last executing test programs: 34.428775719s ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) 33.801743328s ago: executing program 3 (id=13): sigaltstack(&(0x7f0000000000)={&(0x7f0000001b80)=""/4083, 0x80000000, 0xff3}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 33.748476249s ago: executing program 3 (id=15): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 32.213036138s ago: executing program 3 (id=52): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000000d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 32.084097735s ago: executing program 1 (id=54): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0x0) io_uring_enter(r1, 0x2e06, 0x3071, 0x0, 0x0, 0xa5) 32.047868019s ago: executing program 3 (id=56): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x4a4, &(0x7f0000001300)="$eJzs3M1rHGUYAPBndjdJvxNr/WitNlrF4kfSpFULCn6A4EFB0EM9SUzSUps20kRoS7BRSr0IWvAughfRv8CTJ1FPgle9S6FIL62eViY7s26S3U2y+dh8/H4w2Xl33pn3feadj3dmdhLAltWb/kkidkXEHxHRHRGF2gzbK0Oa786tqeF/bk0NJ1Euv/V3ks4Wt29NDedZk+xzZyVRShdUuJrES3XKnbh0+ezQ2NjohSzdP3nug/6JS5efPnNu6PTo6dHzgydOHD828Nyzg8+sSJxpnW4f+Gj84P7X3rn+xvDJ6+/98n0SsSOfXhvHMj3fXR2dqq6TuR5bocLWi90140mpjRVhSboiIm2ujpn9vzuKV/dUp3XHq5+0tXLAqiqXy+XBxpOny8AmlkQrcxWzYwewceUn+vT6Nx/WqOuxLtx8uXIBlMZ9JxsqU0qV+yBdlWuj3atUfm9EnJz+96t0iCXfh+hYpVoBAJvZj2n/56k6/b9SxL01+fZkz4Z6IuKuiNgbEXdHxL6IuCcqee+LiPvrF9P7boPye+ek5/d/CjeWEd6C0v7fC9mzrdn9v+pTsJ5ilto9E39HcurM2OjRbJ0ciY6uND1Qd+lJxHT6+fvnjcqv7f+lQ1p+3hfM6nGj1DV7npGhyaFlB565+XHEgVK9+JMo/R9F7I+IAy2WceaJbw/O/qZYHVs4/iZW4DlT+euIxyvtPx1z4s8lzZ9P9m+LsdGj/flWMd+vv117s1H5lfgL0Tz+7csPtIG0/XfU2/5frMbfk9Q+r52Yt4jOhcq49uenDa9pWt3+O5O3ZxV+cWhy8sJARGfy+vzva25w5+mLI9/N5E/jP3K4/v6/N5snjf+BiEg34gcj4qGIOJTV/eGIeCQiDjeJ/+dXHn2/YfyHFr/9Tzcpo1Vp/CN1j3+N2n8JI9uyJZz96YdG5VfbP2+wuu1/PE/MVGoxx7/F1rSVdQYAAAAbTSEidkVS6KuOFwp9fZXfy++LHYWx8YnJJ0+Nf3h+pPKOQE90FPI7Xd0190MHsnvDeXowS1/J0sey+8ZfFrfPpPuGx8dG2h08bHE7G+z/qb+K7a4dsOrmPUcrd7enIsCa874mbF2t7/+OHLDRLbAXF9aqHsDacxaHrave/n+lNpFE5VfywKbj/A9bV3X//2IRmWte95r78iaw8TQ7//spAGxu+v+wJbX0Xv96GolvIprnSdZLVZc08tlyZi+tQQ2j0Mb109mWRhksRrRxkygt9r9axKXylWUX2u4jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMr4LwAA//9nM9m2") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r1, &(0x7f00000008c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) 31.729212953s ago: executing program 3 (id=59): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x4) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 31.728900312s ago: executing program 32 (id=59): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x4) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 31.425902549s ago: executing program 1 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000014}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 31.31948771s ago: executing program 1 (id=64): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 30.464831539s ago: executing program 1 (id=80): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 29.924539614s ago: executing program 1 (id=87): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) 29.574741602s ago: executing program 1 (id=90): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 29.534214055s ago: executing program 33 (id=90): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 26.95343867s ago: executing program 0 (id=128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffff9a) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5b, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 26.828266557s ago: executing program 0 (id=130): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 26.604315888s ago: executing program 0 (id=134): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x6b]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 26.527789164s ago: executing program 0 (id=136): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000000d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 26.421534115s ago: executing program 0 (id=138): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000003440)='nl80211\x00', 0x40, 0x8, &(0x7f0000003480)={0x0, 0x9, 0x2, 0x7}) mq_timedreceive(r1, &(0x7f00000034c0)=""/34, 0x22, 0x1, 0x0) 26.004405762s ago: executing program 0 (id=144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x1004af) r1 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) 26.004040582s ago: executing program 34 (id=144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x1004af) r1 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) 14.804872884s ago: executing program 4 (id=305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 14.577250914s ago: executing program 4 (id=312): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x180000000) 14.474477286s ago: executing program 4 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) pread64(r0, 0x0, 0x0, 0x4000000002) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0x0, 0x4}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) fchdir(0xffffffffffffffff) fchdir(0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 14.438659689s ago: executing program 4 (id=314): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@nombcache}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 13.539497961s ago: executing program 4 (id=329): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140), 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) 13.231269376s ago: executing program 4 (id=334): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r0, &(0x7f0000005640)=ANY=[@ANYRES16=r2], 0x69) close(r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) 13.209356512s ago: executing program 35 (id=334): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r0, &(0x7f0000005640)=ANY=[@ANYRES16=r2], 0x69) close(r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) 2.417822667s ago: executing program 7 (id=463): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x5, 0x0, 0xabf, 0x1000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}]}]}, 0x1fc}}, 0x4000) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r1, &(0x7f0000000280)={0xa, 0xce1e, 0x8, @dev={0xfe, 0x80, '\x00', 0x28}, 0xb}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 2.223811343s ago: executing program 5 (id=471): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 2.204964669s ago: executing program 7 (id=472): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2f, 0x2718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x0, 0x6, 0x0, 0x1, 0xf9, 0x6, 0x8b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.183465046s ago: executing program 8 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) 2.120089454s ago: executing program 7 (id=474): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.033254569s ago: executing program 5 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x4002000) r2 = socket$inet(0x2, 0x3, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)) 2.032413559s ago: executing program 8 (id=477): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_open_dev$sg(0x0, 0x6f5e, 0x2d42) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.262804563s ago: executing program 7 (id=479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.204612672s ago: executing program 5 (id=481): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) 1.204312132s ago: executing program 8 (id=482): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, 0x0, 0x1}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) 1.193822231s ago: executing program 5 (id=483): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.105297295s ago: executing program 8 (id=485): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00'], 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpid() timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x320480b, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.098902454s ago: executing program 5 (id=486): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_pwait(r3, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 1.095194223s ago: executing program 7 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140)=0x4, 0x4) 1.042355384s ago: executing program 2 (id=489): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 900.692659ms ago: executing program 2 (id=490): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xf}}}, 0x24}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 891.345817ms ago: executing program 8 (id=491): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 764.907285ms ago: executing program 2 (id=493): syz_io_uring_setup(0x10d3, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x20, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd3e, 0x25dfdbfc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0080c0}, 0x0) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="4efe54a7f754a53dc2c98b39f023c8cf5245dc1b31fef34fe2bff5955810fcad084f2dc6e7871c98c1e01fe0230f073d33d984c80bfcde5e", 0x38}], 0x1, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x84) 764.395025ms ago: executing program 7 (id=494): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) unshare(0x40600) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0xc1bc822ee1dc6c92}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 741.641441ms ago: executing program 2 (id=495): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 703.366664ms ago: executing program 8 (id=496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 585.209753ms ago: executing program 6 (id=497): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x1ff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) 561.615699ms ago: executing program 6 (id=498): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56a8, &(0x7f0000000040)={0x0, 0xb06c, 0xc000, 0x3, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 395.83212ms ago: executing program 6 (id=499): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'gre0\x00'}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[], 0x0) 304.342454ms ago: executing program 6 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd22, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 303.517544ms ago: executing program 2 (id=501): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)="5b87db60027b6dd17acfbce428a815dce3cf5159d6281cdbf6bf50db40e0d571f839e10ba383995d1212939be9f7f6295be00400d597eeb951471552ea523e74237e48aff21f5af5974b7d7d8f109c4c34e6b59486", 0x0}, 0x20) 202.554906ms ago: executing program 6 (id=502): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00'], 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpid() timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x320480b, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.07122ms ago: executing program 2 (id=503): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 669.12µs ago: executing program 5 (id=504): symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') unlink(0x0) socket$inet6(0xa, 0x80000, 0x38) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r0 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42040, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aedb7e19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007d0efb7e91a9dbde2353f035347270d076c93f1b1a810cb2c7d72ee9ce76e6da15600893bc36f6502f0000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): [ 19.220057][ T28] audit: type=1400 audit(1772670774.337:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.242181][ T28] audit: type=1400 audit(1772670774.337:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.264864][ T28] audit: type=1400 audit(1772670774.337:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.287737][ T28] audit: type=1400 audit(1772670774.337:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.310679][ T28] audit: type=1400 audit(1772670774.337:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 24.659088][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.659103][ T28] audit: type=1400 audit(1772670779.767:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.687984][ T28] audit: type=1400 audit(1772670779.797:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.688726][ T3298] cgroup: Unknown subsys name 'net' [ 24.715699][ T28] audit: type=1400 audit(1772670779.827:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.860517][ T3298] cgroup: Unknown subsys name 'cpuset' [ 24.866531][ T3298] cgroup: Unknown subsys name 'rlimit' [ 24.995691][ T28] audit: type=1400 audit(1772670780.107:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.020012][ T28] audit: type=1400 audit(1772670780.107:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.048934][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.052981][ T28] audit: type=1400 audit(1772670780.107:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.077989][ T28] audit: type=1400 audit(1772670780.107:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.098229][ T28] audit: type=1400 audit(1772670780.117:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.123148][ T28] audit: type=1400 audit(1772670780.117:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.146369][ T28] audit: type=1400 audit(1772670780.157:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.176442][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.224064][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.280802][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.312493][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 26.349196][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.356549][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.364137][ T3310] bridge_slave_0: entered allmulticast mode [ 26.370611][ T3310] bridge_slave_0: entered promiscuous mode [ 26.387126][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.398080][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.405546][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.412666][ T3310] bridge_slave_1: entered allmulticast mode [ 26.418964][ T3310] bridge_slave_1: entered promiscuous mode [ 26.464688][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.471776][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.478974][ T3311] bridge_slave_0: entered allmulticast mode [ 26.485712][ T3311] bridge_slave_0: entered promiscuous mode [ 26.492272][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 26.504218][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.518179][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.527383][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.534535][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.541764][ T3311] bridge_slave_1: entered allmulticast mode [ 26.547940][ T3311] bridge_slave_1: entered promiscuous mode [ 26.586232][ T3310] team0: Port device team_slave_0 added [ 26.591939][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.599059][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.606239][ T3321] bridge_slave_0: entered allmulticast mode [ 26.612639][ T3321] bridge_slave_0: entered promiscuous mode [ 26.619702][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.640973][ T3310] team0: Port device team_slave_1 added [ 26.646669][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.653733][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.660844][ T3321] bridge_slave_1: entered allmulticast mode [ 26.667126][ T3321] bridge_slave_1: entered promiscuous mode [ 26.674119][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.683212][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.690357][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.697551][ T3316] bridge_slave_0: entered allmulticast mode [ 26.703927][ T3316] bridge_slave_0: entered promiscuous mode [ 26.724457][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.731723][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.738793][ T3316] bridge_slave_1: entered allmulticast mode [ 26.745176][ T3316] bridge_slave_1: entered promiscuous mode [ 26.767460][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.777429][ T3311] team0: Port device team_slave_0 added [ 26.791156][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.798107][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.824090][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.835624][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.845458][ T3311] team0: Port device team_slave_1 added [ 26.860632][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.870046][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.876984][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.903400][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.925026][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.932163][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.939227][ T3320] bridge_slave_0: entered allmulticast mode [ 26.945778][ T3320] bridge_slave_0: entered promiscuous mode [ 26.952796][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.971016][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.978096][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.985512][ T3320] bridge_slave_1: entered allmulticast mode [ 26.991943][ T3320] bridge_slave_1: entered promiscuous mode [ 27.007145][ T3321] team0: Port device team_slave_0 added [ 27.013102][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.020264][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.046151][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.069894][ T3316] team0: Port device team_slave_0 added [ 27.076218][ T3321] team0: Port device team_slave_1 added [ 27.086155][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.093139][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.119060][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.137494][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.147567][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.157389][ T3316] team0: Port device team_slave_1 added [ 27.176599][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.183586][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.209483][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.222681][ T3310] hsr_slave_0: entered promiscuous mode [ 27.228583][ T3310] hsr_slave_1: entered promiscuous mode [ 27.244800][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.251817][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.277706][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.289247][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.296204][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.323868][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.339287][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.346264][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.372244][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.395493][ T3320] team0: Port device team_slave_0 added [ 27.402259][ T3320] team0: Port device team_slave_1 added [ 27.428557][ T3311] hsr_slave_0: entered promiscuous mode [ 27.434488][ T3311] hsr_slave_1: entered promiscuous mode [ 27.440408][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.446107][ T3311] Cannot create hsr debugfs directory [ 27.462875][ T3316] hsr_slave_0: entered promiscuous mode [ 27.468626][ T3316] hsr_slave_1: entered promiscuous mode [ 27.474641][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.480367][ T3316] Cannot create hsr debugfs directory [ 27.500999][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.507945][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.533852][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.545142][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.552279][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.578442][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.593389][ T3321] hsr_slave_0: entered promiscuous mode [ 27.599340][ T3321] hsr_slave_1: entered promiscuous mode [ 27.605189][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 27.610924][ T3321] Cannot create hsr debugfs directory [ 27.703431][ T3320] hsr_slave_0: entered promiscuous mode [ 27.709391][ T3320] hsr_slave_1: entered promiscuous mode [ 27.715428][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 27.721171][ T3320] Cannot create hsr debugfs directory [ 27.815723][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.828079][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.841597][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.856471][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.876502][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.889195][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.900211][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.910739][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.930975][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.943441][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.960787][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.973904][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.983821][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.998043][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.011478][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.020619][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.051384][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.059488][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.071935][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.080329][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.094467][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.123102][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.139325][ T2787] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.146397][ T2787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.171159][ T2787] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.178297][ T2787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.207591][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.231749][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.241696][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.252249][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.263274][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.272220][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.279261][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.299416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.306515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.314958][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.326100][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.335226][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.346128][ T2787] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.353228][ T2787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.364341][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.371393][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.386119][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.396616][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.410400][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.417466][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.432966][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.440022][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.458724][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.472115][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.479216][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.489517][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.496639][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.516414][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.527773][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.629366][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.673055][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.687616][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.699104][ T3310] veth0_vlan: entered promiscuous mode [ 28.715118][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.725714][ T3310] veth1_vlan: entered promiscuous mode [ 28.773349][ T3310] veth0_macvtap: entered promiscuous mode [ 28.801894][ T3310] veth1_macvtap: entered promiscuous mode [ 28.828483][ T3316] veth0_vlan: entered promiscuous mode [ 28.859387][ T3320] veth0_vlan: entered promiscuous mode [ 28.866646][ T3316] veth1_vlan: entered promiscuous mode [ 28.876032][ T3320] veth1_vlan: entered promiscuous mode [ 28.883974][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.900604][ T3311] veth0_vlan: entered promiscuous mode [ 28.911351][ T3321] veth0_vlan: entered promiscuous mode [ 28.926091][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.934025][ T3311] veth1_vlan: entered promiscuous mode [ 28.947554][ T3316] veth0_macvtap: entered promiscuous mode [ 28.954689][ T3320] veth0_macvtap: entered promiscuous mode [ 28.962145][ T3321] veth1_vlan: entered promiscuous mode [ 28.972905][ T3320] veth1_macvtap: entered promiscuous mode [ 28.985401][ T3311] veth0_macvtap: entered promiscuous mode [ 28.992397][ T3316] veth1_macvtap: entered promiscuous mode [ 28.998542][ T309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.008134][ T309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.024439][ T3311] veth1_macvtap: entered promiscuous mode [ 29.030964][ T309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.043212][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.052131][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.059863][ T3321] veth0_macvtap: entered promiscuous mode [ 29.071888][ T309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.086189][ T3321] veth1_macvtap: entered promiscuous mode [ 29.093976][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.101545][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.110441][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.125035][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.132626][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.141451][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.156575][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.175620][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.191021][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.200351][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.210873][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.226861][ T2787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.245078][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.265299][ T2787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.275056][ T3481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.283474][ T2787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.292599][ T2787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.302042][ T3481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.322006][ T2787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.337090][ T2787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.379984][ T2787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.388725][ T2787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.419840][ T2787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.432018][ T2787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.589309][ T2787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.668775][ T3499] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 29.695801][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 29.695817][ T28] audit: type=1400 audit(1772670784.807:118): avc: denied { create } for pid=3502 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.726861][ T28] audit: type=1400 audit(1772670784.807:119): avc: denied { create } for pid=3502 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.746187][ T28] audit: type=1400 audit(1772670784.807:120): avc: denied { setopt } for pid=3502 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.748639][ T3499] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 29.774690][ T28] audit: type=1400 audit(1772670784.887:121): avc: denied { write } for pid=3502 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.806953][ T28] audit: type=1400 audit(1772670784.887:122): avc: denied { connect } for pid=3502 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.854314][ T28] audit: type=1400 audit(1772670784.887:123): avc: denied { name_connect } for pid=3502 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 29.899377][ C0] hrtimer: interrupt took 27672 ns [ 29.909874][ T28] audit: type=1400 audit(1772670784.917:124): avc: denied { cpu } for pid=3507 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.939711][ T28] audit: type=1400 audit(1772670784.937:125): avc: denied { shutdown } for pid=3502 comm="syz.1.8" lport=46977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.965821][ T28] audit: type=1400 audit(1772670785.007:126): avc: denied { getopt } for pid=3514 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.986325][ T28] audit: type=1400 audit(1772670785.007:127): avc: denied { name_connect } for pid=3514 comm="syz.3.13" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 30.304399][ T3531] loop2: detected capacity change from 0 to 512 [ 30.314555][ T3531] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 30.326526][ T3535] netlink: 'syz.0.20': attribute type 22 has an invalid length. [ 30.350506][ T3531] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.18: iget: bogus i_mode (2) [ 30.370568][ T3531] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 30.370848][ T3531] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.18: couldn't read orphan inode 15 (err -117) [ 30.380009][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 30.380024][ C1] EXT4-fs (loop2): initial error at time 1772670785: ext4_orphan_get:1391: inode 15 [ 30.380069][ C1] EXT4-fs (loop2): last error at time 1772670785: ext4_orphan_get:1391: inode 15 [ 30.389557][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 30.391937][ T3531] loop2: lost filesystem error report for type 5 error -117 [ 30.426656][ T3531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.462259][ T3531] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 30.492353][ T2787] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.492378][ T3535] netlink: 'syz.0.20': attribute type 22 has an invalid length. [ 30.501605][ T2787] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.517881][ T2787] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.530750][ T3531] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.18: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 30.550048][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 30.551416][ T2787] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 30.604380][ T3543] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.18: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 30.630170][ T3535] Zero length message leads to an empty skb [ 30.693569][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.832517][ T3563] loop4: detected capacity change from 0 to 164 [ 30.841043][ T3563] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.854079][ T3563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'. [ 30.949126][ T3573] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 30.957240][ T3573] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 30.966196][ T3573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=3573 comm=syz.2.37 [ 31.263403][ T3586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.43'. [ 31.485217][ T3609] loop3: detected capacity change from 0 to 256 [ 31.486668][ T3602] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿÿ [ 31.542171][ T3609] ======================================================= [ 31.542171][ T3609] WARNING: The mand mount option has been deprecated and [ 31.542171][ T3609] and is ignored by this kernel. Remove the mand [ 31.542171][ T3609] option from the mount to silence this warning. [ 31.542171][ T3609] ======================================================= [ 31.636431][ T3310] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 31.646811][ T3310] FAT-fs (loop3): Filesystem has been set read-only [ 31.654873][ T3310] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 31.705053][ T3622] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET) [ 31.920103][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.977835][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.990625][ T3628] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 32.024819][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.055709][ T3606] syz.2.51 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 32.071251][ T3606] CPU: 0 UID: 0 PID: 3606 Comm: syz.2.51 Not tainted syzkaller #0 PREEMPT(full) [ 32.071357][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.071380][ T3606] Call Trace: [ 32.071387][ T3606] [ 32.071394][ T3606] __dump_stack+0x1d/0x30 [ 32.071489][ T3606] dump_stack_lvl+0x95/0xd0 [ 32.071512][ T3606] dump_stack+0x15/0x1b [ 32.071648][ T3606] dump_header+0x80/0x240 [ 32.071676][ T3606] oom_kill_process+0x295/0x350 [ 32.071703][ T3606] out_of_memory+0x97d/0xb80 [ 32.071726][ T3606] try_charge_memcg+0x62e/0xa10 [ 32.071853][ T3606] obj_cgroup_charge_pages+0x23/0xc0 [ 32.071888][ T3606] __memcg_kmem_charge_page+0x9e/0x170 [ 32.071929][ T3606] __alloc_frozen_pages_noprof+0x18a/0x360 [ 32.072025][ T3606] alloc_pages_mpol+0xb3/0x260 [ 32.072060][ T3606] alloc_pages_noprof+0x8f/0x130 [ 32.072129][ T3606] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 32.072170][ T3606] __kvmalloc_node_noprof+0x3d4/0x650 [ 32.072201][ T3606] ? futex_hash_allocate+0x190/0x9d0 [ 32.072235][ T3606] ? futex_hash_allocate+0x190/0x9d0 [ 32.072339][ T3606] futex_hash_allocate+0x190/0x9d0 [ 32.072374][ T3606] ? cap_task_prctl+0x13f/0x6e0 [ 32.072401][ T3606] futex_hash_prctl+0xd8/0xf0 [ 32.072486][ T3606] __se_sys_prctl+0xa3d/0x13f0 [ 32.072521][ T3606] __x64_sys_prctl+0x67/0x80 [ 32.072626][ T3606] x64_sys_call+0x2533/0x3020 [ 32.072706][ T3606] do_syscall_64+0x12c/0x370 [ 32.072731][ T3606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.072758][ T3606] RIP: 0033:0x7ff4265ac799 [ 32.072782][ T3606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.072799][ T3606] RSP: 002b:00007ff425007028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 32.072843][ T3606] RAX: ffffffffffffffda RBX: 00007ff426825fa0 RCX: 00007ff4265ac799 [ 32.072861][ T3606] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 32.072878][ T3606] RBP: 00007ff426642bd9 R08: 0000000000000000 R09: 0000000000000000 [ 32.072953][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.072969][ T3606] R13: 00007ff426826038 R14: 00007ff426825fa0 R15: 00007ffe0a75d5a8 [ 32.072991][ T3606] [ 32.073047][ T3606] memory: usage 307200kB, limit 307200kB, failcnt 130 [ 32.303941][ T3637] team0: Port device team_slave_0 removed [ 32.311563][ T3606] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 32.319562][ T3606] kmem: usage 306976kB, limit 9007199254740988kB, failcnt 0 [ 32.326914][ T3606] Memory cgroup stats for /syz2: [ 32.327181][ T3606] cache 40960 [ 32.356483][ T3606] rss 176128 [ 32.359695][ T3606] shmem 0 [ 32.363051][ T3606] mapped_file 40960 [ 32.366952][ T3606] dirty 8192 [ 32.379843][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.400401][ T3606] writeback 8192 [ 32.409701][ T3629] chnl_net:caif_netlink_parms(): no params data found [ 32.423194][ T3606] workingset_refault_anon 0 [ 32.427827][ T3645] syz_tun: entered promiscuous mode [ 32.434339][ T3645] vlan2: entered promiscuous mode [ 32.440697][ T3606] workingset_refault_file 0 [ 32.445265][ T3606] swap 0 [ 32.451771][ T3606] swapcached 12288 [ 32.455540][ T3606] pgpgin 914 [ 32.458796][ T3606] pgpgout 858 [ 32.465482][ T3606] pgfault 1568 [ 32.468874][ T3606] pgmajfault 3 [ 32.473575][ T3606] inactive_anon 172032 [ 32.477645][ T3606] active_anon 4096 [ 32.482448][ T3606] inactive_file 0 [ 32.486205][ T3606] active_file 40960 [ 32.490166][ T3606] unevictable 0 [ 32.497511][ T3606] hierarchical_memory_limit 314572800 [ 32.542379][ T3606] hierarchical_memsw_limit 9223372036854771712 [ 32.561468][ T3606] total_cache 40960 [ 32.565441][ T3606] total_rss 176128 [ 32.572478][ T56] bridge_slave_1: left allmulticast mode [ 32.578561][ T56] bridge_slave_1: left promiscuous mode [ 32.581924][ T3660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=3660 comm=syz.4.68 [ 32.584375][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.604044][ T3606] total_shmem 0 [ 32.607549][ T3606] total_mapped_file 40960 [ 32.616021][ T56] bridge_slave_0: left allmulticast mode [ 32.622125][ T3606] total_dirty 8192 [ 32.623952][ T56] bridge_slave_0: left promiscuous mode [ 32.635653][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.641681][ T3606] total_writeback 8192 [ 32.660513][ T3606] total_workingset_refault_anon 0 [ 32.665542][ T3606] total_workingset_refault_file 0 [ 32.677449][ T3606] total_swap 0 [ 32.681769][ T3606] total_swapcached 12288 [ 32.686153][ T3606] total_pgpgin 914 [ 32.690120][ T3606] total_pgpgout 858 [ 32.694221][ T3606] total_pgfault 1568 [ 32.699087][ T3606] total_pgmajfault 3 [ 32.703400][ T3606] total_inactive_anon 172032 [ 32.708833][ T3606] total_active_anon 4096 [ 32.714027][ T3606] total_inactive_file 0 [ 32.718308][ T3606] total_active_file 40960 [ 32.723074][ T3606] total_unevictable 0 [ 32.743010][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.744159][ T3606] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.51,pid=3605,uid=0 [ 32.768543][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.775891][ T3606] Memory cgroup out of memory: Killed process 3605 (syz.2.51) total-vm:96208kB, anon-rss:1244kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 32.795106][ T56] bond0 (unregistering): Released all slaves [ 32.801466][ T3605] syz.2.51 (3605) used greatest stack depth: 9576 bytes left [ 32.810282][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.817508][ T3629] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.824903][ T3629] bridge_slave_0: entered allmulticast mode [ 32.831873][ T3629] bridge_slave_0: entered promiscuous mode [ 32.847277][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.874173][ T3629] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.921828][ T3629] bridge_slave_1: entered allmulticast mode [ 32.936467][ T3629] bridge_slave_1: entered promiscuous mode [ 32.980046][ T56] hsr_slave_0: left promiscuous mode [ 32.986716][ T56] hsr_slave_1: left promiscuous mode [ 32.992539][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.001458][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.009047][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.016555][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.026899][ T56] veth1_macvtap: left promiscuous mode [ 33.032532][ T56] veth0_macvtap: left promiscuous mode [ 33.038205][ T56] veth1_vlan: left promiscuous mode [ 33.043583][ T56] veth0_vlan: left promiscuous mode [ 33.170430][ T56] team0 (unregistering): Port device team_slave_1 removed [ 33.180689][ T56] team0 (unregistering): Port device team_slave_0 removed [ 33.230324][ T3704] loop1: detected capacity change from 0 to 1024 [ 33.235237][ T3629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.245165][ T3704] EXT4-fs: Ignoring removed bh option [ 33.256175][ T3704] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.272162][ T3629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.311019][ T3629] team0: Port device team_slave_0 added [ 33.317527][ T3629] team0: Port device team_slave_1 added [ 33.334364][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.341791][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.369730][ T3629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.415048][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.424176][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.434258][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.441061][ T3704] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.460991][ T3629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.570339][ T3704] loop1: detected capacity change from 1024 to 0 [ 33.576759][ C1] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 33.586504][ C1] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x880700 phys_seg 5 prio class 2 [ 33.596203][ C1] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 33.606959][ T3723] EXT4-fs error (device loop1): ext4_get_inode_loc:4920: inode #15: block 8: comm syz.1.80: unable to read itable block [ 33.608119][ T3629] hsr_slave_0: entered promiscuous mode [ 33.622128][ T3723] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 33.648819][ T3629] hsr_slave_1: entered promiscuous mode [ 33.653004][ T3723] EXT4-fs (loop1): I/O error while writing superblock [ 33.680885][ T3723] EXT4-fs (loop1): Remounting filesystem read-only [ 33.798516][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.826382][ T3629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.842306][ T3629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.851513][ T3709] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 33.869126][ T3629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 33.904866][ T3629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 33.978420][ T3629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.001467][ T3629] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.012532][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.019723][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.025828][ T3768] loop4: detected capacity change from 0 to 512 [ 34.065223][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.072331][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.130242][ T3768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.169601][ T2787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.188323][ T3768] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.250628][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.285180][ T3789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 34.301859][ T2787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.349072][ T3629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.393424][ T3805] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.420476][ T2787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.489293][ T2787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.584847][ T2787] bridge_slave_1: left allmulticast mode [ 34.599373][ T2787] bridge_slave_1: left promiscuous mode [ 34.610715][ T2787] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.618669][ T2787] bridge_slave_0: left allmulticast mode [ 34.627542][ T2787] bridge_slave_0: left promiscuous mode [ 34.634267][ T2787] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.732225][ T2787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.743640][ T2787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.755230][ T2787] bond0 (unregistering): Released all slaves [ 34.766632][ T3837] loop2: detected capacity change from 0 to 512 [ 34.805928][ T3837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.829066][ T3837] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.860080][ T3629] veth0_vlan: entered promiscuous mode [ 34.868033][ T2787] hsr_slave_0: left promiscuous mode [ 34.901924][ T2787] hsr_slave_1: left promiscuous mode [ 34.913814][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.924312][ T2787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.933005][ T2787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.954444][ T2787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.971394][ T2787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.986656][ T2787] veth1_macvtap: left promiscuous mode [ 35.010065][ T2787] veth0_macvtap: left promiscuous mode [ 35.016126][ T2787] veth1_vlan: left promiscuous mode [ 35.021688][ T2787] veth0_vlan: left promiscuous mode [ 35.081863][ T2787] team0 (unregistering): Port device team_slave_1 removed [ 35.092061][ T2787] team0 (unregistering): Port device team_slave_0 removed [ 35.129713][ T3781] chnl_net:caif_netlink_parms(): no params data found [ 35.141434][ T3847] syz_tun: entered promiscuous mode [ 35.146689][ T3847] vlan2: entered promiscuous mode [ 35.215972][ T3629] veth1_vlan: entered promiscuous mode [ 35.251055][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.258206][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.266192][ T3781] bridge_slave_0: entered allmulticast mode [ 35.273707][ T3781] bridge_slave_0: entered promiscuous mode [ 35.293902][ T3629] veth0_macvtap: entered promiscuous mode [ 35.306507][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.313889][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.321192][ T3781] bridge_slave_1: entered allmulticast mode [ 35.327804][ T3781] bridge_slave_1: entered promiscuous mode [ 35.350729][ T3629] veth1_macvtap: entered promiscuous mode [ 35.361356][ T3873] v: renamed from ip6_vti0 (while UP) [ 35.375726][ T3781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.397256][ T3781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.435559][ T3879] netlink: 'syz.4.109': attribute type 22 has an invalid length. [ 35.446491][ T3781] team0: Port device team_slave_0 added [ 35.453174][ T3781] team0: Port device team_slave_1 added [ 35.458908][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 35.469270][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.492927][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.501883][ T3879] netlink: 'syz.4.109': attribute type 22 has an invalid length. [ 35.509692][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 35.518768][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.528979][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.542700][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.550690][ T3781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.557640][ T3781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.584351][ T3781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.596507][ T3781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.603492][ T3781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.629735][ T3781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.644006][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.675299][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.684356][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.701095][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.710752][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.727920][ T3781] hsr_slave_0: entered promiscuous mode [ 35.734173][ T3781] hsr_slave_1: entered promiscuous mode [ 35.739859][ T3781] debugfs: 'hsr0' already exists in 'hsr' [ 35.745884][ T3781] Cannot create hsr debugfs directory [ 35.770266][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 35.770279][ T28] audit: type=1400 