last executing test programs: 3.638078777s ago: executing program 3 (id=715): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl(r0, 0x76, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2.687859104s ago: executing program 3 (id=725): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000cc0)={[{@data_writeback}, {@norecovery}, {@dioread_lock}, {@resgid}, {@noinit_itable}, {@block_validity}, {@user_xattr}, {@lazytime}]}, 0x21, 0x5fb, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007665746830"], 0xfc}}, 0x0) 2.518561707s ago: executing program 3 (id=728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10) 2.431488054s ago: executing program 0 (id=730): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.11434851s ago: executing program 0 (id=731): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') truncate(&(0x7f0000000240)='.\x02\x00', 0x70) 1.948082013s ago: executing program 0 (id=734): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.939891274s ago: executing program 1 (id=735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 1.896084388s ago: executing program 3 (id=736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.86398341s ago: executing program 2 (id=737): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.832303862s ago: executing program 1 (id=738): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa4) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) 1.778578577s ago: executing program 0 (id=739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0xf2ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.731389841s ago: executing program 2 (id=740): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.730794361s ago: executing program 1 (id=741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x40000023, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) 1.471581662s ago: executing program 0 (id=742): fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0xc044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 1.471429092s ago: executing program 1 (id=743): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.228346501s ago: executing program 3 (id=744): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 1.226899821s ago: executing program 2 (id=754): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1.044981406s ago: executing program 0 (id=745): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 959.642113ms ago: executing program 1 (id=747): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 609.755141ms ago: executing program 3 (id=748): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000002c0)=0x56, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x44, 0x11, 0x1, 0x2000000, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x9, 0x8}, {0x3}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xffffff4d}]}, 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) 443.525105ms ago: executing program 4 (id=749): socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x24, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x2000) msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 359.346101ms ago: executing program 4 (id=750): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 358.711091ms ago: executing program 1 (id=751): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 277.604418ms ago: executing program 4 (id=752): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 261.338059ms ago: executing program 2 (id=753): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 216.949613ms ago: executing program 4 (id=755): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 158.057508ms ago: executing program 2 (id=756): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30, 0x24008884}], 0x1, 0x0) 107.843422ms ago: executing program 2 (id=757): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)='0', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000340)={[{@debug}, {@discard}, {@quota}, {@nodiscard}, {@data_err_ignore}]}, 0x65, 0x536, &(0x7f0000000f40)="$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") 40.132537ms ago: executing program 4 (id=758): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=759): r0 = socket$kcm(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 27.624693][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 27.624710][ T29] audit: type=1400 audit(1755730646.851:57): avc: denied { transition } for pid=3281 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.653600][ T29] audit: type=1400 audit(1755730646.851:58): avc: denied { noatsecure } for pid=3281 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.673413][ T29] audit: type=1400 audit(1755730646.861:59): avc: denied { write } for pid=3281 comm="sh" path="pipe:[532]" dev="pipefs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 27.695651][ T29] audit: type=1400 audit(1755730646.861:60): avc: denied { rlimitinh } for pid=3281 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.714385][ T29] audit: type=1400 audit(1755730646.861:61): avc: denied { siginh } for pid=3281 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.211' (ED25519) to the list of known hosts. [ 35.830421][ T29] audit: type=1400 audit(1755730655.061:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.831579][ T3291] cgroup: Unknown subsys name 'net' [ 35.853620][ T29] audit: type=1400 audit(1755730655.061:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.882020][ T29] audit: type=1400 audit(1755730655.101:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.036646][ T3291] cgroup: Unknown subsys name 'cpuset' [ 36.043003][ T3291] cgroup: Unknown subsys name 'rlimit' [ 36.233920][ T29] audit: type=1400 audit(1755730655.461:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.257493][ T29] audit: type=1400 audit(1755730655.461:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.278186][ T29] audit: type=1400 audit(1755730655.461:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.298774][ T29] audit: type=1400 audit(1755730655.471:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.307963][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.319245][ T29] audit: type=1400 audit(1755730655.471:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.352568][ T29] audit: type=1400 audit(1755730655.471:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.376264][ T29] audit: type=1400 audit(1755730655.561:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.414718][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.132254][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 38.250292][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 38.266656][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 38.302905][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 38.344951][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.352141][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.359436][ T3301] bridge_slave_0: entered allmulticast mode [ 38.366220][ T3301] bridge_slave_0: entered promiscuous mode [ 38.374704][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 38.390795][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.397999][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.405234][ T3301] bridge_slave_1: entered allmulticast mode [ 38.411692][ T3301] bridge_slave_1: entered promiscuous mode [ 38.447088][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.454168][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.461692][ T3302] bridge_slave_0: entered allmulticast mode [ 38.468317][ T3302] bridge_slave_0: entered promiscuous mode [ 38.474793][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.482085][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.489447][ T3307] bridge_slave_0: entered allmulticast mode [ 38.495939][ T3307] bridge_slave_0: entered promiscuous mode [ 38.521551][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.528678][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.535811][ T3302] bridge_slave_1: entered allmulticast mode [ 38.542198][ T3302] bridge_slave_1: entered promiscuous mode [ 38.548320][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.555381][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.562762][ T3307] bridge_slave_1: entered allmulticast mode [ 38.569289][ T3307] bridge_slave_1: entered promiscuous mode [ 38.576768][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.597323][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.604581][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.611981][ T3309] bridge_slave_0: entered allmulticast mode [ 38.618389][ T3309] bridge_slave_0: entered promiscuous mode [ 38.633449][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.649156][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.659644][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.668833][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.675961][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.683782][ T3309] bridge_slave_1: entered allmulticast mode [ 38.690311][ T3309] bridge_slave_1: entered promiscuous mode [ 38.709866][ T3301] team0: Port device team_slave_0 added [ 38.729523][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.739484][ T3301] team0: Port device team_slave_1 added [ 38.746246][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.786723][ T3307] team0: Port device team_slave_0 added [ 38.798360][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.813474][ T3302] team0: Port device team_slave_0 added [ 38.820289][ T3307] team0: Port device team_slave_1 added [ 38.826529][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.833485][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.859584][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.871387][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.880564][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.887738][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.894911][ T3306] bridge_slave_0: entered allmulticast mode [ 38.901533][ T3306] bridge_slave_0: entered promiscuous mode [ 38.908563][ T3302] team0: Port device team_slave_1 added [ 38.914380][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.921488][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.928677][ T3306] bridge_slave_1: entered allmulticast mode [ 38.935348][ T3306] bridge_slave_1: entered promiscuous mode [ 38.947437][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.954409][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.980504][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.019575][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.026568][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.052508][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.064167][ T3309] team0: Port device team_slave_0 added [ 39.070831][ T3309] team0: Port device team_slave_1 added [ 39.081857][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.088867][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.114987][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.133436][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.142821][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.150165][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.176964][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.198973][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.206069][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.232086][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.248810][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.291357][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.298478][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.324738][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.343566][ T3301] hsr_slave_0: entered promiscuous mode [ 39.349874][ T3301] hsr_slave_1: entered promiscuous mode [ 39.369136][ T3306] team0: Port device team_slave_0 added [ 39.375135][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.382478][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.408587][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.425485][ T3306] team0: Port device team_slave_1 added [ 39.438302][ T3307] hsr_slave_0: entered promiscuous mode [ 39.444373][ T3307] hsr_slave_1: entered promiscuous mode [ 39.450434][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 39.456265][ T3307] Cannot create hsr debugfs directory [ 39.474221][ T3302] hsr_slave_0: entered promiscuous mode [ 39.480366][ T3302] hsr_slave_1: entered promiscuous mode [ 39.486249][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 39.491997][ T3302] Cannot create hsr debugfs directory [ 39.530432][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.537470][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.563449][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.576943][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.584058][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.610342][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.637300][ T3309] hsr_slave_0: entered promiscuous mode [ 39.643382][ T3309] hsr_slave_1: entered promiscuous mode [ 39.649556][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 39.655395][ T3309] Cannot create hsr debugfs directory [ 39.714042][ T3306] hsr_slave_0: entered promiscuous mode [ 39.720343][ T3306] hsr_slave_1: entered promiscuous mode [ 39.726418][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 39.732211][ T3306] Cannot create hsr debugfs directory [ 39.844441][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.867033][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.876452][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.894841][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.932528][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.947694][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.957927][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.973010][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.992038][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.001401][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.019346][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.027992][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.058909][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.072464][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.087815][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.097043][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.114038][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.123355][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.132625][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.142751][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.158805][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.207267][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.222893][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.247582][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.254668][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.264086][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.271321][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.282805][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.297484][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.310061][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.329635][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.336797][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.346226][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.353318][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.362025][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.369204][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.393147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.400314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.433920][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.470177][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.493231][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.500468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.518237][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.526684][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.533758][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.558932][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.569579][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.609075][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.653855][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.672827][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.709597][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.716863][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.727887][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.735108][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.758790][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.769238][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.785481][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.812383][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.889972][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.904434][ T3301] veth0_vlan: entered promiscuous mode [ 40.919052][ T3301] veth1_vlan: entered promiscuous mode [ 40.933981][ T3302] veth0_vlan: entered promiscuous mode [ 40.962344][ T3301] veth0_macvtap: entered promiscuous mode [ 40.980156][ T3302] veth1_vlan: entered promiscuous mode [ 40.991791][ T3301] veth1_macvtap: entered promiscuous mode [ 41.021967][ T3309] veth0_vlan: entered promiscuous mode [ 41.029903][ T3307] veth0_vlan: entered promiscuous mode [ 41.036744][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.054640][ T3302] veth0_macvtap: entered promiscuous mode [ 41.062892][ T3302] veth1_macvtap: entered promiscuous mode [ 41.070045][ T3309] veth1_vlan: entered promiscuous mode [ 41.077543][ T3307] veth1_vlan: entered promiscuous mode [ 41.084467][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.099222][ T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.114135][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.125358][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.140344][ T154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.153509][ T3306] veth0_vlan: entered promiscuous mode [ 41.161726][ T3306] veth1_vlan: entered promiscuous mode [ 41.171493][ T154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.180881][ T154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.195980][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.204859][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.214369][ T3309] veth0_macvtap: entered promiscuous mode [ 41.235319][ T3307] veth0_macvtap: entered promiscuous mode [ 41.242691][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 41.242707][ T29] audit: type=1400 audit(1755730660.471:81): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.k4jjzQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.248401][ T3309] veth1_macvtap: entered promiscuous mode [ 41.249163][ T29] audit: type=1400 audit(1755730660.471:82): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.279506][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.301071][ T29] audit: type=1400 audit(1755730660.471:83): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.k4jjzQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.315201][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.335186][ T29] audit: type=1400 audit(1755730660.471:84): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.364258][ T29] audit: type=1400 audit(1755730660.471:85): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.k4jjzQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.390859][ T29] audit: type=1400 audit(1755730660.481:86): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.k4jjzQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.418496][ T29] audit: type=1400 audit(1755730660.481:87): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.438986][ T29] audit: type=1400 audit(1755730660.511:88): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.453239][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.461932][ T29] audit: type=1400 audit(1755730660.511:89): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.475082][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.509509][ T3306] veth0_macvtap: entered promiscuous mode [ 41.509610][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.516986][ T3307] veth1_macvtap: entered promiscuous mode [ 41.543137][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.553251][ T3306] veth1_macvtap: entered promiscuous mode [ 41.562283][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.577444][ T29] audit: type=1400 audit(1755730660.811:90): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.617419][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.627595][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.654798][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.665080][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.679541][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.697141][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.724982][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.736253][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.756604][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.805696][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.847959][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.895539][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.922881][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.963955][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.049551][ C1] hrtimer: interrupt took 29845 ns [ 42.063997][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 42.113669][ T3511] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.161764][ T3515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3515 comm=syz.4.18 [ 42.174660][ T3515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3515 comm=syz.4.18 [ 42.198153][ T3517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.297729][ T3524] veth0_to_team: entered promiscuous mode [ 42.660545][ T3535] uprobe: syz.4.26:3535 failed to unregister, leaking uprobe [ 42.738149][ T3517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.782057][ T3539] lo speed is unknown, defaulting to 1000 [ 42.789422][ T3539] lo speed is unknown, defaulting to 1000 [ 42.833880][ T3539] lo speed is unknown, defaulting to 1000 [ 42.844068][ T3539] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.879811][ T3539] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 42.899060][ T3543] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 42.929647][ T3539] lo speed is unknown, defaulting to 1000 [ 42.945138][ T3539] lo speed is unknown, defaulting to 1000 [ 42.952940][ T3539] lo speed is unknown, defaulting to 1000 [ 42.961216][ T3539] lo speed is unknown, defaulting to 1000 [ 42.979248][ T3517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.001338][ T3539] lo speed is unknown, defaulting to 1000 [ 43.073645][ T3539] syz.2.27 (3539) used greatest stack depth: 10576 bytes left [ 43.160629][ T3555] delete_channel: no stack [ 43.291993][ T3562] lo speed is unknown, defaulting to 1000 [ 43.404665][ T3517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.521506][ T3577] Zero length message leads to an empty skb [ 43.630566][ T3578] tipc: Started in network mode [ 43.635571][ T3578] tipc: Node identity e630521b6896, cluster identity 4711 [ 43.642754][ T3578] tipc: Enabled bearer , priority 0 [ 43.786955][ T3573] tipc: Resetting bearer [ 43.845307][ T3573] tipc: Disabling bearer [ 43.934357][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.980266][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.034366][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.049373][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.076925][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 44.438382][ T3617] tipc: Started in network mode [ 44.443627][ T3617] tipc: Node identity e2ad66ffc014, cluster identity 4711 [ 44.451234][ T3617] tipc: Enabled bearer , priority 0 [ 44.577522][ T3624] syzkaller0: entered promiscuous mode [ 44.583201][ T3624] syzkaller0: entered allmulticast mode [ 44.611486][ T3611] tipc: Resetting bearer [ 44.641629][ T3611] tipc: Disabling bearer [ 45.373159][ T3647] loop2: detected capacity change from 0 to 1024 [ 45.382468][ T3647] EXT4-fs: Ignoring removed orlov option [ 45.399815][ T3647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.687801][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.887530][ T3668] netlink: 96 bytes leftover after parsing attributes in process `syz.2.77'. [ 45.964204][ T3674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.80'. [ 46.048901][ T3684] process 'syz.4.85' launched '/dev/fd/3' with NULL argv: empty string added [ 46.166723][ T3697] loop4: detected capacity change from 0 to 512 [ 46.187336][ T3697] EXT4-fs (loop4): too many log groups per flexible block group [ 46.195088][ T3697] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 46.202154][ T3697] EXT4-fs (loop4): mount failed [ 46.243179][ T3704] syz_tun: entered allmulticast mode [ 46.249960][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 46.249976][ T29] audit: type=1400 audit(1755730665.481:225): avc: denied { ioctl } for pid=3703 comm="syz.4.93" path="socket:[4979]" dev="sockfs" ino=4979 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.310748][ T3706] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 46.354574][ T29] audit: type=1400 audit(1755730665.581:226): avc: denied { watch } for pid=3707 comm="syz.0.95" path="pipe:[5733]" dev="pipefs" ino=5733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 46.496194][ T29] audit: type=1400 audit(1755730665.731:227): avc: denied { read } for pid=3030 comm="dhcpcd" name="n25" dev="tmpfs" ino=956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.518103][ T29] audit: type=1400 audit(1755730665.731:228): avc: denied { open } for pid=3030 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.541004][ T29] audit: type=1400 audit(1755730665.731:229): avc: denied { getattr } for pid=3030 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.625837][ T3714] Falling back ldisc for ttyS3. [ 46.641622][ T29] audit: type=1400 audit(1755730665.871:230): avc: denied { create } for pid=3716 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.664101][ T29] audit: type=1400 audit(1755730665.871:231): avc: denied { write } for pid=3716 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.690110][ T29] audit: type=1400 audit(1755730665.871:232): avc: denied { append } for pid=3716 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.722808][ T29] audit: type=1400 audit(1755730665.951:233): avc: denied { unlink } for pid=3729 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.903729][ T29] audit: type=1400 audit(1755730666.131:234): avc: denied { name_bind } for pid=3745 comm="syz.2.99" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.978681][ T3750] loop2: detected capacity change from 0 to 8192 [ 47.173505][ T3761] loop1: detected capacity change from 0 to 512 [ 47.180271][ T3761] ======================================================= [ 47.180271][ T3761] WARNING: The mand mount option has been deprecated and [ 47.180271][ T3761] and is ignored by this kernel. Remove the mand [ 47.180271][ T3761] option from the mount to silence this warning. [ 47.180271][ T3761] ======================================================= [ 47.218006][ T3761] EXT4-fs: Ignoring removed nobh option [ 47.227954][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.277674][ T3766] rdma_op ffff88811aa19180 conn xmit_rdma 0000000000000000 [ 47.321249][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.471681][ T3790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=3790 comm=syz.1.119 [ 47.520262][ T3791] lo speed is unknown, defaulting to 1000 [ 47.562104][ T3799] netlink: 'syz.1.123': attribute type 13 has an invalid length. [ 47.612274][ T3799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.657346][ T3803] lo speed is unknown, defaulting to 1000 [ 47.704564][ T3806] loop1: detected capacity change from 0 to 512 [ 47.733782][ T3806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.754789][ T3806] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.768977][ T3806] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.125: corrupted inode contents [ 47.780946][ T3806] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.125: mark_inode_dirty error [ 47.793389][ T3806] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.125: corrupted inode contents [ 47.819027][ T3806] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.125: mark_inode_dirty error [ 47.835566][ T3806] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.846965][ T3806] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.125: corrupted inode contents [ 47.859099][ T3806] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.125: mark_inode_dirty error [ 47.872362][ T3806] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.125: corrupted inode contents [ 47.886854][ T3806] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.125: corrupted inode contents [ 47.900189][ T3806] EXT4-fs error (device loop1): add_dirent_to_buf:2153: inode #2: comm syz.1.125: mark_inode_dirty error [ 47.934609][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.959743][ T3819] loop0: detected capacity change from 0 to 1024 [ 47.966334][ T3821] syz.3.132 uses obsolete (PF_INET,SOCK_PACKET) [ 47.992247][ T3819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.085863][ T3823] loop2: detected capacity change from 0 to 4096 [ 48.096111][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.128080][ T3823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.233558][ T3839] loop0: detected capacity change from 0 to 512 [ 48.265952][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.336606][ T3839] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.373285][ T3839] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.388326][ T3839] EXT4-fs (loop0): mount failed [ 48.407447][ T3839] syz.0.137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.598321][ T3877] veth1_macvtap: left promiscuous mode [ 48.604062][ T3877] macsec0: entered allmulticast mode [ 48.648954][ T3888] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 48.683955][ T3893] netlink: 52 bytes leftover after parsing attributes in process `syz.0.149'. [ 48.703725][ T3888] vlan2: entered allmulticast mode [ 48.709036][ T3888] geneve1: entered allmulticast mode [ 48.788836][ T3907] loop2: detected capacity change from 0 to 128 [ 48.912636][ T3907] syz.2.151: attempt to access beyond end of device [ 48.912636][ T3907] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 48.927571][ T3907] syz.2.151: attempt to access beyond end of device [ 48.927571][ T3907] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 48.941576][ T3907] syz.2.151: attempt to access beyond end of device [ 48.941576][ T3907] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 48.956633][ T3907] syz.2.151: attempt to access beyond end of device [ 48.956633][ T3907] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 48.971154][ T3907] syz.2.151: attempt to access beyond end of device [ 48.971154][ T3907] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 48.989674][ T3907] syz.2.151: attempt to access beyond end of device [ 48.989674][ T3907] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 49.003615][ T3907] syz.2.151: attempt to access beyond end of device [ 49.003615][ T3907] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 49.018021][ T3907] syz.2.151: attempt to access beyond end of device [ 49.018021][ T3907] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 49.031811][ T3907] syz.2.151: attempt to access beyond end of device [ 49.031811][ T3907] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 49.045897][ T3907] syz.2.151: attempt to access beyond end of device [ 49.045897][ T3907] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 49.112968][ T3948] loop2: detected capacity change from 0 to 512 [ 49.122617][ T3948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.142892][ T3948] EXT4-fs (loop2): 1 truncate cleaned up [ 49.202514][ T3948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.293741][ T3948] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.404673][ T4003] capability: warning: `syz.2.159' uses deprecated v2 capabilities in a way that may be insecure [ 49.566586][ T4015] lo speed is unknown, defaulting to 1000 [ 49.595340][ T4018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 49.644003][ T4021] netlink: 96 bytes leftover after parsing attributes in process `syz.1.165'. [ 49.743486][ T4025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 49.778093][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 49.973646][ T4038] Driver unsupported XDP return value 0 on prog (id 141) dev N/A, expect packet loss! [ 50.027114][ T4041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.153505][ T4046] loop0: detected capacity change from 0 to 2048 [ 50.212108][ T4046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.252867][ T4046] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.397851][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.447810][ T4061] netlink: 'syz.1.181': attribute type 10 has an invalid length. [ 50.530761][ T4063] hub 6-0:1.0: USB hub found [ 50.536005][ T4063] hub 6-0:1.0: 8 ports detected [ 50.670185][ T4065] mmap: syz.4.183 (4065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.806863][ T4074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.920528][ T4086] netlink: 96 bytes leftover after parsing attributes in process `syz.3.194'. [ 51.037767][ T4107] loop4: detected capacity change from 0 to 2048 [ 51.050062][ T4101] lo speed is unknown, defaulting to 1000 [ 51.120436][ T4107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.182477][ T3301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 51.240915][ T3301] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 51.303830][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 51.303844][ T29] audit: type=1400 audit(1755730670.531:467): avc: denied { unlink } for pid=3301 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.357450][ T29] audit: type=1400 audit(1755730670.581:468): avc: denied { unlink } for pid=3301 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.380455][ T29] audit: type=1400 audit(1755730670.591:469): avc: denied { unlink } for pid=3301 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.406083][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.468606][ T29] audit: type=1400 audit(1755730670.701:470): avc: denied { read } for pid=4162 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.523988][ T29] audit: type=1400 audit(1755730670.751:471): avc: denied { read write } for pid=4164 comm="syz.2.201" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.547390][ T29] audit: type=1400 audit(1755730670.751:472): avc: denied { open } for pid=4164 comm="syz.2.201" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.579444][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 51.601912][ T29] audit: type=1400 audit(1755730670.761:473): avc: denied { create } for pid=4164 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 51.621687][ T29] audit: type=1400 audit(1755730670.761:474): avc: denied { ioctl } for pid=4164 comm="syz.2.201" path="socket:[6507]" dev="sockfs" ino=6507 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 51.646261][ T29] audit: type=1400 audit(1755730670.811:475): avc: denied { setopt } for pid=4167 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.670086][ T29] audit: type=1400 audit(1755730670.861:476): avc: denied { bind } for pid=4167 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.711544][ T4171] lo speed is unknown, defaulting to 1000 [ 51.770450][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 52.093108][ T4192] IPv4: Oversized IP packet from 127.202.26.0 [ 52.442370][ T4227] syz.1.226 (4227) used greatest stack depth: 10200 bytes left [ 52.534034][ T4242] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 52.549901][ T4242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.568506][ T4242] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 52.578410][ T4242] bond1: (slave batadv1): making interface the new active one [ 52.587450][ T4242] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 52.646450][ T4250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 52.815482][ T4237] netlink: 87 bytes leftover after parsing attributes in process `syz.0.231'. [ 52.880846][ T4258] vhci_hcd: invalid port number 96 [ 52.886510][ T4258] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 53.235241][ T4245] loop2: detected capacity change from 0 to 1024 [ 53.257906][ T4245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.270439][ T4245] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.569628][ T4287] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 53.601621][ T4287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.629939][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 53.639223][ T4287] bond1: (slave batadv1): making interface the new active one [ 53.656552][ T4287] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 53.788121][ T4296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.802682][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.859757][ T4296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.937840][ T4296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.954613][ T4302] loop2: detected capacity change from 0 to 164 [ 53.968498][ T4302] bio_check_eod: 69 callbacks suppressed [ 53.968516][ T4302] wޡ: attempt to access beyond end of device [ 53.968516][ T4302] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 53.995694][ T4302] wޡ: attempt to access beyond end of device [ 53.995694][ T4302] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.017321][ T4309] loop4: detected capacity change from 0 to 1024 [ 54.027593][ T4309] EXT4-fs: Ignoring removed oldalloc option [ 54.033809][ T4296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.053835][ T4309] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 54.134497][ T4158] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.164336][ T4158] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.194668][ T4158] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.203951][ T4158] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.205945][ T4309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.383674][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.607949][ T4348] loop3: detected capacity change from 0 to 512 [ 54.630000][ T4348] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.656266][ T4348] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.686368][ T4348] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.272: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 54.754354][ T4348] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.272: Bad quota inode: 3, type: 0 [ 54.797308][ T4348] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.813343][ T4348] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 54.824564][ T4348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.863026][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.969397][ T4357] loop1: detected capacity change from 0 to 1024 [ 54.983517][ T4357] EXT4-fs: Ignoring removed orlov option [ 55.004049][ T4357] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.027987][ T4357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.200511][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.258497][ T4367] loop2: detected capacity change from 0 to 1024 [ 55.274673][ T4365] __nla_validate_parse: 3 callbacks suppressed [ 55.274688][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 55.451129][ T4365] syz.1.277 (4365) used greatest stack depth: 10056 bytes left [ 55.494808][ T4379] tipc: Enabling of bearer rejected, failed to enable media [ 55.541161][ T4383] loop0: detected capacity change from 0 to 512 [ 55.611915][ T4383] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 55.645767][ T4383] System zones: 0-2, 18-18, 34-34 [ 55.651155][ T4383] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.703845][ T4383] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.287: bg 0: block 248: padding at end of block bitmap is not set [ 55.736878][ T4383] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.287: Failed to acquire dquot type 1 [ 55.751085][ T4383] EXT4-fs (loop0): 1 orphan inode deleted [ 55.803910][ T3970] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 1 [ 55.826328][ T4383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.939454][ T4383] syz.0.287 (4383) used greatest stack depth: 9552 bytes left [ 55.999521][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.010449][ T4392] bridge: RTM_NEWNEIGH with invalid ether address [ 56.291287][ T4378] Set syz1 is full, maxelem 65536 reached [ 56.321839][ T4403] bridge0: port 3(batadv2) entered blocking state [ 56.328560][ T4403] bridge0: port 3(batadv2) entered disabled state [ 56.341139][ T4399] loop1: detected capacity change from 0 to 512 [ 56.370364][ T4399] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.387526][ T4403] batadv2: entered allmulticast mode [ 56.393352][ T4399] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.403493][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 56.420471][ T4403] batadv2: entered promiscuous mode [ 56.420790][ T4399] __quota_error: 157 callbacks suppressed [ 56.420807][ T4399] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 56.429798][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.431531][ T4399] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 56.440772][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.448110][ T4399] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.293: Failed to acquire dquot type 1 [ 56.485866][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.493304][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.569099][ T29] audit: type=1400 audit(1755730675.801:631): avc: denied { setopt } for pid=4412 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.588210][ T4399] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.293: bg 0: block 40: padding at end of block bitmap is not set [ 56.605015][ T29] audit: type=1326 audit(1755730675.831:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 56.632245][ T4399] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 56.647810][ T4399] EXT4-fs (loop1): 1 truncate cleaned up [ 56.658661][ T4399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.664525][ T29] audit: type=1326 audit(1755730675.861:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 56.694845][ T29] audit: type=1326 audit(1755730675.861:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 56.718147][ T29] audit: type=1326 audit(1755730675.861:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 56.742527][ T29] audit: type=1326 audit(1755730675.861:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 56.766137][ T29] audit: type=1326 audit(1755730675.861:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 56.789566][ T29] audit: type=1326 audit(1755730675.861:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 56.817590][ T4141] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 56.827264][ T4141] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 56.892275][ T4427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 56.922400][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.929728][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.981411][ T4399] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 57.095369][ T4444] loop3: detected capacity change from 0 to 512 [ 57.119184][ T4444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.132523][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.178005][ T4444] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.238440][ T4451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.307'. [ 57.242182][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.288442][ T4457] siw: device registration error -23 [ 57.311879][ T4459] netlink: 96 bytes leftover after parsing attributes in process `syz.1.310'. [ 57.324287][ T4461] netlink: 'syz.4.312': attribute type 7 has an invalid length. [ 57.421797][ T4471] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.317'. [ 57.507839][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 57.564969][ T4489] program syz.1.