last executing test programs: 46.149768229s ago: executing program 4 (id=40): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="a4"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) 45.994315617s ago: executing program 4 (id=41): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 44.890534631s ago: executing program 4 (id=54): r0 = socket(0x2b, 0x1, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2475f6a37e2d0c88, 0x10004, 0x6, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01032800fedbdf251c0021"], 0x14}}, 0x10) connect$inet6(r0, 0x0, 0x0) 44.671545042s ago: executing program 4 (id=55): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") close_range(0xffffffffffffffff, r0, 0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@nodioread_nolock}, {@errors_continue}, {@noinit_itable}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}], [{@uid_gt={'uid>', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x66, 0x64, 0x65, 0x32, 0x35, 0x66], 0x2d, [0x65, 0x64, 0x37, 0x35], 0x2d, [0x36, 0x30, 0x66, 0x37], 0x2d, [0x63, 0x65, 0x62, 0x3b], 0x2d, [0x62, 0x32, 0x33, 0x62, 0x35, 0x31, 0x36, 0x35]}}}, {@permit_directio}]}, 0x1, 0x46e, &(0x7f0000000bc0)="$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") 44.291527071s ago: executing program 4 (id=60): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xfffffefffffffffe]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0xf) wait4(r2, 0x0, 0x2, 0x0) tkill(r2, 0x3) 43.122737128s ago: executing program 4 (id=66): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001740)={r2, 0x5, 0x10, 0x8b, 0x401}, &(0x7f0000001780)=0x18) 43.122477338s ago: executing program 32 (id=66): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001740)={r2, 0x5, 0x10, 0x8b, 0x401}, &(0x7f0000001780)=0x18) 4.562973555s ago: executing program 0 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3.717815327s ago: executing program 1 (id=542): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 3.616619502s ago: executing program 0 (id=544): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000271) getdents64(r2, 0x0, 0x4f) getdents64(r2, 0x0, 0x0) 3.384317123s ago: executing program 0 (id=545): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000240)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 2.983908973s ago: executing program 0 (id=550): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 2.889353178s ago: executing program 1 (id=552): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x5, 0x100}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r2, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) sendfile(r1, r1, 0x0, 0x7a680000) 2.747741194s ago: executing program 1 (id=554): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x992d, 0x400, 0xffffffff, 0x3b9}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835e", 0x1a) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 2.404112292s ago: executing program 5 (id=559): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000012c0)=@assoc_value={r3, 0xfffffff7}, &(0x7f0000001300)=0x8) 2.403630631s ago: executing program 5 (id=560): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00'}) io_uring_enter(r0, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) 2.355101104s ago: executing program 1 (id=561): socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x69b, &(0x7f0000000380)={0x0, 0xce0c, 0x10000, 0x5, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2.159783763s ago: executing program 1 (id=573): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 1.962415163s ago: executing program 0 (id=565): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffbfffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000010c0)='net/unix\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") pipe(&(0x7f0000000040)) pipe(&(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0) 1.938237554s ago: executing program 3 (id=566): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 858.188458ms ago: executing program 5 (id=570): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000340)=0x10, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 765.997542ms ago: executing program 2 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x205, 0x41}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) 751.362183ms ago: executing program 2 (id=575): socket$kcm(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 690.856466ms ago: executing program 2 (id=576): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x4000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 574.383982ms ago: executing program 5 (id=577): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 572.360602ms ago: executing program 5 (id=578): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000002800)=ANY=[], 0x0) 566.988002ms ago: executing program 3 (id=579): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0xa, 0x4, 0x40000000, 0x0, @mcast1, @remote, 0x80, 0x10, 0xfffffffc, 0xdc67}}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) mmap(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x4000) syz_io_uring_setup(0x10d3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 549.972603ms ago: executing program 1 (id=580): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 544.897163ms ago: executing program 2 (id=581): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 458.482777ms ago: executing program 3 (id=582): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 343.318973ms ago: executing program 3 (id=583): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000ad000000000000005a6600000800f6fef0ffffffbd740001f0ffffff9500000000000000bd644a709f43f464ce0e7983cbcbe899741c3bd154a6f65d6460020d3dc9b55dc5fc"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0x3, 0x3, 0x18000000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x5, 0x5, 0x8}, {0x1, 0x5, 0x10, 0xb}], 0x10, 0x81}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x56, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r4, &(0x7f0000000800)="514e4aaf369e67835f285349d4d3cd98ec6ef9989b07c4a0e778854e99ff78d37e1e99fdd546812251f52dea744782b7bc30b96dea291b7ae5feb3a088bd1ebbe13c86cd5f53ffb0b0a5492970361488c0b18a35b7c689dd136a3e00c3ccf836cdfd88a6a9e9bf4465fe174a5751ebb2959c988b221278c1121e0f49601f7b91a30b3c036692d7eaf57e68e2c712afbde14442568ff1b49f840639caefe018862f15652b0520916d1a66535ddd152c00149a92ee3ff53d67605d7b31", &(0x7f00000008c0)=""/136}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) 310.444975ms ago: executing program 3 (id=584): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 146.283473ms ago: executing program 3 (id=585): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c48", 0x78}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b5", 0x143}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a40)="3687d0f633de9ff21268340f7b998b80701d3a40de169475b2fb0c07ef9d1770df0f0f9642bd11f79098438232e652b8e0369f6619f810efb18bb972caeaaa41587343d2fe6c0f460cf50904047a46766a6dba822b0fa4719641333b9297893379907b37ceea76a847738582f6fc7a773e7def0ef9063ad59f47a35daec9b6f231c16eae9657f6c929490d2ad40ba4a8eaa870d3525ece7742c2d38811c5b365f875641a4512c6d9eccdade6143906c473f5a55c2192081c93de203a9babf548d195a888d4548863fb27bcec", 0xcc}, {&(0x7f0000001040)="4b703e4545e3eb1f930faeaf3ebb03bf24b1d28acd725b906ffed997b9421b678232f04fba426cf500cb956dd6c6d97b2cba299979d375aaab0b75aa2fb5c51275f56a51dd7d859ed2328d5f05ada8a2defd9de79f5036b609ac5c8174da8603ec0f8184a93a31fdba5a42600f323f697f2cb1516988553128343512edbb637d22f3bc07050368cad1ded4a7bd94802a7bcb48a1a289ffd232", 0x99}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000fc0)="cc816a9a9250e68f7ac20796b232954ff5a51ae0ffc618257a35d82ed7a22051202cfa5c64c4b3a79375eddc4748ac5451d18a2157afed8b23f1bdf951bddb2b210ef3dc279194746fdfe2d2bc4d04f4f4e7", 0x52, 0x20000044, 0x0, 0x0) 97.661375ms ago: executing program 5 (id=586): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') 59.754217ms ago: executing program 2 (id=587): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x5c, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x740c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x80000001, 0x5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 34.804138ms ago: executing program 2 (id=588): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 0s ago: executing program 0 (id=589): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 33.925947][ T28] audit: type=1400 audit(1774357770.143:67): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.949358][ T28] audit: type=1400 audit(1774357770.173:68): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.951569][ T3300] cgroup: Unknown subsys name 'net' [ 33.977484][ T28] audit: type=1400 audit(1774357770.193:69): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.120130][ T3300] cgroup: Unknown subsys name 'cpuset' [ 34.126508][ T3300] cgroup: Unknown subsys name 'rlimit' [ 34.237437][ T28] audit: type=1400 audit(1774357770.453:70): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.261195][ T28] audit: type=1400 audit(1774357770.463:71): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.287585][ T28] audit: type=1400 audit(1774357770.463:72): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.308625][ T28] audit: type=1400 audit(1774357770.463:73): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.329299][ T28] audit: type=1400 audit(1774357770.473:74): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.350438][ T28] audit: type=1400 audit(1774357770.483:75): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.374513][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.375428][ T28] audit: type=1400 audit(1774357770.483:76): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.414989][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.160946][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.228048][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.273345][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.288116][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.302558][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.309732][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.316975][ T3313] bridge_slave_0: entered allmulticast mode [ 36.323906][ T3313] bridge_slave_0: entered promiscuous mode [ 36.335059][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.342408][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.349838][ T3313] bridge_slave_1: entered allmulticast mode [ 36.356383][ T3313] bridge_slave_1: entered promiscuous mode [ 36.396907][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.416436][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.438364][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.496779][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.504229][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.511852][ T3320] bridge_slave_0: entered allmulticast mode [ 36.518505][ T3320] bridge_slave_0: entered promiscuous mode [ 36.525109][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.532412][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.539660][ T3318] bridge_slave_0: entered allmulticast mode [ 36.546396][ T3318] bridge_slave_0: entered promiscuous mode [ 36.557739][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.565037][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.572659][ T3318] bridge_slave_1: entered allmulticast mode [ 36.579421][ T3318] bridge_slave_1: entered promiscuous mode [ 36.586791][ T3313] team0: Port device team_slave_0 added [ 36.600679][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.607866][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.615148][ T3320] bridge_slave_1: entered allmulticast mode [ 36.621890][ T3320] bridge_slave_1: entered promiscuous mode [ 36.637858][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.645028][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.652679][ T3314] bridge_slave_0: entered allmulticast mode [ 36.659404][ T3314] bridge_slave_0: entered promiscuous mode [ 36.666827][ T3313] team0: Port device team_slave_1 added [ 36.672598][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.680031][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.687368][ T3314] bridge_slave_1: entered allmulticast mode [ 36.694023][ T3314] bridge_slave_1: entered promiscuous mode [ 36.724491][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.731707][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.738994][ T3316] bridge_slave_0: entered allmulticast mode [ 36.745579][ T3316] bridge_slave_0: entered promiscuous mode [ 36.756948][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.764080][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.771243][ T3316] bridge_slave_1: entered allmulticast mode [ 36.777744][ T3316] bridge_slave_1: entered promiscuous mode [ 36.790279][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.805431][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.816393][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.831454][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.841994][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.851828][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.859091][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.886206][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.916291][ T3318] team0: Port device team_slave_0 added [ 36.923411][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.933075][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.940110][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.966271][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.978506][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.993395][ T3318] team0: Port device team_slave_1 added [ 36.999883][ T3314] team0: Port device team_slave_0 added [ 37.019404][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.029424][ T3314] team0: Port device team_slave_1 added [ 37.051269][ T3320] team0: Port device team_slave_0 added [ 37.057364][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.064525][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.090743][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.106448][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.113759][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.140044][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.157258][ T3316] team0: Port device team_slave_0 added [ 37.163800][ T3320] team0: Port device team_slave_1 added [ 37.181903][ T3316] team0: Port device team_slave_1 added [ 37.196806][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.203988][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.230104][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.242096][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.249232][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.275624][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.296394][ T3313] hsr_slave_0: entered promiscuous mode [ 37.303053][ T3313] hsr_slave_1: entered promiscuous mode [ 37.339973][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.347167][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.373918][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.385071][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.392263][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.418591][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.434537][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.441778][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.467762][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.490687][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.498090][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.524651][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.538362][ T3318] hsr_slave_0: entered promiscuous mode [ 37.544558][ T3318] hsr_slave_1: entered promiscuous mode [ 37.550507][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.556324][ T3318] Cannot create hsr debugfs directory [ 37.580968][ T3314] hsr_slave_0: entered promiscuous mode [ 37.587102][ T3314] hsr_slave_1: entered promiscuous mode [ 37.593056][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.598961][ T3314] Cannot create hsr debugfs directory [ 37.643009][ T3320] hsr_slave_0: entered promiscuous mode [ 37.649010][ T3320] hsr_slave_1: entered promiscuous mode [ 37.655076][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.660950][ T3320] Cannot create hsr debugfs directory [ 37.688733][ T3316] hsr_slave_0: entered promiscuous mode [ 37.694902][ T3316] hsr_slave_1: entered promiscuous mode [ 37.701057][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.706796][ T3316] Cannot create hsr debugfs directory [ 37.873304][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.886881][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.895938][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.904718][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.940255][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.949777][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.962433][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.973619][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.993932][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.004305][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.018845][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.031552][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.061390][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.070192][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.085284][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.102093][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.109779][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.127660][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.148099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.155193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.167056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.174337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.201144][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.210435][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.220221][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.243541][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.274041][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.283284][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.308331][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.335352][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.349038][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.358323][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.379632][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.386840][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.396489][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.403749][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.412708][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.419879][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.434979][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.442212][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.462599][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.469887][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.488729][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.496050][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.540927][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.560105][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.611000][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.623876][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.631178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.651974][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.675124][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.682259][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.707175][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.760330][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.775847][ T3313] veth0_vlan: entered promiscuous mode [ 38.794491][ T3313] veth1_vlan: entered promiscuous mode [ 38.835403][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.850675][ T3313] veth0_macvtap: entered promiscuous mode [ 38.867039][ T3313] veth1_macvtap: entered promiscuous mode [ 38.887757][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.945940][ T3318] veth0_vlan: entered promiscuous mode [ 38.973848][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.990067][ T3314] veth0_vlan: entered promiscuous mode [ 39.005288][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.014643][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.025860][ T3314] veth1_vlan: entered promiscuous mode [ 39.033292][ T3318] veth1_vlan: entered promiscuous mode [ 39.043013][ T3316] veth0_vlan: entered promiscuous mode [ 39.050975][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.060179][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083482][ T3316] veth1_vlan: entered promiscuous mode [ 39.099679][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 39.099693][ T28] audit: type=1400 audit(1774357775.323:87): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.40X8hL/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.145636][ T3314] veth0_macvtap: entered promiscuous mode [ 39.151637][ T28] audit: type=1400 audit(1774357775.323:88): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.162548][ T3318] veth0_macvtap: entered promiscuous mode [ 39.175437][ T28] audit: type=1400 