audit(1772670790.887:230): avc: denied { mounton } for pid=3629 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.804136][ T3896] loop0: detected capacity change from 0 to 4096 [ 35.829836][ T3896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.920631][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.989467][ T3915] loop2: detected capacity change from 0 to 1024 [ 36.040475][ T3915] EXT4-fs: inline encryption not supported [ 36.076161][ T3915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.095657][ T3781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 36.111340][ T3781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 36.186458][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.205942][ T3781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 36.235212][ T28] audit: type=1400 audit(1772670791.347:231): avc: denied { ioctl } for pid=3944 comm="syz.0.121" path="socket:[7204]" dev="sockfs" ino=7204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.288791][ T3781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 36.312127][ T28] audit: type=1400 audit(1772670791.347:232): avc: denied { bind } for pid=3944 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.341041][ T3953] syz_tun: entered promiscuous mode [ 36.346443][ T3953] vlan2: entered promiscuous mode [ 36.363428][ T28] audit: type=1400 audit(1772670791.397:233): avc: denied { read } for pid=3944 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.412594][ T28] audit: type=1400 audit(1772670791.527:234): avc: denied { setopt } for pid=3962 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.520443][ T3963] batadv_slave_1: entered promiscuous mode [ 36.537544][ T3978] pimreg: entered allmulticast mode [ 36.587676][ T3962] batadv_slave_1: left promiscuous mode [ 36.622134][ T3781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.633907][ T3781] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.647205][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.654399][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.671345][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.678697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.837171][ T3781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.114610][ T4022] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 37.163299][ T4026] loop0: detected capacity change from 0 to 256 [ 37.195276][ T28] audit: type=1400 audit(1772670792.307:235): avc: denied { mounton } for pid=4025 comm="syz.0.136" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 37.197379][ T4022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.252706][ T3781] veth0_vlan: entered promiscuous mode [ 37.263320][ T3316] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 37.271193][ T3316] FAT-fs (loop0): Filesystem has been set read-only [ 37.273472][ T4030] bond1: (slave dummy0): making interface the new active one [ 37.277990][ T3316] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 37.308784][ T28] audit: type=1400 audit(1772670792.387:236): avc: denied { create } for pid=4029 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.321192][ T4030] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 37.340418][ T3781] veth1_vlan: entered promiscuous mode [ 37.360034][ T3781] veth0_macvtap: entered promiscuous mode [ 37.367785][ T28] audit: type=1400 audit(1772670792.417:237): avc: denied { bind } for pid=4029 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.394352][ T28] audit: type=1400 audit(1772670792.417:238): avc: denied { listen } for pid=4029 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.421658][ T3781] veth1_macvtap: entered promiscuous mode [ 37.429764][ T28] audit: type=1400 audit(1772670792.417:239): avc: denied { accept } for pid=4029 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.454299][ T4022] bond1 (unregistering): (slave dummy0): Releasing active interface [ 37.470348][ T4022] bond1 (unregistering): Released all slaves [ 37.490298][ T3781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.500619][ T3781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.511879][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.520862][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.534269][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.543554][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.584984][ T4039] bond1: entered promiscuous mode [ 37.590411][ T4039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.622452][ T4039] bridge1: entered promiscuous mode [ 37.674380][ T35] IPVS: starting estimator thread 0... [ 37.716711][ T2787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 37.729095][ T2787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.780027][ T4050] IPVS: using max 2496 ests per chain, 124800 per kthread [ 37.840172][ T2787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 37.852991][ T2787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.927813][ T2787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 37.938178][ T2787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.060437][ T2787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.100038][ T2787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.207763][ T4055] chnl_net:caif_netlink_parms(): no params data found [ 38.725275][ T4055] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.734394][ T4055] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.742144][ T4055] bridge_slave_0: entered allmulticast mode [ 38.748687][ T4055] bridge_slave_0: entered promiscuous mode [ 38.759437][ T4055] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.769071][ T4055] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.777164][ T4055] bridge_slave_1: entered allmulticast mode [ 38.783723][ T4055] bridge_slave_1: entered promiscuous mode [ 38.808556][ T4055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.819785][ T4055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.856592][ T2787] bridge_slave_1: left allmulticast mode [ 38.862499][ T2787] bridge_slave_1: left promiscuous mode [ 38.868940][ T2787] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.891704][ T2787] bridge_slave_0: left allmulticast mode [ 38.897507][ T2787] bridge_slave_0: left promiscuous mode [ 38.903442][ T2787] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.078429][ T2787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.101506][ T2787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.117213][ T2787] bond0 (unregistering): Released all slaves [ 39.139238][ T4055] team0: Port device team_slave_0 added [ 39.146027][ T4055] team0: Port device team_slave_1 added [ 39.184160][ T2787] hsr_slave_0: left promiscuous mode [ 39.214696][ T2787] hsr_slave_1: left promiscuous mode [ 39.225986][ T2787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.245930][ T2787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.275523][ T2787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.282270][ T4161] loop2: detected capacity change from 0 to 1024 [ 39.284519][ T2787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.350543][ T2787] veth1_macvtap: left promiscuous mode [ 39.356184][ T2787] veth0_macvtap: left promiscuous mode [ 39.362238][ T2787] veth1_vlan: left promiscuous mode [ 39.366775][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.367529][ T2787] veth0_vlan: left promiscuous mode [ 39.385266][ T4161] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.408896][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.172'. [ 39.441469][ T2787] pimreg (unregistering): left allmulticast mode [ 39.477884][ T2787] team0 (unregistering): Port device team_slave_1 removed [ 39.507307][ T4179] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.168: bg 0: block 112: padding at end of block bitmap is not set [ 39.525230][ T4179] EXT4-fs (loop2): Remounting filesystem read-only [ 39.546785][ T4055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.553940][ T4055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.580203][ T4055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.591612][ T4055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.599116][ T4055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.625628][ T4055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.628362][ T4182] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.654453][ T4182] capability: warning: `syz.6.174' uses 32-bit capabilities (legacy support in use) [ 39.699001][ T4055] hsr_slave_0: entered promiscuous mode [ 39.705244][ T4055] hsr_slave_1: entered promiscuous mode [ 39.711286][ T4055] debugfs: 'hsr0' already exists in 'hsr' [ 39.723694][ T4055] Cannot create hsr debugfs directory [ 39.883320][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.913551][ T4055] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 39.943500][ T4055] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 40.094118][ T4055] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 40.626128][ T4055] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 40.864290][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 40.864306][ T28] audit: type=1400 audit(1772670795.977:271): avc: denied { bind } for pid=4245 comm="syz.5.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.906644][ T4250] bridge1: entered promiscuous mode [ 40.923053][ T4250] bridge1: entered allmulticast mode [ 40.943925][ T4055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.959920][ T4055] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.978784][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.985876][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.017695][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.024800][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.255815][ T4055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.262834][ T28] audit: type=1400 audit(1772670796.367:272): avc: denied { map } for pid=4289 comm="syz.5.194" path="socket:[8188]" dev="sockfs" ino=8188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 41.493965][ T4055] veth0_vlan: entered promiscuous mode [ 41.518679][ T4055] veth1_vlan: entered promiscuous mode [ 41.559014][ T4055] veth0_macvtap: entered promiscuous mode [ 41.580947][ T4055] veth1_macvtap: entered promiscuous mode [ 41.598275][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.617717][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.635261][ T3462] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.662996][ T3462] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.681201][ T3462] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.701094][ T3462] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.173085][ T4321] netlink: 'syz.4.198': attribute type 13 has an invalid length. [ 42.210043][ T28] audit: type=1400 audit(1772670797.307:273): avc: denied { accept } for pid=4322 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.302434][ T28] audit: type=1400 audit(1772670797.417:274): avc: denied { read } for pid=4326 comm="syz.5.202" path="socket:[9254]" dev="sockfs" ino=9254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.329640][ T4331] loop6: detected capacity change from 0 to 1024 [ 42.359076][ T4331] EXT4-fs: inline encryption not supported [ 42.405042][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.405437][ T4339] loop2: detected capacity change from 0 to 512 [ 42.412552][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.430708][ T4331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.436488][ T4339] EXT4-fs: Ignoring removed orlov option [ 42.505029][ T4339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.521913][ T28] audit: type=1400 audit(1772670797.637:275): avc: denied { ioctl } for pid=4325 comm="syz.7.201" path="socket:[8827]" dev="sockfs" ino=8827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.561023][ T3781] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.576861][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.587546][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.624145][ T4339] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.636939][ T4339] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.205: bg 0: block 248: padding at end of block bitmap is not set [ 42.655929][ T4339] loop2: lost filesystem error report for type 5 error -117 [ 42.656161][ T4339] Quota error (device loop2): write_blk: dquota write failed [ 42.663542][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 42.663562][ C0] EXT4-fs (loop2): last error at time 1772670797: ext4_validate_block_bitmap:441 [ 42.691800][ T4339] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 42.705376][ T4339] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.205: Failed to acquire dquot type 1 [ 42.723523][ T4339] loop2: lost filesystem error report for type 5 error -117 [ 42.724088][ T4339] EXT4-fs (loop2): 1 truncate cleaned up [ 42.759489][ T30] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.785092][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.796894][ T4339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.824545][ T30] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.839897][ T28] audit: type=1400 audit(1772670797.957:276): avc: denied { bind } for pid=4352 comm="syz.7.