last executing test programs: 4.735859838s ago: executing program 2 (id=104): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 4.61438551s ago: executing program 2 (id=108): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$pppoe(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write(r1, 0x0, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b9c8df7bfd54c8c0cefe2ed8f367f18a6c889f9a58a6d8c3e4eec5abbc6bfc2ba92479b26dc8955"], 0x6) 4.57159746s ago: executing program 3 (id=110): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10000, 0x0) 4.5643023s ago: executing program 2 (id=111): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x8, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000840)={{r0}, "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"}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365) 4.316156814s ago: executing program 2 (id=114): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) close(r0) write$tun(0xffffffffffffffff, 0x0, 0x40) 4.262178215s ago: executing program 3 (id=115): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 4.136102647s ago: executing program 3 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000180)={0x3, 0x400, 0x84b}) 3.90911895s ago: executing program 2 (id=118): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.812113952s ago: executing program 2 (id=120): bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_getoverrun(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x6c, 0x2, 0x4, 0x0, @empty, @remote, 0x7, 0x10, 0x1, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000300)=@chain) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 2.941137225s ago: executing program 4 (id=126): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40047211, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000440)={0x8, "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"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.388450824s ago: executing program 1 (id=129): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000480)=""/263, 0x107, 0x0, 0x0, 0x0) 2.318538935s ago: executing program 1 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000540)={0x80, 0x2a, 0x800, 0x0, 0x4}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x32079586}], 0x1, 0x40002003, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa20000000000009fa201f61f6ab7a0c97ff107022000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.261815466s ago: executing program 1 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) 2.117942578s ago: executing program 1 (id=134): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) munmap(&(0x7f0000308000/0x4000)=nil, 0x4000) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) munmap(&(0x7f0000866000/0x3000)=nil, 0x3000) mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) madvise(&(0x7f0000678000/0x14000)=nil, 0x14000, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000) 1.593881556s ago: executing program 4 (id=135): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073118b00000000008510000002000000850000004900000095000000000000009500a50500000002"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.505350707s ago: executing program 4 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x400, 0x20, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f0000000340)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 1.456642858s ago: executing program 4 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) sendmsg$key(r3, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c000000000034b437540000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) 1.418826188s ago: executing program 1 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 670.486129ms ago: executing program 1 (id=144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfff7f038}, {0x6}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 541.228491ms ago: executing program 4 (id=146): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000015, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a0000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 461.881763ms ago: executing program 3 (id=147): recvfrom$packet(0xffffffffffffffff, &(0x7f0000000740)=""/240, 0xf0, 0x3, &(0x7f0000000900)={0x11, 0xa, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) close(0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x88) fcntl$notify(r1, 0x402, 0x8000001f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 438.312553ms ago: executing program 3 (id=148): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) 329.780445ms ago: executing program 3 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc00", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 267.493006ms ago: executing program 0 (id=151): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x195600, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000a00), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) waitid(0x1, r1, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(r2, &(0x7f0000000080)=""/32, 0x20) setitimer(0x2, 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 222.166997ms ago: executing program 0 (id=152): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 194.651307ms ago: executing program 4 (id=153): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, 0x0, 0x248002, 0x90) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x814) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) link(&(0x7f0000000280)='./file1\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) 174.964578ms ago: executing program 0 (id=154): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @random="5788a3a2cad7"}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 133.025578ms ago: executing program 0 (id=155): brk(0x689c80000004) mlockall(0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7130000000000008500000016008c0ec44fae6713000095a07ec36a9094ced1b327967f7a53a8e00a5658f523d90f61f17a939675891c49f16487e7965ff6dfe584c70b13b0c4e53916a96c321da9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0xb7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB="4b9d269ae9a5588e23147deddf95d91aa804467846e654f3f7dfff50fb0e94e2fd39c5acd8573e9c3b08966fe69a72fc10e4a0cb762e9df1ec3a26752d5991a8e1fce462e93645b7d028111bb7e9cda8cea9dc3af2c1cc0dc2e484a0636fb197f772fbf2d45164d9235dadfce212eb34ce", @ANYBLOB="ffffffff00000000000000000000000800000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000700)={[{@debug}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x402}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@minixdf}, {@errors_remount}]}, 0x3, 0x468, &(0x7f0000000a80)="$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") 29.66086ms ago: executing program 0 (id=156): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x84080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 0 (id=157): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 34.420021][ T29] audit: type=1400 audit(1750718511.468:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.421204][ T3296] cgroup: Unknown subsys name 'net' [ 34.442776][ T29] audit: type=1400 audit(1750718511.468:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.470185][ T29] audit: type=1400 audit(1750718511.498:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.623203][ T3296] cgroup: Unknown subsys name 'cpuset' [ 34.629421][ T3296] cgroup: Unknown subsys name 'rlimit' [ 34.820796][ T29] audit: type=1400 audit(1750718511.868:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.845840][ T29] audit: type=1400 audit(1750718511.868:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.866438][ T29] audit: type=1400 audit(1750718511.868:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.886867][ T29] audit: type=1400 audit(1750718511.868:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.907159][ T29] audit: type=1400 audit(1750718511.868:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.932167][ T29] audit: type=1400 audit(1750718511.868:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.939510][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.964306][ T29] audit: type=1400 audit(1750718512.018:71): avc: denied { relabelto } for pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.007226][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.212312][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.261973][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.298770][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 36.315467][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.322639][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.329934][ T3307] bridge_slave_0: entered allmulticast mode [ 36.336607][ T3307] bridge_slave_0: entered promiscuous mode [ 36.348143][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.367326][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.374569][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.381774][ T3307] bridge_slave_1: entered allmulticast mode [ 36.388411][ T3307] bridge_slave_1: entered promiscuous mode [ 36.426245][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.447775][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.485186][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.492282][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.499517][ T3306] bridge_slave_0: entered allmulticast mode [ 36.506126][ T3306] bridge_slave_0: entered promiscuous mode [ 36.513336][ T3307] team0: Port device team_slave_0 added [ 36.519016][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.526107][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.533422][ T3306] bridge_slave_1: entered allmulticast mode [ 36.539817][ T3306] bridge_slave_1: entered promiscuous mode [ 36.561915][ T3307] team0: Port device team_slave_1 added [ 36.587552][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.594652][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.601788][ T3310] bridge_slave_0: entered allmulticast mode [ 36.608289][ T3310] bridge_slave_0: entered promiscuous mode [ 36.614806][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.623698][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.630829][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.638140][ T3314] bridge_slave_0: entered allmulticast mode [ 36.644589][ T3314] bridge_slave_0: entered promiscuous mode [ 36.657371][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.666555][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.673707][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.680901][ T3310] bridge_slave_1: entered allmulticast mode [ 36.687469][ T3310] bridge_slave_1: entered promiscuous mode [ 36.696895][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.704065][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.711216][ T3314] bridge_slave_1: entered allmulticast mode [ 36.717891][ T3314] bridge_slave_1: entered promiscuous mode [ 36.724613][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.731584][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.757584][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.769518][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.778932][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.785911][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.811884][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.857793][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.868214][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.884160][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.894086][ T3306] team0: Port device team_slave_0 added [ 36.913596][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.923473][ T3306] team0: Port device team_slave_1 added [ 36.940576][ T3310] team0: Port device