audit(1774357775.323:89): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.40X8hL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.198853][ T3316] veth0_macvtap: entered promiscuous mode [ 39.212452][ T28] audit: type=1400 audit(1774357775.323:90): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.236678][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.253102][ T3314] veth1_macvtap: entered promiscuous mode [ 39.260748][ T28] audit: type=1400 audit(1774357775.323:91): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.40X8hL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.273371][ T3318] veth1_macvtap: entered promiscuous mode [ 39.294503][ T28] audit: type=1400 audit(1774357775.323:92): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.40X8hL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.311392][ T3316] veth1_macvtap: entered promiscuous mode [ 39.327900][ T28] audit: type=1400 audit(1774357775.323:93): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.347941][ T28] audit: type=1400 audit(1774357775.353:94): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.373666][ T28] audit: type=1400 audit(1774357775.353:95): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.383538][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.408963][ T28] audit: type=1400 audit(1774357775.623:96): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.440161][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.451896][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.473541][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.481849][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.499347][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.514912][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.523209][ T3320] veth0_vlan: entered promiscuous mode [ 39.536597][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.549327][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.559314][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575516][ T3320] veth1_vlan: entered promiscuous mode [ 39.585021][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.594469][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.620677][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.629959][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.638986][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.660140][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.669281][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.698495][ T3320] veth0_macvtap: entered promiscuous mode [ 39.705682][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.782241][ T3320] veth1_macvtap: entered promiscuous mode [ 39.803196][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.818400][ T3489] geneve2: entered promiscuous mode [ 39.833427][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 59912 - 0 [ 39.848726][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 59912 - 0 [ 39.859708][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.880505][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 59912 - 0 [ 39.939780][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 59912 - 0 [ 39.970167][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.981944][ C1] hrtimer: interrupt took 76776 ns [ 40.004010][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.023241][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.052712][ T3502] geneve3: entered promiscuous mode [ 40.081331][ T3505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 40.110825][ T3502] syz.2.8 (3502) used greatest stack depth: 10328 bytes left [ 40.129928][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.143140][ T12] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 40.182860][ T12] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 40.224115][ T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 40.272951][ T12] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 40.920065][ T3537] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19'. [ 40.991998][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 41.087006][ T3546] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 41.438290][ T3561] netlink: 'syz.2.28': attribute type 4 has an invalid length. [ 41.489751][ T3566] netlink: 'syz.2.28': attribute type 4 has an invalid length. [ 41.783555][ T3581] netlink: 'syz.0.35': attribute type 11 has an invalid length. [ 41.940802][ T3590] loop2: detected capacity change from 0 to 256 [ 41.952305][ T3590] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.969798][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 41.980935][ T3589] loop0: detected capacity change from 0 to 2048 [ 41.992337][ T3590] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.021502][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.030015][ T3592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'. [ 42.140195][ T3589] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 42.219379][ T3589] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 42.261547][ T3589] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.261547][ T3589] [ 42.314087][ T3589] EXT4-fs (loop0): Total free blocks count 0 [ 42.330717][ T3589] EXT4-fs (loop0): Free/Dirty block details [ 42.344428][ T3589] EXT4-fs (loop0): free_blocks=66060288 [ 42.378356][ T3589] EXT4-fs (loop0): dirty_blocks=48 [ 42.389065][ T3589] EXT4-fs (loop0): Block reservation details [ 42.431766][ T3589] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 42.499385][ T3589] syz.0.38 (3589) used greatest stack depth: 10128 bytes left [ 42.806302][ T3659] lo speed is unknown, defaulting to 1000 [ 42.833547][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 42.846799][ T3659] lo speed is unknown, defaulting to 1000 [ 42.859505][ T3659] lo speed is unknown, defaulting to 1000 [ 43.023059][ T3659] infiniband syz2: set active [ 43.027918][ T3399] lo speed is unknown, defaulting to 1000 [ 43.049102][ T3659] infiniband syz2: added lo [ 43.126650][ T3659] RDS/IB: syz2: added [ 43.139838][ T3659] smc: adding ib device syz2 with port count 1 [ 43.209541][ T3659] smc: ib device syz2 port 1 has no pnetid [ 43.238560][ T3659] lo speed is unknown, defaulting to 1000 [ 43.289870][ T3303] lo speed is unknown, defaulting to 1000 [ 43.384374][ T3659] lo speed is unknown, defaulting to 1000 [ 43.430994][ T3734] loop4: detected capacity change from 0 to 1024 [ 43.500793][ T3734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.578658][ T3659] lo speed is unknown, defaulting to 1000 [ 43.585123][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.681281][ T3734] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.55: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 43.709083][ T3748] process 'syz.2.58' launched '/dev/fd/3' with NULL argv: empty string added [ 43.791325][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.824056][ T3659] lo speed is unknown, defaulting to 1000 [ 43.831861][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.843396][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.863231][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.884181][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.905960][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.912763][ T3659] lo speed is unknown, defaulting to 1000 [ 43.929387][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.953485][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 43.982467][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 44.046669][ T3320] EXT4-fs warning (device loop4): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 44.276084][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 44.276099][ T28] audit: type=1400 audit(1774357780.493:179): avc: denied { read write } for pid=3755 comm="syz.0.61" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.313066][ T3756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.334982][ T3756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.347316][ T28] audit: type=1400 audit(1774357780.533:180): avc: denied { open } for pid=3755 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.432966][ T28] audit: type=1400 audit(1774357780.533:181): avc: denied { ioctl } for pid=3755 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.463571][ T28] audit: type=1400 audit(1774357780.543:182): avc: denied { accept } for pid=3758 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.489194][ T28] audit: type=1400 audit(1774357780.543:183): avc: denied { read } for pid=3758 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.508950][ T28] audit: type=1400 audit(1774357780.603:184): avc: denied { create } for pid=3760 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.703381][ T3713] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.762099][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.843144][ T3713] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.862838][ T28] audit: type=1400 audit(1774357781.053:185): avc: denied { create } for pid=3767 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 44.918799][ T28] audit: type=1400 audit(1774357781.053:186): avc: denied { sys_admin } for pid=3767 comm="syz.3.65" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.002850][ T3775] netlink: 'syz.0.67': attribute type 10 has an invalid length. [ 45.011077][ T3775] netlink: 2 bytes leftover after parsing attributes in process `syz.0.67'. [ 45.027300][ T3713] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.050934][ T3773] pim6reg1: entered promiscuous mode [ 45.056469][ T3773] pim6reg1: entered allmulticast mode [ 45.066546][ T3775] hsr0: entered promiscuous mode [ 45.085726][ T3775] bridge0: port 3(hsr0) entered blocking state [ 45.099799][ T3775] bridge0: port 3(hsr0) entered disabled state [ 45.129586][ T3775] hsr0: entered allmulticast mode [ 45.141931][ T3775] hsr_slave_0: entered allmulticast mode [ 45.155494][ T3775] hsr_slave_1: entered allmulticast mode [ 45.192999][ T3775] bridge0: port 3(hsr0) entered blocking state [ 45.199593][ T3775] bridge0: port 3(hsr0) entered forwarding state [ 45.254560][ T3713] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.326125][ T3787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 45.369853][ T3787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 45.409169][ T28] audit: type=1400 audit(1774357781.623:187): avc: denied { module_request } for pid=3777 comm="syz-executor" kmod="rose5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.445800][ T3802] loop1: detected capacity change from 0 to 512 [ 45.468579][ T28] audit: type=1400 audit(1774357781.683:188): avc: denied { create } for pid=3803 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.534070][ T3777] lo speed is unknown, defaulting to 1000 [ 45.562404][ T3802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.589711][ T3713] bridge_slave_1: left allmulticast mode [ 45.595404][ T3713] bridge_slave_1: left promiscuous mode [ 45.619541][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.640507][ T3713] bridge_slave_0: left allmulticast mode [ 45.646296][ T3713] bridge_slave_0: left promiscuous mode [ 45.682519][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.851577][ T3713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.064686][ T3837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 46.075773][ T3713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.178155][ T3713] bond0 (unregistering): Released all slaves [ 46.270891][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.445535][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 46.478487][ T3713] hsr_slave_0: left promiscuous mode [ 46.499294][ T3713] hsr_slave_1: left promiscuous mode [ 46.510826][ T3870] xt_l2tp: unknown flags: 10 [ 46.520032][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.532484][ T3713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.542525][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.559262][ T3713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.576840][ T3713] veth1_macvtap: left promiscuous mode [ 46.582970][ T3713] veth0_macvtap: left promiscuous mode [ 46.588722][ T3713] veth1_vlan: left promiscuous mode [ 46.594844][ T3713] veth0_vlan: left promiscuous mode [ 46.643143][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 46.703894][ T3713] team0 (unregistering): Port device team_slave_1 removed [ 46.713784][ T3713] team0 (unregistering): Port device team_slave_0 removed [ 46.777127][ T3777] chnl_net:caif_netlink_parms(): no params data found [ 46.788777][ T3885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3885 comm=syz.0.94 [ 46.818373][ T3885] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 46.842617][ T3888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'. [ 46.860635][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 46.907540][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.921292][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.928651][ T3777] bridge_slave_0: entered allmulticast mode [ 46.935602][ T3777] bridge_slave_0: entered promiscuous mode [ 46.942700][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.951509][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.958955][ T3777] bridge_slave_1: entered allmulticast mode [ 46.966184][ T3777] bridge_slave_1: entered promiscuous mode [ 46.989926][ T3890] loop3: detected capacity change from 0 to 256 [ 47.001480][ T3777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.012448][ T3777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.035212][ T3905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 47.059976][ T3905] hsr0: left allmulticast mode [ 47.068812][ T3905] hsr_slave_0: left allmulticast mode [ 47.075739][ T3905] hsr_slave_1: left allmulticast mode [ 47.081821][ T3905] bridge0: port 3(hsr0) entered disabled state [ 47.090460][ T3905] bridge_slave_1: left allmulticast mode [ 47.096521][ T3905] bridge_slave_1: left promiscuous mode [ 47.109668][ T3905] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.117939][ T3905] bridge_slave_0: left allmulticast mode [ 47.125491][ T3905] bridge_slave_0: left promiscuous mode [ 47.131964][ T3905] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.199993][ T3777] team0: Port device team_slave_0 added [ 47.207455][ T3777] team0: Port device team_slave_1 added [ 47.215588][ T3916] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 47.239884][ T3777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.247898][ T3777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.274163][ T3777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.286712][ T3777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.294251][ T3777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.321461][ T3777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.380357][ T3777] hsr_slave_0: entered promiscuous mode [ 47.386817][ T3777] hsr_slave_1: entered promiscuous mode [ 47.394800][ T3777] debugfs: 'hsr0' already exists in 'hsr' [ 47.401017][ T3777] Cannot create hsr debugfs directory [ 47.593774][ T3777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.643643][ T3777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.671131][ T3777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.711812][ T3777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.752554][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.759942][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.767352][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.774561][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.789549][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.799016][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.997668][ T3777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.037038][ T3777] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.062552][ T3777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.073614][ T3777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.125941][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.133093][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.155404][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 48.176101][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.183525][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.310957][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.349491][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.383092][ T3777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.702808][ T3777] veth0_vlan: entered promiscuous mode [ 48.715776][ T3777] veth1_vlan: entered promiscuous mode [ 48.755305][ T3777] veth0_macvtap: entered promiscuous mode [ 48.780910][ T3996] lo speed is unknown, defaulting to 1000 [ 48.788590][ T3777] veth1_macvtap: entered promiscuous mode [ 48.826690][ T3777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.847900][ T3777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.876976][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.903878][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.924020][ T4001] lo speed is unknown, defaulting to 1000 [ 48.930338][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.979332][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.992827][ T3998] syz.1.116 (3998) used greatest stack depth: 9800 bytes left [ 49.290217][ T4019] loop0: detected capacity change from 0 to 128 [ 49.298739][ T4019] ======================================================= [ 49.298739][ T4019] WARNING: The mand mount option has been deprecated and [ 49.298739][ T4019] and is ignored by this kernel. Remove the mand [ 49.298739][ T4019] option from the mount to silence this warning. [ 49.298739][ T4019] ======================================================= [ 49.343596][ T4019] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.356132][ T4019] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.386004][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 49.386019][ T28] audit: type=1400 audit(1774357785.603:207): avc: denied { write open } for pid=4018 comm="syz.0.121" path="/31/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.416195][ T28] audit: type=1400 audit(1774357785.603:208): avc: denied { read } for pid=4018 comm="syz.0.121" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.438143][ T28] audit: type=1400 audit(1774357785.603:209): avc: denied { map } for pid=4018 comm="syz.0.121" path="/31/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.472549][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.558349][ T4024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 49.618220][ T28] audit: type=1400 audit(1774357785.833:210): avc: denied { create } for pid=4025 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.642315][ T4026] syz.0.124: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 49.658318][ T4026] CPU: 1 UID: 0 PID: 4026 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 49.658348][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.658371][ T4026] Call Trace: [ 49.658379][ T4026] [ 49.658433][ T4026] __dump_stack+0x1d/0x30 [ 49.658464][ T4026] dump_stack_lvl+0x95/0xd0 [ 49.658495][ T4026] dump_stack+0x15/0x1b [ 49.658524][ T4026] warn_alloc+0x145/0x1c0 [ 49.658580][ T4026] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 49.658613][ T4026] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 49.658642][ T4026] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 49.658733][ T4026] ? slow_avc_audit+0x14c/0x190 [ 49.658770][ T4026] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 49.658795][ T4026] ? irqentry_exit+0x91/0x520 [ 49.658879][ T4026] ? should_fail_ex+0x30/0x280 [ 49.658977][ T4026] ? xskq_create+0x36/0xe0 [ 49.659078][ T4026] vmalloc_user_noprof+0x7d/0xb0 [ 49.659106][ T4026] ? xskq_create+0x80/0xe0 [ 49.659133][ T4026] xskq_create+0x80/0xe0 [ 49.659161][ T4026] xsk_init_queue+0x70/0xb0 [ 49.659258][ T4026] xsk_setsockopt+0x3f5/0x640 [ 49.659282][ T4026] ? __pfx_xsk_setsockopt+0x10/0x10 [ 49.659382][ T4026] __sys_setsockopt+0x184/0x200 [ 49.659416][ T4026] __x64_sys_setsockopt+0x64/0x80 [ 49.659448][ T4026] x64_sys_call+0x2327/0x3020 [ 49.659529][ T4026] do_syscall_64+0x12c/0x370 [ 49.659555][ T4026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.659578][ T4026] RIP: 0033:0x7fa7de4dc799 [ 49.659604][ T4026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.659635][ T4026] RSP: 002b:00007fa7dcf2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.659659][ T4026] RAX: ffffffffffffffda RBX: 00007fa7de755fa0 RCX: 00007fa7de4dc799 [ 49.659706][ T4026] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 49.659776][ T4026] RBP: 00007fa7de572c99 R08: 0000000000000004 R09: 0000000000000000 [ 49.659794][ T4026] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.659810][ T4026] R13: 00007fa7de756038 R14: 00007fa7de755fa0 R15: 00007ffc4543c3c8 [ 49.659910][ T4026] [ 49.746147][ T28] audit: type=1400 audit(1774357785.863:211): avc: denied { setopt } for pid=4025 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.801028][ T4026] Mem-Info: [ 49.934613][ T4026] active_anon:24613 inactive_anon:0 isolated_anon:0 [ 49.934613][ T4026] active_file:20658 inactive_file:2294 isolated_file:0 [ 49.934613][ T4026] unevictable:0 dirty:1517 writeback:0 [ 49.934613][ T4026] slab_reclaimable:3465 slab_unreclaimable:17961 [ 49.934613][ T4026] mapped:29111 shmem:17267 pagetables:1172 [ 49.934613][ T4026] sec_pagetables:0 bounce:0 [ 49.934613][ T4026] kernel_misc_reclaimable:0 [ 49.934613][ T4026] free:1860418 free_pcp:13386 free_cma:0 [ 49.995050][ T4026] Node 0 active_anon:98452kB inactive_anon:0kB active_file:82632kB inactive_file:9176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116444kB dirty:6068kB writeback:0kB shmem:69068kB