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.846084][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.879446][ T4339] EXT4-fs: Ignoring removed orlov option [ 42.884007][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.209'. [ 42.889507][ T4339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.920121][ T28] audit: type=1400 audit(1772670797.957:277): avc: denied { setopt } for pid=4352 comm="syz.7.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.950082][ T4339] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 42.957907][ T28] audit: type=1400 audit(1772670797.987:278): avc: denied { remount } for pid=4338 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.980585][ T4354] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.996576][ T30] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.014454][ T4339] EXT4-fs error (device loop2): __ext4_remount:6804: comm syz.2.205: Abort forced by user [ 43.024597][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.034411][ T30] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.040984][ T4339] EXT4-fs (loop2): Remounting filesystem read-only [ 43.045126][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.062132][ T4359] netlink: 92 bytes leftover after parsing attributes in process `syz.6.209'. [ 43.075461][ T4339] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.102424][ T4339] ext4 filesystem being remounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.136400][ T4339] syz.2.205 (4339) used greatest stack depth: 9240 bytes left [ 43.161378][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.171451][ T4367] loop5: detected capacity change from 0 to 764 [ 43.190111][ T4367] iso9660: Unknown parameter ' [ 43.190111][ T4367] %';ºª™!ˆ²5†ÐPq¤´ÆëºB«€œ‰r)š18446744073709551615ÿ0xffffffffffffffff' [ 43.316683][ T4380] loop2: detected capacity change from 0 to 4096 [ 43.359826][ T4380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.438147][ T4377] loop5: detected capacity change from 0 to 512 [ 43.568944][ T4377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.591530][ T4377] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.644011][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.730161][ T4354] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.873993][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 43.928090][ T3629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.966131][ T4404] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 44.036438][ T4407] loop5: detected capacity change from 0 to 1024 [ 44.060452][ T4407] EXT4-fs: Ignoring removed orlov option [ 44.067206][ T4407] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.101163][ T4407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.199081][ T3629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.835591][ T4438] netlink: 32 bytes leftover after parsing attributes in process `syz.5.236'. [ 44.849762][ T4354] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.027336][ T4354] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.115988][ T310] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.133224][ T30] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.158536][ T30] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.202043][ T30] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.659698][ T4483] loop2: detected capacity change from 0 to 128 [ 45.710346][ T4488] loop4: detected capacity change from 0 to 256 [ 45.724549][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.735590][ T4488] FAT-fs (loop4): Filesystem has been set read-only [ 45.743210][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.752923][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.762844][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.772380][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.782350][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.792967][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.803798][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.813723][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.822827][ T4488] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.248835][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 46.248865][ T28] audit: type=1400 audit(1772670801.357:302): avc: denied { write } for pid=4510 comm="syz.6.267" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.249530][ T3419] IPVS: starting estimator thread 0... [ 46.375262][ T28] audit: type=1400 audit(1772670801.487:303): avc: denied { getopt } for pid=4519 comm="syz.6.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.409099][ T28] audit: type=1400 audit(1772670801.487:304): avc: denied { setopt } for pid=4519 comm="syz.6.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.419992][ T4512] IPVS: using max 2448 ests per chain, 122400 per kthread [ 46.553933][ T28] audit: type=1400 audit(1772670801.667:305): avc: denied { bind } for pid=4532 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.843971][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 46.891534][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 46.938983][ T4569] team0 (unregistering): Port device team_slave_0 removed [ 46.964171][ T4569] team0 (unregistering): Port device team_slave_1 removed [ 47.216564][ T4606] loop7: detected capacity change from 0 to 1024 [ 47.245347][ T28] audit: type=1400 audit(1772670802.357:306): avc: denied { create } for pid=4607 comm="syz.5.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 47.282224][ T4606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.319044][ T4601] loop4: detected capacity change from 0 to 8192 [ 47.362009][ T4606] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.285: inode #1633771873: comm syz.7.285: iget: illegal inode # [ 47.381888][ T28] audit: type=1400 audit(1772670802.467:307): avc: denied { setattr } for pid=4605 comm="syz.7.285" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.420179][ T4606] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.285: error while reading EA inode 1633771873 err=-117 [ 47.476933][ T28] audit: type=1400 audit(1772670802.467:308): avc: denied { link } for pid=4605 comm="syz.7.285" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.568283][ T4055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.587899][ T28] audit: type=1400 audit(1772670802.627:309): avc: denied { create } for pid=4620 comm="syz.6.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.680830][ T28] audit: type=1400 audit(1772670802.627:310): avc: denied { read } for pid=4620 comm="syz.6.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.024079][ T4671] loop6: detected capacity change from 0 to 512 [ 48.044326][ T4671] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.059349][ T4597] syz.4.283 (4597) used greatest stack depth: 6136 bytes left [ 48.088187][ T4671] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 48.097966][ T4671] EXT4-fs (loop6): orphan cleanup on readonly fs [ 48.110373][ T4671] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 48.147919][ T4671] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.294: Failed to acquire dquot type 1 [ 48.218999][ T4671] loop6: lost filesystem error report for type 5 error -117 [ 48.220010][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 48.233766][ C1] EXT4-fs (loop6): initial error at time 1772670803: ext4_acquire_dquot:7001 [ 48.242553][ C1] EXT4-fs (loop6): last error at time 1772670803: ext4_acquire_dquot:7001 [ 48.252720][ T4671] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.294: corrupted inode contents [ 48.278027][ T4671] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.278233][ T4671] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.294: mark_inode_dirty error [ 48.308750][ T4671] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.309592][ T4671] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.294: corrupted inode contents [ 48.331063][ T4671] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.331248][ T4671] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.294: mark_inode_dirty error [ 48.352207][ T4671] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.361256][ T4671] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.294: corrupted inode contents [ 48.385073][ T4671] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.385241][ T4671] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 48.410295][ T4671] loop6: lost filesystem error report for type 5 error -117 [ 48.410459][ T4671] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.294: corrupted inode contents [ 48.430343][ T4671] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.430492][ T4671] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.294: mark_inode_dirty error [ 48.451215][ T4671] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.451354][ T4671] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 48.470211][ T4671] loop6: lost filesystem error report for type 5 error -117 [ 48.470582][ T4671] EXT4-fs (loop6): 1 truncate cleaned up [ 48.499896][ T4671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 48.586217][ T3781] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 48.821704][ T4712] io-wq is not configured for unbound workers [ 49.254554][ T4755] loop4: detected capacity change from 0 to 512 [ 49.291649][ T4755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.304300][ T4755] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.479994][ T4629] Bluetooth: hci0: command 0x1003 tx timeout [ 49.480078][ T3677] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.078789][ T4799] loop2: detected capacity change from 0 to 512 [ 50.089196][ T4799] EXT4-fs: Ignoring removed nobh option [ 50.095872][ T4799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.108003][ T4799] EXT4-fs (loop2): 1 truncate cleaned up [ 50.114112][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.146874][ T3320] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 50.187446][ T4805] loop5: detected capacity change from 0 to 256 [ 50.195068][ T4805] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.197736][ T3320] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 