team_slave_0 added [ 36.947280][ T3310] team0: Port device team_slave_1 added [ 36.980843][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.987875][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.013838][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.025290][ T3314] team0: Port device team_slave_0 added [ 37.031319][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.038346][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.064444][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.081641][ T3307] hsr_slave_0: entered promiscuous mode [ 37.087834][ T3307] hsr_slave_1: entered promiscuous mode [ 37.099988][ T3314] team0: Port device team_slave_1 added [ 37.113396][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.120643][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.128087][ T3316] bridge_slave_0: entered allmulticast mode [ 37.134571][ T3316] bridge_slave_0: entered promiscuous mode [ 37.141200][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.148349][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.155553][ T3316] bridge_slave_1: entered allmulticast mode [ 37.161989][ T3316] bridge_slave_1: entered promiscuous mode [ 37.168695][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.175705][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.201666][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.245700][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.252807][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.278854][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.292519][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.299626][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.325617][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.343162][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.356156][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.370688][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.377802][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.403786][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.431278][ T3316] team0: Port device team_slave_0 added [ 37.444052][ T3306] hsr_slave_0: entered promiscuous mode [ 37.450011][ T3306] hsr_slave_1: entered promiscuous mode [ 37.456056][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.463689][ T3306] Cannot create hsr debugfs directory [ 37.484162][ T3316] team0: Port device team_slave_1 added [ 37.520159][ T3310] hsr_slave_0: entered promiscuous mode [ 37.526315][ T3310] hsr_slave_1: entered promiscuous mode [ 37.532082][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.539747][ T3310] Cannot create hsr debugfs directory [ 37.555098][ T3314] hsr_slave_0: entered promiscuous mode [ 37.561231][ T3314] hsr_slave_1: entered promiscuous mode [ 37.567309][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.574890][ T3314] Cannot create hsr debugfs directory [ 37.585423][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.592443][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.618480][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.650605][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.657665][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.683684][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.749378][ T3316] hsr_slave_0: entered promiscuous mode [ 37.755839][ T3316] hsr_slave_1: entered promiscuous mode [ 37.761711][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.769377][ T3316] Cannot create hsr debugfs directory [ 37.864765][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.873796][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.891539][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.909821][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.940329][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.949900][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.959187][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.972644][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.999789][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.008724][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.018253][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.028343][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.063314][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.077467][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.087201][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.094349][ T3316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.103207][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.112096][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.134846][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.163969][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.173335][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.182376][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.191866][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.203991][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.217582][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.232249][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.239371][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.250877][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.258001][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.300770][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.336241][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.346311][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.361005][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.368209][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.388921][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.408956][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.416089][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.428161][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.438648][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.445760][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.456243][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.471235][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.478377][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.501621][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.513978][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.526491][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.533616][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.542896][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.571244][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.578393][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.587574][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.594704][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.604598][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.611683][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.668197][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.701439][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.712018][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.745635][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.772293][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.820592][ T3307] veth0_vlan: entered promiscuous mode [ 38.836958][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.858133][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.875976][ T3307] veth1_vlan: entered promiscuous mode [ 38.921520][ T3307] veth0_macvtap: entered promiscuous mode [ 38.937164][ T3307] veth1_macvtap: entered promiscuous mode [ 38.966926][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.995179][ T3316] veth0_vlan: entered promiscuous mode [ 39.005960][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.018914][ T3306] veth0_vlan: entered promiscuous mode [ 39.028738][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.037602][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046818][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.055644][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.075502][ T3316] veth1_vlan: entered promiscuous mode [ 39.093366][ T3306] veth1_vlan: entered promiscuous mode [ 39.109447][ T3316] veth0_macvtap: entered promiscuous mode [ 39.125568][ T3314] veth0_vlan: entered promiscuous mode [ 39.132296][ T3306] veth0_macvtap: entered promiscuous mode [ 39.149106][ T3306] veth1_macvtap: entered promiscuous mode [ 39.159079][ T3314] veth1_vlan: entered promiscuous mode [ 39.173196][ T3316] veth1_macvtap: entered promiscuous mode [ 39.187143][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.208962][ T3314] veth0_macvtap: entered promiscuous mode [ 39.221133][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.231306][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.239685][ T3314] veth1_macvtap: entered promiscuous mode [ 39.249291][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.259289][ T3310] veth0_vlan: entered promiscuous mode [ 39.272226][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.280480][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.289338][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.298127][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.307003][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.325394][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.334591][ T3310] veth1_vlan: entered promiscuous mode [ 39.347493][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.356346][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.365227][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.374001][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.393530][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.412582][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.421421][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.430242][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.436316][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 39.436343][ T29] audit: type=1400 audit(1750718516.488:99): avc: denied { open } for pid=3477 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.439018][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.445206][ T29] audit: type=1400 audit(1750718516.488:100): avc: denied { kernel } for pid=3477 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.491803][ T29] audit: type=1400 audit(1750718516.518:101): avc: denied { map_read map_write } for pid=3477 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.511481][ T29] audit: type=1400 audit(1750718516.538:102): avc: denied { mounton } for pid=3477 comm="syz.1.6" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.559631][ T3310] veth0_macvtap: entered promiscuous mode [ 39.569474][ T3310] veth1_macvtap: entered promiscuous mode [ 39.598157][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.635991][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.651810][ T29] audit: type=1400 audit(1750718516.698:103): avc: denied { allowed } for pid=3486 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.686281][ T3485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.697137][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.706013][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.714904][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.721286][ T29] audit: type=1400 audit(1750718516.708:104): avc: denied { create } for pid=3486 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 39.723676][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.743097][ T29] audit: type=1400 audit(1750718516.718:105): avc: denied { sys_admin } for pid=3486 comm="syz.1.7" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 39.783696][ T29] audit: type=1400 audit(1750718516.808:106): avc: denied { create } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.803142][ T29] audit: type=1400 audit(1750718516.808:107): avc: denied { setopt } for pid=3484 comm="syz.3.4" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.823115][ T29] audit: type=1400 audit(1750718516.808:108): avc: denied { ioctl } for pid=3484 comm="syz.3.4" path="socket:[4631]" dev="sockfs" ino=4631 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.907660][ T3493] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 39.915592][ T3493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'. [ 39.940777][ T3493] dummy0: entered promiscuous mode [ 39.971438][ T3493] bridge0: port 3(dummy0) entered blocking state [ 39.977959][ T3493] bridge0: port 3(dummy0) entered disabled state [ 39.986135][ T3493] dummy0: entered allmulticast mode [ 39.992155][ T3493] bridge0: port 3(dummy0) entered blocking state [ 39.998607][ T3493] bridge0: port 3(dummy0) entered forwarding state [ 40.009332][ T3496] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 40.026650][ T3496] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 40.084983][ T3496] syz.1.9 (3496) used greatest stack depth: 10672 bytes left [ 40.184316][ T3510] loop1: detected capacity change from 0 to 128 [ 40.228771][ T3510] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.298839][ T3510] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.358975][ T3518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 40.403945][ T3518] team0: Device ipvlan2 is already an upper device of the team interface [ 40.525921][ T3522] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.555900][ T3522] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 40.716583][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.942463][ T3518] syz.4.15 (3518) used greatest stack depth: 10624 bytes left [ 41.161134][ T3533] loop0: detected capacity change from 0 to 512 [ 41.279860][ T3538] IPv6: Can't replace route, no match found [ 41.367766][ T3540] loop2: detected capacity change from 0 to 512 [ 41.380828][ T3536] netlink: 'syz.1.21': attribute type 13 has an invalid length. [ 41.420860][ T3540] ======================================================= [ 41.420860][ T3540] WARNING: The mand mount option has been deprecated and [ 41.420860][ T3540] and is ignored by this kernel. Remove the mand [ 41.420860][ T3540] option from the mount to silence this warning. [ 41.420860][ T3540] ======================================================= [ 41.609602][ T3540] EXT4-fs: Ignoring removed bh option [ 41.615108][ T3540] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.650046][ T3545] loop1: detected capacity change from 0 to 512 [ 41.720905][ T3540] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 41.746347][ T3540] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.761607][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.763515][ T3540] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.781279][ T3533] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.792314][ T3540] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.22: Failed to acquire dquot type 1 [ 41.811817][ T3540] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.22: Invalid block bitmap block 0 in block_group 0 [ 41.812139][ T3533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.845346][ T3545] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 41.909119][ T3540] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.22: Invalid block bitmap block 0 in block_group 0 [ 41.945217][ T3553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.958611][ T3540] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.22: Invalid block bitmap block 0 in block_group 0 [ 42.008666][ T3540] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.22: Failed to acquire dquot type 1 [ 42.034577][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 42.044007][ T3540] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.22: Failed to acquire dquot type 1 [ 42.079890][ T3540] EXT4-fs (loop2): 1 orphan inode deleted [ 42.108909][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.160622][ T3540] syz.2.22 (3540) used greatest stack depth: 8952 bytes left [ 42.180439][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.236090][ T3573] loop4: detected capacity change from 0 to 1024 [ 42.253369][ T3573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.268988][ T3575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.31'. [ 42.277974][ T3575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 42.286892][ T3575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.31'. [ 42.292457][ T3568] mmap: syz.1.28 (3568) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.303637][ T3575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.31'. [ 42.341501][ T3573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.394324][ T3579] loop2: detected capacity change from 0 to 512 [ 42.409636][ T3579] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.439127][ T3579] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.458095][ T3553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.491876][ T3579] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 42.509589][ T3579] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.33: bg 0: block 248: padding at end of block bitmap is not set [ 42.531329][ T3553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.544760][ T3579] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 42.573333][ T3579] EXT4-fs (loop2): 1 orphan inode deleted [ 42.585166][ T3579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.598780][ T3553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.599460][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.705340][ T3553] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.727325][ T3553] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.803368][ T3553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.813141][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.827324][ T3553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.052818][ T3601] netlink: 96 bytes leftover after parsing attributes in process `syz.4.39'. [ 43.143618][ T3612] netlink: zone id is out of range [ 43.148783][ T3612] netlink: zone id is out of range [ 43.154002][ T3612] netlink: zone id is out of range [ 43.159188][ T3612] netlink: zone id is out of range [ 43.164404][ T3612] netlink: zone id is out of range [ 43.169927][ T3612] netlink: zone id is out of range [ 43.175266][ T3612] netlink: zone id is out of range [ 43.180438][ T3612] netlink: zone id is out of range [ 43.185600][ T3612] netlink: zone id is out of range [ 43.190747][ T3612] netlink: zone id is out of range [ 43.229008][ T3616] loop2: detected capacity change from 0 to 1024 [ 43.315229][ T3622] infiniband syz1: set active [ 43.320087][ T3622] infiniband syz1: added veth0_to_team [ 43.330612][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.347631][ T3622] RDS/IB: syz1: added [ 43.351743][ T3622] smc: adding ib device syz1 with port count 1 [ 43.359339][ T3622] smc: ib device syz1 port 1 has pnetid [ 43.392640][ T3621] Zero length message leads to an empty skb [ 43.429283][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.530438][ T3630] tipc: Started in network mode [ 43.535468][ T3630] tipc: Node identity ac14140f, cluster identity 4711 [ 43.563902][ T3630] tipc: New replicast peer: 255.255.255.255 [ 43.570058][ T3630] tipc: Enabled bearer , priority 10 [ 43.635747][ T3633] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 44.455167][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 44.455210][ T29] audit: type=1400 audit(1750718521.508:259): avc: denied { create } for pid=3660 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.544964][ T29] audit: type=1400 audit(1750718521.538:260): avc: denied { connect } for pid=3660 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.565443][ T29] audit: type=1400 audit(1750718521.538:261): avc: denied { write } for pid=3660 comm="syz.4.57" path="socket:[5130]" dev="sockfs" ino=5130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.588947][ T29] audit: type=1400 audit(1750718521.568:262): avc: denied { cpu } for pid=3669 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.610618][ T3638] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 44.748349][ T3408] tipc: Node number set to 2886997007 [ 44.830190][ T29] audit: type=1400 audit(1750718521.798:263): avc: denied { read write } for pid=3675 comm="syz.2.59" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.854403][ T29] audit: type=1400 audit(1750718521.798:264): avc: denied { open } for pid=3675 comm="syz.2.59" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.879812][ T29] audit: type=1400 audit(1750718521.818:265): avc: denied { setopt } for pid=3682 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.899111][ T29] audit: type=1400 audit(1750718521.868:266): avc: denied { create } for pid=3686 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.918465][ T29] audit: type=1400 audit(1750718521.868:267): avc: denied { setopt } for pid=3686 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.033272][ T3693] vlan2: entered allmulticast mode [ 45.058351][ T29] audit: type=1400 audit(1750718522.038:268): avc: denied { bind } for pid=3686 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.144351][ T3695] loop0: detected capacity change from 0 to 1024 [ 45.173829][ T3695] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 45.183850][ T3695] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.195108][ T3695] jbd2_journal_init_inode: Cannot locate journal superblock [ 45.202573][ T3695] EXT4-fs (loop0): Could not load journal inode [ 45.284132][ T3701] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.303384][ T3701] loop0: detected capacity change from 0 to 1024 [ 45.334977][ T3701] ext4: Unknown parameter 'uid<00000000000000000000' [ 45.349862][ T3706] netlink: 196 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.401941][ T3708] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.409265][ T3708] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.448950][ T3712] netlink: 'syz.0.72': attribute type 4 has an invalid length. [ 45.450153][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.466412][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.497530][ T3708] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.500045][ T3714] netlink: 'syz.0.72': attribute type 4 has an invalid length. [ 45.506709][ T3708] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.523540][ T3708] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.532569][ T3708] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.558238][ T3716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'. [ 45.567191][ T3716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'. [ 45.576110][ T3716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'. [ 45.626300][ T3716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'. [ 45.665267][ C0] hrtimer: interrupt took 27668 ns [ 45.674726][ T3725] tmpfs: Bad value for 'mpol' [ 45.704740][ T3728] loop0: detected capacity change from 0 to 512 [ 45.711746][ T3728] ext4: Unknown parameter 'permit_directio' [ 45.857546][ T3738] loop3: detected capacity change from 0 to 2048 [ 45.904756][ T3738] Alternate GPT is invalid, using primary GPT. [ 45.911150][ T3738] loop3: p1 p2 p3 [ 45.926407][ T3742] geneve0: entered allmulticast mode [ 45.945748][ T2996] Alternate GPT is invalid, using primary GPT. [ 45.952202][ T2996] loop3: p1 p2 p3 [ 46.009759][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.021185][ T3691] udevd[3691]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 46.023785][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.083961][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.085192][ T3691] udevd[3691]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 46.100853][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.144927][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 46.221066][ T3755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.229718][ T3755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.348783][ T3760] loop1: detected capacity change from 0 to 2048 [ 46.370215][ T3760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 46.653590][ T3767] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 46.665003][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 46.677640][ T3767] ipvlan2: entered promiscuous mode [ 46.773658][ T3771] bridge0: port 3(dummy0) entered disabled state [ 46.805579][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.814043][ T3776] netlink: 'syz.0.93': attribute type 16 has an invalid length. [ 46.816818][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.821756][ T3776] netlink: 'syz.0.93': attribute type 17 has an invalid length. [ 46.929234][ T3776] bridge0: port 3(dummy0) entered blocking state [ 46.935722][ T3776] bridge0: port 3(dummy0) entered forwarding state [ 46.960638][ T3780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 46.977686][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.984913][ T3776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.998454][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.005681][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.064211][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.071711][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.091088][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.098818][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.212670][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 47.340031][ T3800] 9pnet_fd: Insufficient options for proto=fd [ 47.436117][ T3811] loop2: detected capacity change from 0 to 1024 [ 47.519434][ T3811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.556228][ T3811] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.574439][ T3811] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.111: lblock 1 mapped to illegal pblock 1 (length 15) [ 47.589893][ T3811] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 47.602728][ T3811] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.602728][ T3811] [ 47.664785][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.721652][ T3826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.742160][ T3828] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 47.757291][ T3828] xfrm0: Master is either lo or non-ether device [ 47.783882][ T3826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.876205][ T3826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.915615][ T3826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.974810][ T3826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.981747][ T3826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.987492][ T3826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.993486][ T3826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.029513][ T3836] loop0: detected capacity change from 0 to 512 [ 48.029917][ T3836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.058972][ T3836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.059105][ T3836] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.210478][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 48.354469][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.568684][ T3851] loop0: detected capacity change from 0 to 128 [ 48.587276][ T3843] loop1: detected capacity change from 0 to 32768 [ 48.646846][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.666895][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.748302][ T3843] loop1: p1 p2 p3 < p5 p6 > [ 48.753225][ T3843] loop1: p1 size 242222080 extends beyond EOD, truncated [ 48.763396][ T3843] loop1: p2 start 4294967295 is beyond EOD, truncated [ 48.930993][ T3692] udevd[3692]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 48.932257][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 48.955666][ T3691] udevd[3691]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 48.968317][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.061110][ T3860] loop4: detected capacity change from 0 to 256 [ 49.072719][ T3860] netlink: 340 bytes leftover after parsing attributes in process `syz.4.126'. [ 49.138861][ T3861] bridge_slave_0: left promiscuous mode [ 49.144679][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.166172][ T3861] bridge_slave_1: left allmulticast mode [ 49.171927][ T3861] bridge_slave_1: left promiscuous mode [ 49.177808][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.214342][ T3861] bond0: (slave bond_slave_0): Releasing backup interface [ 49.321493][ T3861] bond0: (slave bond_slave_1): Releasing backup interface [ 49.341670][ T3861] team0: Port device team_slave_0 removed [ 49.350544][ T3861] team0: Port device team_slave_1 removed [ 49.357830][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.365301][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.380626][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.388268][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.612036][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 49.612051][ T29] audit: type=1400 audit(1750718526.658:1023): avc: denied { write } for pid=3870 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.681797][ T29] audit: type=1400 audit(1750718526.728:1024): avc: denied { mount } for pid=3873 comm="syz.1.131" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.742990][ T29] audit: type=1400 audit(1750718526.758:1025): avc: denied { unmount } for pid=3873 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.764087][ T29] audit: type=1400 audit(1750718526.818:1026): avc: denied { execmem } for pid=3878 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.388392][ T29] audit: type=1400 audit(1750718527.438:1027): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.492462][ T29] audit: type=1400 audit(1750718527.538:1028): avc: denied { map } for pid=3887 comm="syz.4.136" path="socket:[6055]" dev="sockfs" ino=6055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 50.576007][ T3892] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 50.682209][ T3892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.848543][ T3892] veth3: entered promiscuous mode [ 50.856790][ T3892] bond1: (slave veth3): Enslaving as an active interface with a down link [ 51.025226][ T3898] vlan2: entered allmulticast mode [ 51.030456][ T3898] bond1: entered allmulticast mode [ 51.076096][ T3904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.142'. [ 51.124246][ T3898] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 51.144875][ T3905] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 51.200838][ T29] audit: type=1326 audit(1750718528.248:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb389e929 code=0x7ffc0000 [ 51.233768][ T29] audit: type=1326 audit(1750718528.278:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb389e929 code=0x7ffc0000 [ 51.257407][ T29] audit: type=1326 audit(1750718528.278:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb389e929 code=0x7ffc0000 [ 51.281077][ T29] audit: type=1326 audit(1750718528.278:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3906 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb389e929 code=0x7ffc0000 [ 51.735933][ T3929] syz.0.151 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.799269][ T3935] loop4: detected capacity change from 0 to 128 [ 51.822267][ T3937] veth0_vlan: entered allmulticast mode [ 51.829871][ T3936] veth0_vlan: left allmulticast mode [ 51.957811][ T3943] capability: warning: `syz.0.156' uses deprecated v2 capabilities in a way that may be insecure [ 52.075920][ T3940] ================================================================== [ 52.084100][ T3940] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 52.092250][ T3940] [ 52.094608][ T3940] write to 0xffff88811a286768 of 8 bytes by task 3935 on cpu 1: [ 52.102266][ T3940] filemap_splice_read+0x47e/0x6b0 [ 52.107420][ T3940] splice_direct_to_actor+0x26f/0x680 [ 52.112848][ T3940] do_splice_direct+0xda/0x150 [ 52.117661][ T3940] do_sendfile+0x380/0x650 [ 52.122106][ T3940] __x64_sys_sendfile64+0x105/0x150 [ 52.127336][ T3940] x64_sys_call+0xb39/0x2fb0 [ 52.131967][ T3940] do_syscall_64+0xd2/0x200 [ 52.136502][ T3940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.142527][ T3940] [ 52.144909][ T3940] write to 0xffff88811a286768 of 8 bytes by task 3940 on cpu 0: [ 52.152586][ T3940] filemap_splice_read+0x47e/0x6b0 [ 52.157752][ T3940] splice_direct_to_actor+0x26f/0x680 [ 52.163178][ T3940] do_splice_direct+0xda/0x150 [ 52.167992][ T3940] do_sendfile+0x380/0x650 [ 52.172451][ T3940] __x64_sys_sendfile64+0x105/0x150 [ 52.177689][ T3940] x64_sys_call+0xb39/0x2fb0 [ 52.182331][ T3940] do_syscall_64+0xd2/0x200 [ 52.186872][ T3940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.192807][ T3940] [ 52.195157][ T3940] value changed: 0x00000000000003be -> 0x00000000000003bf [ 52.202298][ T3940] [ 52.204654][ T3940] Reported by Kernel Concurrency Sanitizer on: [ 52.210852][ T3940] CPU: 0 UID: 0 PID: 3940 Comm: syz.4.153 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 52.221491][ T3940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.231578][ T3940] ================================================================== [ 52.269209][ T3935] ================================================================== [ 52.277358][ T3935] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 52.285290][ T3935] [ 52.287626][ T3935] write to 0xffff88810b7d4128 of 4 bytes by task 3940 on cpu 0: [ 52.295273][ T3935] __mark_inode_dirty+0x240/0x760 [ 52.300323][ T3935] mark_buffer_dirty+0x133/0x210 [ 52.305289][ T3935] block_write_end+0x12e/0x210 [ 52.310067][ T3935] generic_write_end+0x57/0x150 [ 52.314934][ T3935] fat_write_end+0x4f/0x160 [ 52.319465][ T3935] generic_perform_write+0x30f/0x490 [ 52.324766][ T3935] __generic_file_write_iter+0x9e/0x120 [ 52.330337][ T3935] generic_file_write_iter+0x8d/0x2f0 [ 52.335726][ T3935] iter_file_splice_write+0x5f2/0x970 [ 52.341126][ T3935] direct_splice_actor+0x153/0x2a0 [ 52.346273][ T3935] splice_direct_to_actor+0x30f/0x680 [ 52.351669][ T3935] do_splice_direct+0xda/0x150 [ 52.356466][ T3935] do_sendfile+0x380/0x650 [ 52.360904][ T3935] __x64_sys_sendfile64+0x105/0x150 [ 52.366119][ T3935] x64_sys_call+0xb39/0x2fb0 [ 52.370738][ T3935] do_syscall_64+0xd2/0x200 [ 52.375256][ T3935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.381173][ T3935] [ 52.383510][ T3935] read to 0xffff88810b7d4128 of 4 bytes by task 3935 on cpu 1: [ 52.391067][ T3935] __mark_inode_dirty+0x18e/0x760 [ 52.396108][ T3935] fat_update_time+0x1ec/0x200 [ 52.400902][ T3935] touch_atime+0x148/0x340 [ 52.405337][ T3935] filemap_splice_read+0x629/0x6b0 [ 52.410480][ T3935] splice_direct_to_actor+0x26f/0x680 [ 52.415892][ T3935] do_splice_direct+0xda/0x150 [ 52.420691][ T3935] do_sendfile+0x380/0x650 [ 52.425126][ T3935] __x64_sys_sendfile64+0x105/0x150 [ 52.430346][ T3935] x64_sys_call+0xb39/0x2fb0 [ 52.434997][ T3935] do_syscall_64+0xd2/0x200 [ 52.439516][ T3935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.445429][ T3935] [ 52.447759][ T3935] value changed: 0x00000008 -> 0x00000038 [ 52.453488][ T3935] [ 52.455818][ T3935] Reported by Kernel Concurrency Sanitizer on: [ 52.461986][ T3935] CPU: 1 UID: 0 PID: 3935 Comm: syz.4.153 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 52.472594][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.482661][ T3935] ==================================================================