kernel_stack:3696kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 50.055916][ T4026] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 50.134319][ T4039] netlink: 'syz.1.130': attribute type 27 has an invalid length. [ 50.175316][ T4026] lowmem_reserve[]: 0 2879 7857 7857 [ 50.204028][ T4026] Node 0 DMA32 free:2944532kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948160kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 50.266286][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.273606][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.281005][ T4026] lowmem_reserve[]: 0 0 4978 4978 [ 50.296044][ T4026] Node 0 Normal free:4482356kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98800kB inactive_anon:0kB active_file:82632kB inactive_file:9176kB unevictable:0kB writepending:6068kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:50096kB local_pcp:27404kB free_cma:0kB [ 50.366522][ T4026] lowmem_reserve[]: 0 0 0 0 [ 50.385002][ T4026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 50.408781][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.417090][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.434087][ T4026] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944532kB [ 50.473505][ T4026] Node 0 Normal: 1*4kB (E) 0*8kB 1*16kB (U) 1*32kB (U) 2*64kB (UE) 1*128kB (U) 4*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 1090*4096kB (M) = 4482356kB [ 50.509342][ T4026] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 50.529753][ T4026] 40215 total pagecache pages [ 50.541373][ T4026] 0 pages in swap cache [ 50.572677][ T4026] Free swap = 124996kB [ 50.577052][ T4026] Total swap = 124996kB [ 50.591695][ T4026] 2097051 pages RAM [ 50.606001][ T4026] 0 pages HighMem/MovableOnly [ 50.611236][ T4026] 81611 pages reserved [ 50.630905][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.692951][ T28] audit: type=1400 audit(1774357786.913:212): avc: denied { execute } for pid=4049 comm="syz.0.133" path="/35/blkio.bfq.io_queued" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.716898][ T4042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.742458][ T3715] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.751517][ T3715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.796123][ T3715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.828379][ T3715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.910587][ T4067] netlink: 'syz.5.138': attribute type 12 has an invalid length. [ 50.935498][ T28] audit: type=1400 audit(1774357787.153:213): avc: denied { connect } for pid=4065 comm="syz.5.138" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.987395][ T28] audit: type=1400 audit(1774357787.173:214): avc: denied { write } for pid=4065 comm="syz.5.138" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.241999][ T28] audit: type=1400 audit(1774357787.453:215): avc: denied { cmd } for pid=4071 comm="syz.5.140" path="socket:[8867]" dev="sockfs" ino=8867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.358710][ T28] audit: type=1400 audit(1774357787.573:216): avc: denied { read } for pid=4075 comm="syz.3.142" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.733251][ T4076] lo speed is unknown, defaulting to 1000 [ 51.957338][ T4093] netlink: 'syz.2.148': attribute type 9 has an invalid length. [ 52.051518][ T4097] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 52.592559][ T4127] loop2: detected capacity change from 0 to 128 [ 52.702738][ T4135] loop0: detected capacity change from 0 to 1024 [ 52.777438][ T4135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.840761][ T4135] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 52.895083][ T4135] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.909981][ T4135] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.922636][ T4135] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.922636][ T4135] [ 52.932939][ T4135] EXT4-fs (loop0): Total free blocks count 0 [ 52.942308][ T4135] EXT4-fs (loop0): Free/Dirty block details [ 52.968703][ T4135] EXT4-fs (loop0): free_blocks=20480 [ 52.980498][ T4135] EXT4-fs (loop0): dirty_blocks=32 [ 52.985833][ T4135] EXT4-fs (loop0): Block reservation details [ 52.992212][ T4135] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 53.040383][ T3713] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 53.382916][ T4172] loop2: detected capacity change from 0 to 1024 [ 53.390519][ T4172] EXT4-fs: Ignoring removed bh option [ 53.410707][ T4172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.426400][ T4172] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.557071][ T4172] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.178: lblock 0 mapped to illegal pblock 0 (length 6) [ 53.570871][ T4172] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 53.583542][ T4172] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.583542][ T4172] [ 53.606015][ T4172] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 7: comm syz.2.178: lblock 7 mapped to illegal pblock 7 (length 9) [ 53.620337][ T4172] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 53.632926][ T4172] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.632926][ T4172] [ 53.674229][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.745461][ T4186] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 53.761015][ T4186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.819052][ T4186] bond1: (slave veth3): Enslaving as an active interface with a down link [ 53.838408][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 53.846225][ T4186] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 54.390939][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 54.390960][ T28] audit: type=1326 audit(1774357790.603:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4195 comm="syz.5.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd84583c799 code=0x7ffc0000 [ 54.542384][ T28] audit: type=1400 audit(1774357790.743:252): avc: denied { setopt } for pid=4214 comm="syz.2.192" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.613856][ T28] audit: type=1400 audit(1774357790.833:253): avc: denied { listen } for pid=4216 comm="syz.5.193" lport=43728 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.668644][ T28] audit: type=1400 audit(1774357790.853:254): avc: denied { accept } for pid=4216 comm="syz.5.193" lport=43728 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.702423][ T4219] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.729182][ T28] audit: type=1400 audit(1774357790.853:255): avc: denied { setopt } for pid=4216 comm="syz.5.193" lport=43728 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 54.782805][ T28] audit: type=1400 audit(1774357790.953:256): avc: denied { getopt } for pid=4218 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.820078][ T3408] IPVS: starting estimator thread 0... [ 54.862237][ T4226] loop0: detected capacity change from 0 to 512 [ 54.896057][ T28] audit: type=1400 audit(1774357791.113:257): avc: denied { create } for pid=4227 comm="syz.5.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.929289][ T4224] IPVS: using max 1968 ests per chain, 98400 per kthread [ 54.941526][ T4226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.958151][ T28] audit: type=1400 audit(1774357791.133:258): avc: denied { write } for pid=4227 comm="syz.5.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.968011][ T4226] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.994414][ T28] audit: type=1400 audit(1774357791.213:259): avc: denied { add_name } for pid=4225 comm="syz.0.197" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.026542][ T28] audit: type=1400 audit(1774357791.243:260): avc: denied { append } for pid=4225 comm="syz.0.197" path="/53/file0/memory.events.local" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.299661][ T4248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.204'. [ 55.373688][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.547877][ T4261] loop5: detected capacity change from 0 to 512 [ 55.632443][ T4261] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 55.803168][ T4261] loop5: detected capacity change from 0 to 764 [ 55.827588][ T4261] iso9660: Unknown parameter 'ÿÿÿ' [ 55.975792][ T4270] tipc: Failed to remove unknown binding: 66,1,1/0:2971511910/2971511912 [ 56.053550][ T4274] loop5: detected capacity change from 0 to 512 [ 56.083938][ T4277] loop1: detected capacity change from 0 to 128 [ 56.084556][ T4274] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.215: corrupted xattr block 95: invalid header [ 56.091288][ T4274] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.121506][ T4274] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.215: bg 0: block 7: invalid block bitmap [ 56.130725][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 56.130747][ C1] EXT4-fs (loop5): initial error at time 1774357792: ext4_expand_extra_isize_ea:2808: inode 11 [ 56.130782][ C1] EXT4-fs (loop5): last error at time 1774357792: ext4_expand_extra_isize_ea:2808: inode 11 [ 56.170947][ T4274] loop5: lost filesystem error report for type 5 error -117 [ 56.175880][ T4274] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 56.192126][ T4274] loop5: lost filesystem error report for type 5 error -117 [ 56.196297][ T4277] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.219242][ T4274] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2970: inode #11: comm syz.5.215: corrupted xattr block 95: invalid header [ 56.233021][ T4274] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.233159][ T4274] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 56.247145][ T4277] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.252218][ T4274] EXT4-fs (loop5): 1 orphan inode deleted [ 56.267844][ T4274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.322110][ T3777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.465665][ T4282] bridge0: port 3(ipvlan2) entered blocking state [ 56.478992][ T4282] bridge0: port 3(ipvlan2) entered disabled state [ 56.488268][ T4282] ipvlan2: entered allmulticast mode [ 56.494814][ T4282] bridge0: entered allmulticast mode [ 56.500696][ T4282] ipvlan2: left allmulticast mode [ 56.506150][ T4282] bridge0: left allmulticast mode [ 56.512694][ T4284] loop2: detected capacity change from 0 to 128 [ 56.528354][ T4284] FAT-fs (loop2): bogus logical sector size 2134 [ 56.543304][ T4284] FAT-fs (loop2): Can't find a valid FAT filesystem [ 56.590718][ T3707] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.734823][ T4297] loop0: detected capacity change from 0 to 2048 [ 56.755833][ T4300] netlink: 'syz.5.224': attribute type 4 has an invalid length. [ 56.785834][ T4297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.792230][ T4300] netlink: 'syz.5.224': attribute type 4 has an invalid length. [ 56.827998][ T4297] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.852254][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 56.904845][ T4306] bond1: entered promiscuous mode [ 56.936132][ T4306] macvlan2: entered promiscuous mode [ 56.950371][ T4306] macvlan2: entered allmulticast mode [ 56.965305][ T4306] bond1: (slave macvlan2): Opening slave failed [ 57.293360][ T4316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.307586][ T4316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59912 - 0 [ 57.342937][ T4316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 57.398605][ T4309] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.223: bg 0: block 345: padding at end of block bitmap is not set [ 57.413056][ T4278] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 57.428531][ T4309] EXT4-fs (loop0): Remounting filesystem read-only [ 57.439740][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 57.447649][ T4316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.463935][ T3707] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 14: ext4_ext_map_blocks returned -30 [ 57.489373][ T4316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59912 - 0 [ 57.523317][ T4316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 57.630641][ T4316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.659326][ T4316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59912 - 0 [ 57.680952][ T4316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 57.702179][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.744302][ T4316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.772029][ T4316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59912 - 0 [ 57.794529][ T4316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 57.822559][ T4327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.232'. [ 57.864302][ T4330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.902511][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 57.911531][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 59912 - 0 [ 57.933025][ T36] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 57.966668][ T70] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 57.975834][ T70] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 59912 - 0 [ 58.012389][ T70] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 58.038057][ T70] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 58.050987][ T70] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 59912 - 0 [ 58.100282][ T70] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 58.151837][ T70] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 58.359697][ T70] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 59912 - 0 [ 58.368202][ T70] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 58.627456][ T4359] loop0: detected capacity change from 0 to 512 [ 58.742953][ T4359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.792910][ T4359] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.242: corrupted inode contents [ 58.822228][ T4359] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.824314][ T4359] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 58.834406][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 58.834585][ C0] EXT4-fs (loop0): initial error at time 1774357795: ext4_do_update_inode:5569: inode 15 [ 58.834632][ C0] EXT4-fs (loop0): last error at time 1774357795: ext4_do_update_inode:5569: inode 15 [ 58.885036][ T4359] loop0: lost filesystem error report for type 5 error -117 [ 58.901287][ T4359] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.242: corrupted inode contents [ 58.990786][ T4359] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.039394][ T4359] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.242: mark_inode_dirty error [ 59.091182][ T4359] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.101683][ T4359] EXT4-fs (loop0): 1 orphan inode deleted [ 59.119875][ T4391] netlink: 'syz.2.248': attribute type 3 has an invalid length. [ 59.134962][ T4359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.138176][ T4391] netlink: 'syz.2.248': attribute type 7 has an invalid length. [ 59.179205][ T4391] netlink: 198340 bytes leftover after parsing attributes in process `syz.2.248'. [ 59.250912][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.032366][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 60.032383][ T28] audit: type=1326 audit(1774357796.253:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.097021][ T28] audit: type=1326 audit(1774357796.283:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.141073][ T28] audit: type=1326 audit(1774357796.283:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.189453][ T28] audit: type=1326 audit(1774357796.283:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.229941][ T28] audit: type=1326 audit(1774357796.283:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.385843][ T28] audit: type=1326 audit(1774357796.283:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.452763][ T28] audit: type=1326 audit(1774357796.283:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.529939][ T28] audit: type=1326 audit(1774357796.283:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.553686][ T28] audit: type=1326 audit(1774357796.283:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 60.577729][ T28] audit: type=1326 audit(1774357796.283:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 61.894150][ T4483] loop5: detected capacity change from 0 to 128 [ 61.907479][ T4483] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.934706][ T4483] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.016645][ T4468] SELinux: failed to load policy [ 62.071215][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 62.477406][ T4498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.281'. [ 62.503639][ T4498] netlink: 'syz.5.281': attribute type 7 has an invalid length. [ 62.512937][ T4498] netlink: 'syz.5.281': attribute type 8 has an invalid length. [ 62.521463][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.281'. [ 62.591707][ T4505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.617512][ T4505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.663883][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 62.758923][ T4511] loop3: detected capacity change from 0 to 1024 [ 63.693240][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 63.734161][ T4523] 8021q: adding VLAN 0 to HW filter on device team1 [ 63.742356][ T4523] Zero length message leads to an empty skb [ 64.071042][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 64.599032][ T4554] loop1: detected capacity change from 0 to 2048 [ 64.785770][ T4554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.818845][ T4554] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.907853][ T3303] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.935871][ T3303] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.084505][ T3713] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 345: padding at end of block bitmap is not set [ 65.132106][ T3713] EXT4-fs (loop1): Remounting filesystem read-only [ 65.159071][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.276579][ T4605] loop3: detected capacity change from 0 to 512 [ 65.308373][ T4605] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.349686][ T4605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.406541][ T4605] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.316: invalid indirect mapped block 1023410176 (level 0) [ 65.441263][ T4605] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.442753][ T4605] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, [ 65.452056][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 65.452082][ C1] EXT4-fs (loop3): initial error at time 1774357801: ext4_free_branches:1023: inode 11 [ 65.452124][ C1] EXT4-fs (loop3): last error at time 1774357801: ext4_free_branches:1023: inode 11 [ 65.486438][ T4605] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 65.502949][ T4605] EXT4-fs (loop3): 1 truncate cleaned up [ 65.510926][ T4605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.729879][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.753355][ T4591] syz.2.317 (4591) used greatest stack depth: 9336 bytes left [ 65.835911][ T4627] loop3: detected capacity change from 0 to 512 [ 65.859791][ T4627] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 65.897105][ T4634] loop2: detected capacity change from 0 to 128 [ 65.986149][ T4634] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 66.058005][ T4627] loop3: detected capacity change from 0 to 764 [ 66.074102][ T4627] iso9660: Unknown parameter 'ÿÿÿ' [ 66.129179][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 66.129198][ T28] audit: type=1400 audit(1774357802.343:457): avc: denied { write } for pid=4638 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.497375][ T4648] loop1: detected capacity change from 0 to 512 [ 66.555075][ T4648] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 66.676790][ T4636] loop5: detected capacity change from 0 to 2048 [ 66.777338][ T4648] loop1: detected capacity change from 0 to 764 [ 66.802526][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.802526][ T3707] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 66.821715][ T4648] iso9660: Unknown parameter 'ÿÿÿ' [ 66.840634][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.840634][ T3707] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 66.859222][ T3303] IPVS: starting estimator thread 0... [ 66.879190][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.879190][ T3707] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 66.897291][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.897291][ T3707] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 66.909254][ T4636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.926011][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.926011][ T3707] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 66.940453][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.940453][ T3707] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 66.945083][ T4636] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.954456][ T4659] IPVS: using max 2112 ests per chain, 105600 per kthread [ 66.954785][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.954785][ T3707] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 66.954829][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.954829][ T3707] loop2: rw=1, sector=257, nr_sectors = 16 limit=128 [ 66.954868][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.954868][ T3707] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 66.954919][ T3707] kworker/u8:16: attempt to access beyond end of device [ 66.954919][ T3707] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 66.956856][ T3707] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 67.049543][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 67.297574][ T4671] syz_tun: entered promiscuous mode [ 67.305963][ T70] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 67.321980][ T4671] macsec1: entered promiscuous mode [ 67.339692][ T70] EXT4-fs (loop5): Remounting filesystem read-only [ 67.356046][ T3777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.392898][ T28] audit: type=1400 audit(1774357803.613:458): avc: denied { read } for pid=4682 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.459553][ T28] audit: type=1400 audit(1774357803.673:459): avc: denied { bind } for pid=4686 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.513612][ T28] audit: type=1400 audit(1774357803.683:460): avc: denied { listen } for pid=4686 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.567928][ T4671] syz.2.339 (4671) used greatest stack depth: 9224 bytes left [ 67.584851][ T28] audit: type=1400 audit(1774357803.703:461): avc: denied { setopt } for pid=4686 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.702419][ T4693] loop2: detected capacity change from 0 to 512 [ 67.760713][ T4693] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 68.081296][ T28] audit: type=1400 audit(1774357804.303:462): avc: denied { name_bind } for pid=4701 comm="syz.3.355" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.236601][ T4693] loop2: detected capacity change from 0 to 764 [ 68.254090][ T4693] iso9660: Unknown parameter 'ÿÿÿ' [ 68.429610][ T28] audit: type=1400 audit(1774357804.633:463): avc: denied { bind } for pid=4707 comm="syz.5.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.525197][ T28] audit: type=1400 audit(1774357804.743:464): avc: denied { getopt } for pid=4715 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.659604][ T28] audit: type=1400 audit(1774357804.863:465): avc: denied { bind } for pid=4719 comm="syz.5.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.770394][ T28] audit: type=1400 audit(1774357804.953:466): avc: denied { setopt } for pid=4719 comm="syz.5.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.935796][ T4704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.987238][ T4704] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.189209][ T36] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 69.205319][ T36] EXT4-fs (loop3): Remounting filesystem read-only [ 69.214133][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.449207][ T4741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.496427][ T4741] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.369: corrupted inode contents [ 69.511937][ T4741] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.514272][ T4741] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 69.524523][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 69.524546][ C0] EXT4-fs (loop3): initial error at time 1774357805: ext4_do_update_inode:5569: inode 15 [ 69.524932][ C0] EXT4-fs (loop3): last error at time 1774357805: ext4_do_update_inode:5569: inode 15 [ 69.565431][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 69.572848][ T4741] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.369: corrupted inode contents [ 69.593989][ T4741] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.597259][ T4741] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.369: mark_inode_dirty error [ 69.651725][ T4741] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.653731][ T4746] set_capacity_and_notify: 2 callbacks suppressed [ 69.653749][ T4746] loop1: detected capacity change from 0 to 164 [ 69.678696][ T4741] EXT4-fs (loop3): 1 orphan inode deleted [ 69.703737][ T4741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.704391][ T4746] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 69.797061][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.821495][ T4755] loop1: detected capacity change from 0 to 512 [ 69.828670][ T4755] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.848640][ T4755] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.374: corrupted in-inode xattr: invalid ea_ino [ 69.919374][ T4755] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.922094][ T4755] EXT4-fs (loop1): Remounting filesystem read-only [ 69.931394][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 69.931412][ C1] EXT4-fs (loop1): initial error at time 1774357806: ext4_iget_extra_inode:5025: inode 15 [ 69.931447][ C1] EXT4-fs (loop1): last error at time 1774357806: ext4_iget_extra_inode:5025: inode 15 [ 69.971258][ T4755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.037512][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.096422][ T4765] loop1: detected capacity change from 0 to 764 [ 70.146946][ T4753] loop0: detected capacity change from 0 to 512 [ 70.183353][ T4753] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 70.310542][ T4762] syz_tun: entered promiscuous mode [ 70.320101][ T4762] macsec1: entered promiscuous mode [ 70.381629][ T4753] loop0: detected capacity change from 0 to 764 [ 70.396207][ T4753] iso9660: Unknown parameter 'ÿÿÿ' [ 70.527510][ T4775] loop5: detected capacity change from 0 to 256 [ 70.560269][ T4769] loop1: detected capacity change from 0 to 512 [ 70.599611][ T4769] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.628727][ T4769] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.379: invalid indirect mapped block 1023410176 (level 0) [ 70.647705][ T4769] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.649144][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 70.664793][ C0] EXT4-fs (loop1): initial error at time 1774357806: ext4_free_branches:1023: inode 11 [ 70.674597][ C0] EXT4-fs (loop1): last error at time 1774357806: ext4_free_branches:1023: inode 11 [ 70.684447][ T4769] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 70.706726][ T4769] EXT4-fs (loop1): 1 truncate cleaned up [ 70.713446][ T4769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.792465][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 70.803768][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.819791][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 70.870550][ T4787] loop1: detected capacity change from 0 to 256 [ 70.992721][ T4789] loop5: detected capacity change from 0 to 512 [ 71.042981][ T4789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.090503][ T4791] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 71.115808][ T4789] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.387: corrupted inode contents [ 71.159594][ T4789] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.161423][ T4789] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 71.171631][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 71.172063][ C0] EXT4-fs (loop5): initial error at time 1774357807: ext4_do_update_inode:5569: inode 15 [ 71.172374][ C0] EXT4-fs (loop5): last error at time 1774357807: ext4_do_update_inode:5569: inode 15 [ 71.225567][ T4789] loop5: lost filesystem error report for type 5 error -117 [ 71.226796][ T4789] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.387: corrupted inode contents [ 71.308718][ T4789] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.323654][ T4789] EXT4-fs error (device loop5): ext4_evict_inode:303: inode #15: comm syz.5.387: mark_inode_dirty error [ 71.347407][ T4789] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.352323][ T4789] EXT4-fs (loop5): 1 orphan inode deleted [ 71.425551][ T4789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.541696][ T3777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.692074][ T4799] loop3: detected capacity change from 0 to 4096 [ 71.721352][ T4799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.815188][ T4807] netlink: 212412 bytes leftover after parsing attributes in process `syz.5.394'. [ 71.833987][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.874265][ T4785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.891237][ T4785] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.218227][ T3713] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 345: padding at end of block bitmap is not set [ 72.238292][ T3713] EXT4-fs (loop0): Remounting filesystem read-only [ 72.254628][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.459793][ T4830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.519413][ T4830] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.402: corrupted inode contents [ 72.552736][ T4830] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.555797][ T4830] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 72.565827][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 72.566236][ C0] EXT4-fs (loop2): initial error at time 1774357808: ext4_do_update_inode:5569: inode 15 [ 72.566846][ C0] EXT4-fs (loop2): last error at time 1774357808: ext4_do_update_inode:5569: inode 15 [ 72.657121][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 72.657141][ T28] audit: type=1400 audit(1774357808.873:478): avc: denied { map } for pid=4835 comm="syz.1.405" path="socket:[20206]" dev="sockfs" ino=20206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 72.659017][ T4830] loop2: lost filesystem error report for type 5 error -117 [ 72.704827][ T4830] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.402: corrupted inode contents [ 72.735795][ T4830] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.747350][ T4830] EXT4-fs error (device loop2): ext4_evict_inode:303: inode #15: comm syz.2.402: mark_inode_dirty error [ 72.771625][ T4830] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.772858][ T4830] EXT4-fs (loop2): 1 orphan inode deleted [ 72.795823][ T4830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.265157][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.355781][ T28] audit: type=1400 audit(1774357809.573:479): avc: denied { connect } for pid=4845 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.458015][ T28] audit: type=1400 audit(1774357809.673:480): avc: denied { mounton } for pid=4848 comm="syz.0.412" path="/98/file0" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 73.607148][ T4859] netlink: 76 bytes leftover after parsing attributes in process `syz.5.415'. [ 73.846536][ T28] audit: type=1400 audit(1774357810.063:481): avc: denied { unmount } for pid=4863 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.562834][ T4887] syz.1.428 (4887) used greatest stack depth: 8712 bytes left [ 74.583029][ T4894] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.651342][ T4894] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.429: invalid indirect mapped block 1023410176 (level 0) [ 74.834280][ T4894] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.834788][ T4894] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, [ 