50.206549][ T4799] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 50.253558][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.260862][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.296530][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.323282][ T4810] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 50.333642][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.344007][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.384799][ T4806] geneve2: entered promiscuous mode [ 50.402527][ T4814] gretap1: entered allmulticast mode [ 50.409909][ T4814] bond2: (slave gretap1): making interface the new active one [ 50.418024][ T4814] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 50.431412][ T4758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.649136][ T4821] chnl_net:caif_netlink_parms(): no params data found [ 50.715880][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.724676][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.732434][ T4821] bridge_slave_0: entered allmulticast mode [ 50.738902][ T4821] bridge_slave_0: entered promiscuous mode [ 50.749348][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.757432][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.785291][ T4821] bridge_slave_1: entered allmulticast mode [ 50.794698][ T4821] bridge_slave_1: entered promiscuous mode [ 50.818488][ T4821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.829635][ T4821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.871301][ T4821] team0: Port device team_slave_0 added [ 50.898367][ T4821] team0: Port device team_slave_1 added [ 50.914990][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.922055][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.949396][ T4821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.960761][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.967951][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.994100][ T4821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.008684][ T4854] mmap: syz.7.346 (4854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.042759][ T4821] hsr_slave_0: entered promiscuous mode [ 51.048863][ T4821] hsr_slave_1: entered promiscuous mode [ 51.054800][ T4821] debugfs: 'hsr0' already exists in 'hsr' [ 51.060922][ T4821] Cannot create hsr debugfs directory [ 51.082187][ T4856] loop7: detected capacity change from 0 to 2048 [ 51.124264][ T4856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.177468][ T4856] netlink: 'syz.7.347': attribute type 2 has an invalid length. [ 51.182658][ T4821] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 51.197993][ T4821] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 51.209458][ T4821] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 51.220008][ T4856] netlink: 199792 bytes leftover after parsing attributes in process `syz.7.347'. [ 51.235458][ T4821] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 51.264556][ T4055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.278625][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 51.278639][ T28] audit: type=1400 audit(1772670806.397:330): avc: denied { write } for pid=4870 comm="syz.2.351" path="socket:[10213]" dev="sockfs" ino=10213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.344733][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.351910][ T4821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.359179][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.366224][ T4821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.401732][ T2787] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.409700][ T2787] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.426379][ T28] audit: type=1400 audit(1772670806.537:331): avc: denied { create } for pid=4882 comm="syz.7.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.475341][ T4821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.475888][ T28] audit: type=1400 audit(1772670806.567:332): avc: denied { sys_admin } for pid=4882 comm="syz.7.354" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 51.494877][ T4821] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.547825][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.554890][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.565080][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.572233][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.598434][ T4821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.710153][ T4821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.843854][ T4821] veth0_vlan: entered promiscuous mode [ 51.852586][ T4821] veth1_vlan: entered promiscuous mode [ 51.870031][ T4821] veth0_macvtap: entered promiscuous mode [ 51.877348][ T4821] veth1_macvtap: entered promiscuous mode [ 51.889215][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.901315][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.911819][ T3462] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.926286][ T3462] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.938356][ T3462] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.952362][ T3462] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.991645][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 52.004619][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 52.013637][ T28] audit: type=1400 audit(1772670807.117:333): avc: denied { connect } for pid=4921 comm="syz.8.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.222047][ T28] audit: type=1400 audit(1772670807.337:334): avc: denied { watch } for pid=4926 comm="syz.2.362" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 52.297945][ T28] audit: type=1400 audit(1772670807.377:335): avc: denied { getattr } for pid=4931 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.365131][ T28] audit: type=1400 audit(1772670807.427:336): avc: denied { read } for pid=4933 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.415426][ T28] audit: type=1400 audit(1772670807.427:337): avc: denied { open } for pid=4933 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.491208][ T28] audit: type=1400 audit(1772670807.537:338): avc: denied { create } for pid=4930 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.518746][ T28] audit: type=1400 audit(1772670807.537:339): avc: denied { write } for pid=4930 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=2412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.599004][ T4967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.373'. [ 52.615162][ T4960] loop6: detected capacity change from 0 to 8192 [ 53.059384][ T5014] loop7: detected capacity change from 0 to 1024 [ 53.116187][ T5014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.257936][ T5014] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.356925][ T5014] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.379: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.460073][ T5014] EXT4-fs (loop7): Remounting filesystem read-only [ 53.540388][ T4956] syz.6.369 (4956) used greatest stack depth: 5880 bytes left [ 53.988982][ T5056] geneve1: entered promiscuous mode [ 53.996494][ T4055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.090594][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.097844][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.180764][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.199144][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.298245][ T5062] geneve2: entered promiscuous mode [ 55.284367][ T5103] loop7: detected capacity change from 0 to 1024 [ 55.306262][ T5103] EXT4-fs: Ignoring removed orlov option [ 55.342304][ T5103] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.373426][ T5103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.701658][ T4055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.729362][ T5112] capability: warning: `syz.8.410' uses deprecated v2 capabilities in a way that may be insecure [ 55.937065][ T4821] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 55.965316][ T4821] CPU: 1 UID: 0 PID: 4821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 55.965345][ T4821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.965356][ T4821] Call Trace: [ 55.965362][ T4821] [ 55.965399][ T4821] __dump_stack+0x1d/0x30 [ 55.965426][ T4821] dump_stack_lvl+0x95/0xd0 [ 55.965508][ T4821] dump_stack+0x15/0x1b [ 55.965537][ T4821] dump_header+0x80/0x240 [ 55.965560][ T4821] oom_kill_process+0x295/0x350 [ 55.965584][ T4821] out_of_memory+0x97d/0xb80 [ 55.965604][ T4821] try_charge_memcg+0x62e/0xa10 [ 55.965794][ T4821] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 55.965827][ T4821] __swap_cache_prepare_and_add+0x386/0x530 [ 55.965918][ T4821] swap_cache_alloc_folio+0xa2/0x120 [ 55.965945][ T4821] swap_cluster_readahead+0x26e/0x3d0 [ 55.966030][ T4821] swapin_readahead+0xde/0x840 [ 55.966057][ T4821] ? __rcu_read_unlock+0x4e/0x70 [ 55.966076][ T4821] ? __perf_event_task_sched_in+0xa65/0xad0 [ 55.966102][ T4821] ? __list_add_valid_or_report+0x38/0xe0 [ 55.966170][ T4821] ? __rcu_read_unlock+0x4e/0x70 [ 55.966194][ T4821] ? swap_cache_get_folio+0x26f/0x280 [ 55.966221][ T4821] do_swap_page+0x309/0x2210 [ 55.966248][ T4821] ? __schedule+0x93c/0xd40 [ 55.966352][ T4821] ? __rcu_read_lock+0x36/0x50 [ 55.966374][ T4821] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 55.966450][ T4821] handle_mm_fault+0xb40/0x3020 [ 55.966479][ T4821] ? vma_start_read+0x1c7/0x2c0 [ 55.966507][ T4821] do_user_addr_fault+0x62f/0x1050 [ 55.966570][ T4821] ? trace_page_fault_user+0x1f/0xe0 [ 55.966677][ T4821] exc_page_fault+0x62/0xa0 [ 55.966745][ T4821] asm_exc_page_fault+0x26/0x30 [ 55.966768][ T4821] RIP: 0033:0x7f5ed61a7917 [ 55.966783][ T4821] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 55.966873][ T4821] RSP: 002b:00007fffca0cf9b0 EFLAGS: 00010202 [ 55.966892][ T4821] RAX: 0000000000000000 RBX: 000055556b2f5500 RCX: 00007f5ed61a7917 [ 55.966907][ T4821] RDX: 00007fffca0cf9f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.966918][ T4821] RBP: 00007fffca0cfa5c R08: 0000000000000000 R09: 0000000000000000 [ 55.966930][ T4821] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 55.966943][ T4821] R13: 00000000000927c0 R14: 000000000000da09 R15: 00007fffca0cfab0 [ 55.966986][ T4821] [ 55.967044][ T4821] memory: usage 307200kB, limit 307200kB, failcnt 137 [ 56.240166][ T4821] memory+swap: usage 248332kB, limit 9007199254740988kB, failcnt 0 [ 56.258381][ T4821] kmem: usage 227952kB, limit 9007199254740988kB, failcnt 0 [ 56.278676][ T4821] Memory cgroup stats for /syz8: [ 56.278890][ T4821] cache 0 [ 56.287134][ T4821] rss 20480 [ 56.299983][ T4821] shmem 0 [ 56.302967][ T4821] mapped_file 0 [ 56.306411][ T4821] dirty 0 [ 56.309326][ T4821] writeback 12288 [ 56.319955][ T4821] workingset_refault_anon 9 [ 56.330446][ T4821] workingset_refault_file 0 [ 56.340058][ T4821] swap 147456 [ 56.343333][ T4821] swapcached 192512 [ 56.357263][ T4821] pgpgin 2143 [ 56.361082][ T4821] pgpgout 2132 [ 56.364435][ T4821] pgfault 2070 [ 56.377908][ T4821] pgmajfault 4 [ 56.381462][ T4821] inactive_anon 12288 [ 56.385442][ T4821] active_anon 32768 [ 56.399387][ T4821] inactive_file 0 [ 56.409478][ T4821] active_file 0 [ 56.413098][ T4821] unevictable 0 [ 56.419555][ T4821] hierarchical_memory_limit 314572800 [ 56.436798][ T4821] hierarchical_memsw_limit 9223372036854771712 [ 56.444075][ T4821] total_cache 0 [ 56.454054][ T4821] total_rss 20480 [ 56.460011][ T4821] total_shmem 0 [ 56.463458][ T4821] total_mapped_file 0 [ 56.468495][ T4821] total_dirty 0 [ 56.472493][ T4821] total_writeback 12288 [ 56.476649][ T4821] total_workingset_refault_anon 9 [ 56.481866][ T4821] total_workingset_refault_file 0 [ 56.486948][ T4821] total_swap 147456 [ 56.491083][ T4821] total_swapcached 192512 [ 56.495450][ T4821] total_pgpgin 2143 [ 56.499251][ T4821] total_pgpgout 2132 [ 56.503327][ T4821] total_pgfault 2070 [ 56.507248][ T4821] total_pgmajfault 4 [ 56.511261][ T4821] total_inactive_anon 12288 [ 56.515753][ T4821] total_active_anon 32768 [ 56.520536][ T4821] total_inactive_file 0 [ 56.524693][ T4821] total_active_file 0 [ 56.528699][ T4821] total_unevictable 0 [ 56.534580][ T4821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.410,pid=5111,uid=0 [ 56.549375][ T4821] Memory cgroup out of memory: Killed process 5111 (syz.8.410) total-vm:94088kB, anon-rss:1252kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 56.590195][ T5117] loop8: detected capacity change from 0 to 128 [ 56.602469][ T5117] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.618224][ T5117] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.689141][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 56.689223][ T28] audit: type=1400 audit(1772670811.797:355): avc: denied { connect } for pid=5124 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.753120][ T5117] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.784765][ T5127] loop2: detected capacity change from 0 to 128 [ 56.811680][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.417'. [ 56.820720][ T28] audit: type=1400 audit(1772670811.797:356): avc: denied { bind } for pid=5124 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.855210][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.417'. [ 56.931314][ T5127] syz.2.416: attempt to access beyond end of device [ 56.931314][ T5127] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 56.949995][ T28] audit: type=1400 audit(1772670811.847:357): avc: denied { setattr } for pid=5116 comm="syz.8.412" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.020674][ T5127] syz.2.416: attempt to access beyond end of device [ 57.020674][ T5127] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 57.044458][ T28] audit: type=1400 audit(1772670811.847:358): avc: denied { unmount } for pid=5116 comm="syz.8.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.080660][ T5127] syz.2.416: attempt to access beyond end of device [ 57.080660][ T5127] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 57.125351][ T28] audit: type=1400 audit(1772670811.917:359): avc: denied { write } for pid=5124 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.152315][ T5127] syz.2.416: attempt to access beyond end of device [ 57.152315][ T5127] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 57.197203][ T5127] syz.2.416: attempt to access beyond end of device [ 57.197203][ T5127] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 57.225878][ T5127] syz.2.416: attempt to access beyond end of device [ 57.225878][ T5127] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 57.244799][ T5127] syz.2.416: attempt to access beyond end of device [ 57.244799][ T5127] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 57.272864][ T5127] syz.2.416: attempt to access beyond end of device [ 57.272864][ T5127] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 57.299644][ T5127] syz.2.416: attempt to access beyond end of device [ 57.299644][ T5127] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 57.328472][ T5127] syz.2.416: attempt to access beyond end of device [ 57.328472][ T5127] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 57.651781][ T28] audit: type=1400 audit(1772670812.767:360): avc: denied { mount } for pid=5142 comm="syz.7.422" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 57.777328][ T5156] syzkaller0: entered promiscuous mode [ 57.782913][ T5156] syzkaller0: entered allmulticast mode [ 57.823643][ T5160] loop7: detected capacity change from 0 to 764 [ 57.842183][ T5160] iso9660: Unknown parameter ' [ 57.842183][ T5160] %';ºª™!ˆ²5†ÐPq¤´ÆëºB«€œ‰r)š18446744073709551615ÿ0xffffffffffffffff' [ 58.766435][ T5171] netlink: 'syz.6.433': attribute type 1 has an invalid length. [ 59.647142][ T5179] loop5: detected capacity change from 0 to 512 [ 59.659160][ T5179] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 59.693058][ T5179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.700215][ T5181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.436'. [ 59.711849][ T5171] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 59.716852][ T5179] block device autoloading is deprecated and will be removed. [ 59.737893][ T5179] EXT4-fs (loop5): couldn't read superblock of external journal [ 59.754334][ T5183] netlink: 76 bytes leftover after parsing attributes in process `syz.2.436'. [ 59.754720][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.770377][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.790335][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.797457][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.804791][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.811843][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.830490][ T5179] loop5: detected capacity change from 0 to 512 [ 59.847380][ T5179] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.858133][ T5183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.436'. [ 59.877692][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.884862][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.894248][ T5179] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.908929][ T5179] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.435: bg 0: block 248: padding at end of block bitmap is not set [ 59.940008][ T5179] loop5: lost filesystem error report for type 5 error -117 [ 59.940351][ T5179] Quota error (device loop5): write_blk: dquota write failed [ 59.955031][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 59.955047][ C1] EXT4-fs (loop5): last error at time 1772670815: ext4_validate_block_bitmap:441 [ 59.971342][ T5179] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 59.981671][ T5179] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.435: Failed to acquire dquot type 1 [ 59.992989][ T5179] loop5: lost filesystem error report for type 5 error -117 [ 59.993489][ T5179] EXT4-fs (loop5): 1 truncate cleaned up [ 60.008364][ T5179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 60.032869][ T3629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 60.198349][ T5215] netlink: 'syz.7.447': attribute type 4 has an invalid length. [ 60.253328][ T5215] netlink: 'syz.7.447': attribute type 4 has an invalid length. [ 60.797430][ T28] audit: type=1400 audit(1772670815.907:361): avc: denied { ioctl } for pid=5233 comm="syz.2.454" path="socket:[12656]" dev="sockfs" ino=12656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.915778][ T5240] netlink: 24 bytes leftover after parsing attributes in process `syz.7.457'. [ 61.081296][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.457'. [ 61.211169][ T5248] netlink: 'syz.8.459': attribute type 12 has an invalid length. [ 61.286318][ T5256] syzkaller0: entered allmulticast mode [ 61.296547][ T5256] syzkaller0: entered promiscuous mode [ 61.302997][ T5257] netlink: 'syz.7.463': attribute type 10 has an invalid length. [ 61.314154][ T5256] syzkaller0 (unregistering): left promiscuous mode [ 61.329777][ T5256] syzkaller0 (unregistering): left allmulticast mode [ 61.403317][ T5257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.425569][ T5257] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 61.515770][ T5277] bridge1: entered promiscuous mode [ 61.521226][ T5277] bridge1: entered allmulticast mode [ 61.635989][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.655928][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.674319][ T28] audit: type=1400 audit(1772670816.787:362): avc: denied { getopt } for pid=5283 comm="syz.5.476" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.304364][ T5291] loop2: detected capacity change from 0 to 1024 [ 62.317472][ T5291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 62.325588][ T5291] System zones: 0-1, 3-36 [ 62.340220][ T5291] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.478: bad orphan inode 134217728 [ 62.362203][ T5291] loop2: lost filesystem error report for type 5 error -117 [ 62.362675][ T5291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.432011][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.457054][ T28] audit: type=1400 audit(1772670817.557:363): avc: denied { write } for pid=5295 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.491581][ T28] audit: type=1400 audit(1772670817.567:364): avc: denied { setopt } for pid=5295 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.544124][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 62.561961][ T28] audit: type=1400 audit(1772670817.597:365): avc: denied { connect } for pid=5299 comm="syz.8.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.600502][ T5312] batadv_slave_1: entered promiscuous mode [ 62.618140][ T5312] pimreg: entered allmulticast mode [ 62.623840][ T5312] pimreg: left allmulticast mode [ 62.830996][ T5310] batadv_slave_1: left promiscuous mode [ 62.915179][ T5327] netlink: 16 bytes leftover after parsing attributes in process `syz.6.492'. [ 63.196596][ T28] audit: type=1400 audit(1772670818.307:366): avc: denied { read } for pid=5339 comm="syz.6.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.664677][ T5353] loop5: detected capacity change from 0 to 2048 [ 63.701173][ T3299] loop5: p1 < > p4 [ 63.708264][ T3299] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.734757][ T5353] loop5: p1 < > p4 [ 63.738707][ T5358] ================================================================== [ 63.746785][ T5358] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 63.754682][ T5358] [ 63.757009][ T5358] write to 0xffff8881185074a8 of 8 bytes by task 5359 on cpu 0: [ 63.764635][ T5358] cpu_map_kthread_run+0x4fe/0x1680 [ 63.769835][ T5358] kthread+0x22a/0x280 [ 63.773905][ T5358] ret_from_fork+0x150/0x360 [ 63.778504][ T5358] ret_from_fork_asm+0x1a/0x30 [ 63.783267][ T5358] [ 63.785575][ T5358] read to 0xffff8881185074a8 of 8 bytes by task 5358 on cpu 1: [ 63.793103][ T5358] bq_flush_to_queue+0x124/0x360 [ 63.798029][ T5358] cpu_map_enqueue+0x1ad/0x1c0 [ 63.802781][ T5358] xdp_do_redirect_frame+0x27b/0x580 [ 63.808068][ T5358] bpf_test_run_xdp_live+0xac3/0x1360 [ 63.813437][ T5358] bpf_prog_test_run_xdp+0x57b/0xa10 [ 63.818719][ T5358] bpf_prog_test_run+0x204/0x340 [ 63.823649][ T5358] __sys_bpf+0x52e/0x7e0 [ 63.827880][ T5358] __x64_sys_bpf+0x41/0x50 [ 63.832302][ T5358] x64_sys_call+0x10cb/0x3020 [ 63.836988][ T5358] do_syscall_64+0x12c/0x370 [ 63.841564][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.847448][ T5358] [ 63.849756][ T5358] value changed: 0xffff88811a282070 -> 0x0000000000000000 [ 63.856861][ T5358] [ 63.859167][ T5358] Reported by Kernel Concurrency Sanitizer on: [ 63.865310][ T5358] CPU: 1 UID: 0 PID: 5358 Comm: syz.6.513 Not tainted syzkaller #0 PREEMPT(full) [ 63.874495][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.884544][ T5358] ================================================================== [ 63.901363][ T5353] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.933338][ T2999] loop5: p1 < > p4 [ 63.937834][ T2999] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.956334][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 63.967952][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 63.984336][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 63.995097][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 64.013255][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 64.021660][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory