T15361] EXT4-fs (loop9): orphan cleanup on readonly fs [ 340.280834][T15361] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.11360: Invalid block bitmap block 0 in block_group 0 [ 340.294813][T15361] EXT4-fs (loop9): Remounting filesystem read-only [ 340.301943][T15361] EXT4-fs (loop9): 1 orphan inode deleted [ 340.308415][T15361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.341411][T10488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.369244][T15383] __nla_validate_parse: 16 callbacks suppressed [ 340.369263][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11368'. [ 340.384737][T15383] syz_tun: Device is already in use. [ 340.638938][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11374'. [ 340.663524][T15407] loop7: detected capacity change from 0 to 128 [ 340.671895][T15407] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.687502][T15407] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.732612][ T4295] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.773945][T15420] usb usb1: usbfs: process 15420 (syz.9.11380) did not claim interface 0 before use [ 340.807705][T15428] loop7: detected capacity change from 0 to 512 [ 340.826043][T15428] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 340.841272][T15428] EXT4-fs (loop7): mount failed [ 341.027473][T15450] wireguard0: entered promiscuous mode [ 341.032999][T15450] wireguard0: entered allmulticast mode [ 341.259844][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 341.259858][ T29] audit: type=1400 audit(1751042739.620:10320): avc: denied { ioctl } for pid=15495 comm="syz.7.11406" path="socket:[103028]" dev="sockfs" ino=103028 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 341.291252][ T29] audit: type=1400 audit(1751042739.620:10321): avc: denied { write } for pid=15495 comm="syz.7.11406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 341.369454][ T29] audit: type=1326 audit(1751042739.730:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 341.393305][ T29] audit: type=1326 audit(1751042739.730:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 341.417762][ T29] audit: type=1326 audit(1751042739.780:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 341.441521][ T29] audit: type=1326 audit(1751042739.780:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 341.465311][ T29] audit: type=1326 audit(1751042739.780:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641912e929 code=0x7ffc0000 [ 341.641725][ T29] audit: type=1400 audit(1751042740.000:10327): avc: denied { name_bind } for pid=15529 comm="syz.0.11421" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.663913][ T29] audit: type=1400 audit(1751042740.000:10328): avc: denied { node_bind } for pid=15529 comm="syz.0.11421" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 341.707599][ T29] audit: type=1400 audit(1751042740.070:10329): avc: denied { bind } for pid=15538 comm="syz.9.11424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.739866][T15543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.827564][T15560] serio: Serial port ptm0 [ 342.151970][T15623] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.11450'. [ 342.161799][T15623] netlink: zone id is out of range [ 342.167178][T15623] netlink: zone id is out of range [ 342.172606][T15623] netlink: del zone limit has 8 unknown bytes [ 342.188031][T15625] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 342.383754][T15674] lo speed is unknown, defaulting to 1000 [ 342.397931][T15674] lo speed is unknown, defaulting to 1000 [ 342.424964][T15674] lo speed is unknown, defaulting to 1000 [ 342.437840][T15674] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 342.453792][T15674] lo speed is unknown, defaulting to 1000 [ 342.465244][T15674] lo speed is unknown, defaulting to 1000 [ 342.475271][T15674] lo speed is unknown, defaulting to 1000 [ 342.490255][T15674] lo speed is unknown, defaulting to 1000 [ 342.512680][T15674] lo speed is unknown, defaulting to 1000 [ 342.525618][T15674] lo speed is unknown, defaulting to 1000 [ 342.558254][T15674] lo speed is unknown, defaulting to 1000 [ 342.571769][T15674] lo speed is unknown, defaulting to 1000 [ 342.679807][T15705] rdma_op ffff888109704d80 conn xmit_rdma 0000000000000000 [ 342.790044][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11490'. [ 342.799089][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11490'. [ 342.886542][T15715] lo speed is unknown, defaulting to 1000 [ 343.013205][T15715] dvmrp1: entered allmulticast mode [ 343.029339][T15715] dvmrp1: left allmulticast mode [ 343.113920][T15792] 9pnet_fd: p9_fd_create_tcp (15792): problem connecting socket to 127.0.0.1 [ 343.292725][T15809] netlink: 'syz.4.11512': attribute type 3 has an invalid length. [ 343.379890][T15822] pim6reg: entered allmulticast mode [ 343.396893][T15822] pim6reg: left allmulticast mode [ 343.421783][T15782] ================================================================== [ 343.429891][T15782] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 343.438479][T15782] [ 343.440795][T15782] write to 0xffff88812e2dafa8 of 8 bytes by task 15789 on cpu 1: [ 343.448507][T15782] shmem_file_splice_read+0x470/0x600 [ 343.453977][T15782] splice_direct_to_actor+0x26f/0x680 [ 343.459353][T15782] do_splice_direct+0xda/0x150 [ 343.464124][T15782] do_sendfile+0x380/0x650 [ 343.468540][T15782] __x64_sys_sendfile64+0x105/0x150 [ 343.473745][T15782] x64_sys_call+0xb39/0x2fb0 [ 343.478334][T15782] do_syscall_64+0xd2/0x200 [ 343.482832][T15782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.488731][T15782] [ 343.491135][T15782] write to 0xffff88812e2dafa8 of 8 bytes by task 15782 on cpu 0: [ 343.498852][T15782] shmem_file_splice_read+0x470/0x600 [ 343.504229][T15782] splice_direct_to_actor+0x26f/0x680 [ 343.509607][T15782] do_splice_direct+0xda/0x150 [ 343.514400][T15782] do_sendfile+0x380/0x650 [ 343.518829][T15782] __x64_sys_sendfile64+0x105/0x150 [ 343.524036][T15782] x64_sys_call+0xb39/0x2fb0 [ 343.528634][T15782] do_syscall_64+0xd2/0x200 [ 343.533130][T15782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.539025][T15782] [ 343.541343][T15782] value changed: 0x0000000000004a0c -> 0x0000000000004a10 [ 343.548537][T15782] [ 343.551124][T15782] Reported by Kernel Concurrency Sanitizer on: [ 343.557285][T15782] CPU: 0 UID: 0 PID: 15782 Comm: syz.6.11502 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 343.571639][T15782] Tainted: [W]=WARN [ 343.575525][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.585681][T15782] ==================================================================