74.844217][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 74.844243][ C0] EXT4-fs (loop5): initial error at time 1774357811: ext4_free_branches:1023: inode 11 [ 74.844291][ C0] EXT4-fs (loop5): last error at time 1774357811: ext4_free_branches:1023: inode 11 [ 74.878261][ T4894] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 74.991957][ T28] audit: type=1400 audit(1774357811.213:482): avc: denied { create } for pid=4905 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.015921][ T4894] EXT4-fs (loop5): 1 truncate cleaned up [ 75.024772][ T4894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.041228][ T28] audit: type=1400 audit(1774357811.213:483): avc: denied { write } for pid=4905 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.082180][ T3777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.196670][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.440'. [ 75.725107][ T28] audit: type=1326 audit(1774357811.883:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b128cc799 code=0x7fc00000 [ 76.301828][ T28] audit: type=1326 audit(1774357812.513:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b128cc799 code=0x7fc00000 [ 76.558399][ T28] audit: type=1400 audit(1774357812.773:486): avc: denied { create } for pid=4956 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.625449][ T28] audit: type=1400 audit(1774357812.773:487): avc: denied { setopt } for pid=4956 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 76.759671][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 76.789084][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 76.852678][ T4961] set_capacity_and_notify: 3 callbacks suppressed [ 76.852706][ T4961] loop3: detected capacity change from 0 to 1024 [ 76.874647][ T4961] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.908470][ T4961] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 76.918713][ T4961] EXT4-fs (loop3): invalid journal inode [ 76.924627][ T4961] EXT4-fs (loop3): can't get journal size [ 76.932345][ T4961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.947589][ T4960] netlink: 56 bytes leftover after parsing attributes in process `syz.3.451'. [ 76.978572][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.020186][ T4964] netlink: 'syz.2.452': attribute type 2 has an invalid length. [ 77.059750][ T4966] loop3: detected capacity change from 0 to 256 [ 77.933426][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 77.933447][ T28] audit: type=1400 audit(1774357814.153:490): avc: denied { override_creds } for pid=4983 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.114812][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 78.211717][ T4999] netlink: 71 bytes leftover after parsing attributes in process `syz.0.465'. [ 78.696083][ T28] audit: type=1326 audit(1774357814.913:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 78.722343][ T28] audit: type=1326 audit(1774357814.913:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 78.800737][ T28] audit: type=1326 audit(1774357814.913:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 78.873613][ T28] audit: type=1326 audit(1774357814.913:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 78.927019][ T5037] netlink: 'syz.0.482': attribute type 13 has an invalid length. [ 78.935336][ T28] audit: type=1326 audit(1774357814.913:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 78.960190][ T5037] netlink: 'syz.0.482': attribute type 17 has an invalid length. [ 78.973163][ T5036] Driver unsupported XDP return value 0 on prog (id 159) dev N/A, expect packet loss! [ 79.072662][ T28] audit: type=1326 audit(1774357814.913:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 79.140017][ T28] audit: type=1326 audit(1774357814.963:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 79.190605][ T28] audit: type=1326 audit(1774357814.973:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 79.245015][ T28] audit: type=1326 audit(1774357814.973:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405a18c799 code=0x7ffc0000 [ 79.292101][ T5037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.433292][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 79.472532][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 79.969057][ T5067] loop0: detected capacity change from 0 to 512 [ 80.011831][ T5067] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.265852][ T5067] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.494: invalid indirect mapped block 1023410176 (level 0) [ 80.280274][ T5067] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.289505][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 80.306723][ C1] EXT4-fs (loop0): initial error at time 1774357816: ext4_free_branches:1023: inode 11 [ 80.309611][ T5067] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 237: [ 80.317284][ C1] EXT4-fs (loop0): last error at time 1774357816: ext4_free_branches:1023 [ 80.317296][ T5067] freeing already freed block (bit 236); block bitmap corrupt. [ 80.317378][ C1] : inode 11: block 237 [ 80.351050][ T5067] EXT4-fs (loop0): 1 truncate cleaned up [ 80.357353][ T5067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.480610][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.553372][ T5060] loop3: detected capacity change from 0 to 512 [ 80.751440][ T5060] EXT4-fs (loop3): 1 truncate cleaned up [ 80.914659][ T5060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.346803][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.632748][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 82.564363][ T5129] loop0: detected capacity change from 0 to 512 [ 82.602481][ T5129] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 82.735214][ T5129] loop0: detected capacity change from 0 to 764 [ 82.815307][ T5129] iso9660: Unknown parameter 'ÿÿÿ' [ 83.020460][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 83.020553][ T28] audit: type=1400 audit(1774357819.243:542): avc: denied { watch watch_reads } for pid=5156 comm="syz.2.527" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 83.590199][ T28] audit: type=1326 audit(1774357819.803:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.5.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84583c799 code=0x7fc00000 [ 83.995979][ T3408] IPVS: starting estimator thread 0... [ 84.041240][ T5175] io-wq is not configured for unbound workers [ 84.099625][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 84.116083][ T5179] IPVS: using max 1920 ests per chain, 96000 per kthread [ 84.269800][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 84.329239][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 84.554891][ T28] audit: type=1400 audit(1774357820.763:544): avc: denied { firmware_load } for pid=5196 comm="syz.1.542" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 84.698012][ T5201] capability: warning: `syz.3.546' uses 32-bit capabilities (legacy support in use) [ 84.808146][ T5210] lo speed is unknown, defaulting to 1000 [ 84.842466][ T5203] loop0: detected capacity change from 0 to 8192 [ 84.856874][ T28] audit: type=1326 audit(1774357821.073:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.5.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd84583c799 code=0x0 [ 84.925889][ T3808] loop0: p1 < > p2 p4 < p5 > [ 84.932259][ T3808] loop0: partition table partially beyond EOD, truncated [ 84.942175][ T3808] loop0: p1 start 134217728 is beyond EOD, truncated [ 84.955473][ T3808] loop0: p2 size 591360 extends beyond EOD, truncated [ 84.971025][ T3808] loop0: p5 size 591360 extends beyond EOD, truncated [ 84.984369][ T5203] loop0: p1 < > p2 p4 < p5 > [ 84.989799][ T5203] loop0: partition table partially beyond EOD, truncated [ 84.999283][ T5203] loop0: p1 start 134217728 is beyond EOD, truncated [ 85.018844][ T5203] loop0: p2 size 591360 extends beyond EOD, truncated [ 85.041594][ T5203] loop0: p5 size 591360 extends beyond EOD, truncated [ 85.101636][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.114899][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 85.126650][ T3808] udevd[3808]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 85.153124][ T3808] udevd[3808]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 85.164014][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.171863][ T5197] syz.1.542 (5197) used greatest stack depth: 8392 bytes left [ 85.181576][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 85.417615][ T5229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.514044][ T28] audit: type=1400 audit(1774357821.733:546): avc: denied { read } for pid=5230 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.745417][ T28] audit: type=1400 audit(1774357821.963:547): avc: denied { bind } for pid=5241 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.848289][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 86.872106][ T28] audit: type=1400 audit(1774357823.093:548): avc: denied { execute_no_trans } for pid=5247 comm="syz.1.573" path="/107/file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.859371][ T5255] loop0: detected capacity change from 0 to 1024 [ 87.955658][ T5255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.077324][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.101658][ T3001] ================================================================== [ 88.110162][ T3001] BUG: KCSAN: data-race in __dentry_kill / step_into_slowpath [ 88.117850][ T3001] [ 88.120227][ T3001] read-write to 0xffff8881255b2a80 of 4 bytes by task 3808 on cpu 1: [ 88.128331][ T3001] __dentry_kill+0x1e2/0x460 [ 88.133149][ T3001] finish_dput+0x2b/0x200 [ 88.137623][ T3001] dput+0x52/0x60 [ 88.141314][ T3001] filename_unlinkat+0x217/0x410 [ 88.146449][ T3001] __se_sys_unlink+0x2b/0xe0 [ 88.151269][ T3001] __x64_sys_unlink+0x1f/0x30 [ 88.156162][ T3001] x64_sys_call+0x2eb6/0x3020 [ 88.160972][ T3001] do_syscall_64+0x12c/0x370 [ 88.165916][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.172123][ T3001] [ 88.174651][ T3001] read to 0xffff8881255b2a80 of 4 bytes by task 3001 on cpu 0: [ 88.182461][ T3001] step_into_slowpath+0x139/0x4c0 [ 88.187739][ T3001] path_lookupat+0x330/0x500 [ 88.192394][ T3001] filename_lookup+0x190/0x390 [ 88.197241][ T3001] do_readlinkat+0x74/0x2f0 [ 88.201798][ T3001] __x64_sys_readlink+0x47/0x60 [ 88.206870][ T3001] x64_sys_call+0x2b51/0x3020 [ 88.211691][ T3001] do_syscall_64+0x12c/0x370 [ 88.216407][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.222430][ T3001] [ 88.224870][ T3001] value changed: 0x00300080 -> 0x00004080 [ 88.230708][ T3001] [ 88.233054][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 88.239269][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 88.248684][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.259034][ T3001] ==================================================================