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.662558][ T4493] loop1: detected capacity change from 0 to 512 [ 57.671100][ T4493] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 57.749304][ T4498] lo speed is unknown, defaulting to 1000 [ 57.798104][ T4504] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.866781][ T4506] bridge0: port 3(veth1_to_hsr) entered blocking state [ 57.873768][ T4506] bridge0: port 3(veth1_to_hsr) entered disabled state [ 57.884233][ T4506] veth1_to_hsr: entered allmulticast mode [ 57.891014][ T4506] veth1_to_hsr: entered promiscuous mode [ 57.897109][ T4506] bridge0: port 3(veth1_to_hsr) entered blocking state [ 57.904150][ T4506] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 57.918467][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 57.935061][ T4506] bridge0: port 3(veth1_to_hsr) entered disabled state [ 57.957899][ T4506] veth1_to_hsr (unregistering): left allmulticast mode [ 57.964850][ T4506] veth1_to_hsr (unregistering): left promiscuous mode [ 57.971972][ T4506] bridge0: port 3(veth1_to_hsr) entered disabled state [ 57.983905][ T4506] hsr_slave_1 (unregistering): left promiscuous mode [ 58.428607][ T4543] syzkaller0: entered promiscuous mode [ 58.434126][ T4543] syzkaller0: entered allmulticast mode [ 58.715928][ T4579] loop0: detected capacity change from 0 to 256 [ 58.735856][ T4579] vfat: Unknown parameter '18446744073709551615)՝"' [ 58.899941][ T4582] loop1: detected capacity change from 0 to 128 [ 59.056516][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.063823][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.168357][ T4582] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.176291][ T4582] FAT-fs (loop1): Filesystem has been set read-only [ 59.197632][ T4582] syz.1.365: attempt to access beyond end of device [ 59.197632][ T4582] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.209294][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.214002][ T4582] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.226737][ T4582] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 59.245306][ T4614] syz.1.365: attempt to access beyond end of device [ 59.245306][ T4614] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 59.256953][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.258600][ T4614] Buffer I/O error on dev loop1, logical block 2065, async page read [ 59.277453][ T4614] syz.1.365: attempt to access beyond end of device [ 59.277453][ T4614] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 59.290907][ T4614] Buffer I/O error on dev loop1, logical block 2066, async page read [ 59.301526][ T4614] syz.1.365: attempt to access beyond end of device [ 59.301526][ T4614] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 59.314897][ T4614] Buffer I/O error on dev loop1, logical block 2067, async page read [ 59.325175][ T4614] syz.1.365: attempt to access beyond end of device [ 59.325175][ T4614] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 59.338427][ T4614] Buffer I/O error on dev loop1, logical block 2068, async page read [ 59.348731][ T4614] syz.1.365: attempt to access beyond end of device [ 59.348731][ T4614] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 59.362484][ T4614] Buffer I/O error on dev loop1, logical block 2069, async page read [ 59.372902][ T4614] syz.1.365: attempt to access beyond end of device [ 59.372902][ T4614] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 59.386198][ T4614] Buffer I/O error on dev loop1, logical block 2070, async page read [ 59.397963][ T4614] syz.1.365: attempt to access beyond end of device [ 59.397963][ T4614] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 59.411316][ T4614] Buffer I/O error on dev loop1, logical block 2071, async page read [ 59.421436][ T4614] syz.1.365: attempt to access beyond end of device [ 59.421436][ T4614] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 59.435152][ T4614] Buffer I/O error on dev loop1, logical block 2072, async page read [ 59.445897][ T4582] syz.1.365: attempt to access beyond end of device [ 59.445897][ T4582] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 59.459135][ T4582] Buffer I/O error on dev loop1, logical block 2065, async page read [ 59.469130][ T4582] Buffer I/O error on dev loop1, logical block 2066, async page read [ 59.517797][ T4432] lo speed is unknown, defaulting to 1000 [ 59.523634][ T4432] syz0: Port: 1 Link DOWN [ 59.547320][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.562880][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.586859][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.605247][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.667705][ T4613] loop0: detected capacity change from 0 to 32768 [ 59.837797][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 59.846837][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 60.206966][ T4635] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.227627][ T4635] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 61.308190][ T4676] lo speed is unknown, defaulting to 1000 [ 61.538180][ T4679] __nla_validate_parse: 7 callbacks suppressed [ 61.538200][ T4679] netlink: 52 bytes leftover after parsing attributes in process `syz.3.402'. [ 61.593110][ T4683] netlink: 96 bytes leftover after parsing attributes in process `syz.0.404'. [ 61.605068][ T4681] vlan2: entered allmulticast mode [ 61.610221][ T4681] dummy0: entered allmulticast mode [ 61.657965][ T4685] loop0: detected capacity change from 0 to 2048 [ 61.680191][ T4687] loop4: detected capacity change from 0 to 1024 [ 61.692880][ T4687] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 61.713517][ T4685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.751801][ T4687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.766904][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 61.766922][ T29] audit: type=1400 audit(1755730936.832:838): avc: denied { map } for pid=4688 comm="syz.3.406" path="socket:[10646]" dev="sockfs" ino=10646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.835096][ T29] audit: type=1400 audit(1755730936.897:839): avc: denied { setattr } for pid=4686 comm="syz.4.407" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.886589][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.912761][ T29] audit: type=1400 audit(1755730936.970:840): avc: denied { write } for pid=4700 comm="syz.3.409" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 61.914349][ T4701] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 61.914349][ T4701] program syz.3.409 not setting count and/or reply_len properly [ 61.970261][ T29] audit: type=1400 audit(1755730936.970:841): avc: denied { ioctl } for pid=4700 comm="syz.3.409" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.028844][ T4706] netlink: 'syz.4.411': attribute type 3 has an invalid length. [ 62.052755][ T4709] loop2: detected capacity change from 0 to 1024 [ 62.066832][ T4709] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 62.078060][ T4709] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 62.090621][ T4709] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.101823][ T4709] EXT4-fs (loop2): invalid journal inode [ 62.108910][ T4709] EXT4-fs (loop2): can't get journal size [ 62.119183][ T4709] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.414: blocks 2-2 from inode overlap system zone [ 62.135908][ T4709] EXT4-fs (loop2): failed to initialize system zone (-117) [ 62.142159][ T4716] loop8: detected capacity change from 0 to 16384 [ 62.143374][ T4709] EXT4-fs (loop2): mount failed [ 62.168496][ T29] audit: type=1400 audit(1755730937.210:842): avc: denied { create } for pid=4717 comm="syz.3.418" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.189210][ T29] audit: type=1400 audit(1755730937.210:843): avc: denied { write } for pid=4717 comm="syz.3.418" name="file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.211820][ T29] audit: type=1400 audit(1755730937.210:844): avc: denied { open } for pid=4717 comm="syz.3.418" path="/71/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.234592][ T29] audit: type=1400 audit(1755730937.210:845): avc: denied { ioctl } for pid=4717 comm="syz.3.418" path="/71/file0" dev="tmpfs" ino=396 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.338109][ T4719] loop8: detected capacity change from 16384 to 16383 [ 62.358676][ T29] audit: type=1326 audit(1755730937.386:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 62.502116][ T29] audit: type=1326 audit(1755730937.386:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff3f8a3ebe9 code=0x7ffc0000 [ 62.547440][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.583869][ T4734] 9pnet: Could not find request transport: f0x0000000000000006 [ 62.684376][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 62.751177][ T4751] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 62.813017][ T4758] loop0: detected capacity change from 0 to 512 [ 62.821533][ T4758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.909898][ T4758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.932295][ T4758] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.954998][ T4758] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.431: corrupted xattr block 19: overlapping e_value [ 62.997722][ T4758] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 63.007480][ T4758] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.431: corrupted xattr block 19: overlapping e_value [ 63.022342][ T4758] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 63.033381][ T4758] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.431: corrupted xattr block 19: overlapping e_value [ 63.055235][ T4774] loop4: detected capacity change from 0 to 1024 [ 63.072001][ T4777] ip6gre1: entered allmulticast mode [ 63.092387][ T4774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.117667][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.131289][ T4778] SELinux: failed to load policy [ 63.170562][ T4774] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 63.509097][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.518395][ T4802] loop0: detected capacity change from 0 to 2048 [ 63.542200][ T4802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.596880][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.726529][ T4817] lo speed is unknown, defaulting to 1000 [ 63.989628][ T4831] loop4: detected capacity change from 0 to 512 [ 64.015420][ T4831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.063714][ T4843] loop0: detected capacity change from 0 to 512 [ 64.086620][ T4843] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.147267][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.159623][ T4843] EXT4-fs (loop0): 1 orphan inode deleted [ 64.165763][ T4843] EXT4-fs (loop0): 1 truncate cleaned up [ 64.191636][ T4843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.237074][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.372552][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 64.450874][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.458346][ T4863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.500398][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.507879][ T4863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.594834][ T4872] netlink: 100 bytes leftover after parsing attributes in process `syz.4.470'. [ 64.709277][ T4869] loop4: detected capacity change from 0 to 1024 [ 64.764956][ T4869] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.775955][ T4869] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.833457][ T4869] JBD2: no valid journal superblock found [ 64.839238][ T4869] EXT4-fs (loop4): Could not load journal inode [ 64.991593][ T4881] loop3: detected capacity change from 0 to 128 [ 65.390597][ T4895] netlink: 'syz.2.481': attribute type 30 has an invalid length. [ 65.636439][ T4916] loop2: detected capacity change from 0 to 512 [ 65.646309][ T4916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.669756][ T4916] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.488: corrupted in-inode xattr: overlapping e_value [ 65.689030][ T4916] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.488: couldn't read orphan inode 15 (err -117) [ 65.707813][ T4916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.073400][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.116858][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 66.261627][ T4966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.277506][ T4964] capability: warning: `syz.1.501' uses 32-bit capabilities (legacy support in use) [ 66.318316][ T4966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.337425][ T4970] lo speed is unknown, defaulting to 1000 [ 66.354568][ T4971] lo speed is unknown, defaulting to 1000 [ 66.366650][ T4966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.433732][ T4966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.507678][ T4142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.531098][ T4142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.554821][ T4142] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.564410][ T4977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'. [ 66.602980][ T4142] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.620287][ T4980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.656601][ T4980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.686216][ T4977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'. [ 66.910511][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 67.199457][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 67.199476][ T29] audit: type=1326 audit(1755730941.853:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.246570][ T29] audit: type=1326 audit(1755730941.862:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.270272][ T29] audit: type=1326 audit(1755730941.872:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.293744][ T29] audit: type=1326 audit(1755730941.881:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.317547][ T29] audit: type=1326 audit(1755730941.899:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.343859][ T29] audit: type=1326 audit(1755730941.918:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.367397][ T29] audit: type=1326 audit(1755730941.927:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.390881][ T29] audit: type=1326 audit(1755730941.936:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.414454][ T29] audit: type=1326 audit(1755730941.945:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.438471][ T29] audit: type=1326 audit(1755730941.955:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5013 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 67.466652][ T5031] netlink: 'syz.2.528': attribute type 21 has an invalid length. [ 67.476139][ T5031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.528'. [ 67.495422][ T5034] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 67.528344][ T5036] netlink: zone id is out of range [ 67.533515][ T5036] netlink: zone id is out of range [ 67.542790][ T5036] netlink: zone id is out of range [ 67.547941][ T5036] netlink: zone id is out of range [ 67.553919][ T5036] netlink: zone id is out of range [ 67.559308][ T5036] netlink: zone id is out of range [ 67.565168][ T5036] netlink: zone id is out of range [ 67.570512][ T5036] netlink: zone id is out of range [ 67.600332][ T5040] loop0: detected capacity change from 0 to 512 [ 67.606992][ T5036] netlink: zone id is out of range [ 67.619004][ T5036] netlink: zone id is out of range [ 67.654792][ T5041] netlink: 29 bytes leftover after parsing attributes in process `syz.1.526'. [ 67.671828][ T5043] bridge_slave_0: left allmulticast mode [ 67.677569][ T5043] bridge_slave_0: left promiscuous mode [ 67.683590][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.694866][ T5040] EXT4-fs (loop0): too many log groups per flexible block group [ 67.702897][ T5040] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 67.709857][ T5040] EXT4-fs (loop0): mount failed [ 67.751629][ T5043] bridge_slave_1: left allmulticast mode [ 67.757620][ T5043] bridge_slave_1: left promiscuous mode [ 67.763372][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.782170][ T5043] bond0: (slave bond_slave_0): Releasing backup interface [ 67.800958][ T5043] bond0: (slave bond_slave_1): Releasing backup interface [ 67.835624][ T5043] team0: Port device team_slave_0 removed [ 67.853297][ T5043] team0: Port device team_slave_1 removed [ 67.859356][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.866006][ T5052] loop0: detected capacity change from 0 to 512 [ 67.873502][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.899061][ T5052] EXT4-fs: Ignoring removed bh option [ 67.956196][ T5052] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.967863][ T5052] EXT4-fs (loop0): invalid journal inode [ 67.981981][ T5052] EXT4-fs (loop0): can't get journal size [ 67.994227][ T5052] EXT4-fs (loop0): 1 truncate cleaned up [ 68.008487][ T5052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.223449][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.349921][ T5068] lo speed is unknown, defaulting to 1000 [ 68.672653][ T5076] tipc: Enabled bearer , priority 0 [ 68.762313][ T5076] syzkaller0: entered promiscuous mode [ 68.767883][ T5076] syzkaller0: entered allmulticast mode [ 68.774143][ T5076] tipc: Resetting bearer [ 68.790649][ T5080] $H: renamed from bond0 (while UP) [ 68.808395][ T5080] $H: entered promiscuous mode [ 68.813511][ T5080] bond_slave_0: entered promiscuous mode [ 68.819289][ T5080] bond_slave_1: entered promiscuous mode [ 68.851768][ T5075] tipc: Resetting bearer [ 68.892653][ T5075] tipc: Disabling bearer [ 69.098382][ T5089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.551'. [ 69.141310][ T5089] bridge_slave_1: left allmulticast mode [ 69.147155][ T5089] bridge_slave_1: left promiscuous mode [ 69.153011][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.195831][ T5089] bridge_slave_0: left allmulticast mode [ 69.201588][ T5089] bridge_slave_0: left promiscuous mode [ 69.207463][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.569732][ T5116] loop3: detected capacity change from 0 to 164 [ 69.597636][ T5118] loop0: detected capacity change from 0 to 2048 [ 69.615069][ T5116] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.633607][ T5118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.657523][ T5116] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.671927][ T5116] Symlink component flag not implemented [ 69.677758][ T5116] Symlink component flag not implemented [ 69.708891][ T3309] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 69.726304][ T3309] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 69.737086][ T5116] Symlink component flag not implemented (7) [ 69.743418][ T5116] Symlink component flag not implemented (116) [ 69.756671][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.782410][ T5125] netlink: 'syz.0.565': attribute type 1 has an invalid length. [ 69.783657][ T5122] bond1: entered promiscuous mode [ 69.795477][ T5122] bond1: entered allmulticast mode [ 69.801158][ T5122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.812223][ T5122] bond1 (unregistering): Released all slaves [ 69.842263][ T5125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.850694][ T5125] bond2: (slave bond3): making interface the new active one [ 69.858735][ T5125] bond2: (slave bond3): Enslaving as an active interface with an up link [ 69.875353][ T5125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 69.884797][ T5125] bond2: entered promiscuous mode [ 69.890147][ T5125] bond3: entered promiscuous mode [ 69.895336][ T5125] bond2: entered allmulticast mode [ 69.900512][ T5125] bond3: entered allmulticast mode [ 69.907226][ T5125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.918743][ T5129] loop3: detected capacity change from 0 to 128 [ 69.941862][ T5131] loop0: detected capacity change from 0 to 512 [ 70.002715][ T5129] bio_check_eod: 48751 callbacks suppressed [ 70.002857][ T5129] syz.3.566: attempt to access beyond end of device [ 70.002857][ T5129] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 70.028007][ T5136] hub 8-0:1.0: USB hub found [ 70.032842][ T5136] hub 8-0:1.0: 8 ports detected [ 70.056818][ T5129] syz.3.566: attempt to access beyond end of device [ 70.056818][ T5129] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 70.075582][ T5139] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.086657][ T5129] syz.3.566: attempt to access beyond end of device [ 70.086657][ T5129] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 70.100453][ T5129] syz.3.566: attempt to access beyond end of device [ 70.100453][ T5129] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 70.115704][ T5129] syz.3.566: attempt to access beyond end of device [ 70.115704][ T5129] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 70.129372][ T5129] syz.3.566: attempt to access beyond end of device [ 70.129372][ T5129] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 70.143644][ T5129] syz.3.566: attempt to access beyond end of device [ 70.143644][ T5129] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 70.157258][ T5129] syz.3.566: attempt to access beyond end of device [ 70.157258][ T5129] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 70.171774][ T5139] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.183465][ T5129] syz.3.566: attempt to access beyond end of device [ 70.183465][ T5129] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 70.197278][ T5129] syz.3.566: attempt to access beyond end of device [ 70.197278][ T5129] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 70.238599][ T5139] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.263691][ T5143] hub 6-0:1.0: USB hub found [ 70.268449][ T5143] hub 6-0:1.0: 8 ports detected [ 70.283444][ T5147] netlink: 'syz.3.574': attribute type 12 has an invalid length. [ 70.291301][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 70.302850][ T5139] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.318145][ T4138] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.328034][ T4138] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.336510][ T5147] netlink: 'syz.3.574': attribute type 12 has an invalid length. [ 70.344319][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 70.353769][ T4138] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.363233][ T4138] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.391008][ T4138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.418406][ T4138] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.435422][ T4138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.463327][ T4138] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.533548][ T5163] loop2: detected capacity change from 0 to 1024 [ 70.540930][ T5163] EXT4-fs: Ignoring removed orlov option [ 70.555655][ T5163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.603702][ T5170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.819527][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.926459][ T5195] : renamed from bond_slave_0 [ 71.476082][ T5221] loop4: detected capacity change from 0 to 1024 [ 71.496390][ T5221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.514006][ T5223] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 71.541520][ T5221] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.603: Allocating blocks 449-513 which overlap fs metadata [ 71.578574][ T5223] bond4: (slave veth3): Enslaving as an active interface with a down link [ 71.594548][ T5223] bond4: entered promiscuous mode [ 71.599832][ T5223] bond4: entered allmulticast mode [ 71.605928][ T5220] EXT4-fs (loop4): pa ffff888106ef31c0: logic 48, phys. 177, len 21 [ 71.607013][ T5223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 71.614707][ T5220] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 71.684924][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.735301][ T5232] loop4: detected capacity change from 0 to 128 [ 71.944553][ T5245] pim6reg1: entered promiscuous mode [ 71.949985][ T5245] pim6reg1: entered allmulticast mode [ 72.091820][ T5254] tipc: Failed to remove unknown binding: 66,1,1/0:756913676/756913678 [ 72.112714][ T5254] tipc: Failed to remove unknown binding: 66,1,1/0:756913676/756913678 [ 72.121040][ T5254] tipc: Failed to remove unknown binding: 66,1,1/0:756913676/756913678 [ 72.238527][ T5261] vlan2: entered allmulticast mode [ 72.262739][ T5261] dummy0: entered allmulticast mode [ 72.301972][ T5269] loop4: detected capacity change from 0 to 512 [ 72.309106][ T5269] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.315584][ T5269] EXT4-fs: inline encryption not supported [ 72.339281][ T5269] EXT4-fs: test_dummy_encryption option not supported [ 72.398295][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 72.508754][ T5280] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.543925][ T5282] loop0: detected capacity change from 0 to 2048 [ 72.567412][ T5282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.579990][ T5288] loop2: detected capacity change from 0 to 512 [ 72.601810][ T5280] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.603076][ T5288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.612881][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.624563][ T5288] ext4 filesystem being mounted at /131/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.666305][ T5292] tipc: Started in network mode [ 72.671579][ T5292] tipc: Node identity 32c13e0d6a08, cluster identity 4711 [ 72.678848][ T5292] tipc: Enabled bearer , priority 0 [ 72.688960][ T5280] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.720621][ T5291] tipc: Resetting bearer [ 72.730065][ T5298] loop1: detected capacity change from 0 to 2048 [ 72.736731][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 72.736747][ T29] audit: type=1400 audit(1755730946.967:1483): avc: denied { ioctl } for pid=5287 comm="syz.2.631" path="/131/file2/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.776632][ T5291] tipc: Disabling bearer [ 72.786125][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.786725][ T5298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.810453][ T5280] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.830194][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.845593][ T29] audit: type=1400 audit(1755730947.068:1484): avc: denied { relabelfrom } for pid=5301 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.865751][ T29] audit: type=1400 audit(1755730947.068:1485): avc: denied { relabelto } for pid=5301 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.910907][ T3983] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.922914][ T3983] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.935723][ T3972] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.946654][ T5308] uprobe: syz.3.638:5308 failed to unregister, leaking uprobe [ 72.954397][ T5308] uprobe: syz.3.638:5308 failed to unregister, leaking uprobe [ 72.977258][ T4130] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.008663][ T29] audit: type=1400 audit(1755730947.216:1486): avc: denied { setopt } for pid=5311 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.046876][ T29] audit: type=1400 audit(1755730947.234:1487): avc: denied { write } for pid=5313 comm="syz.3.641" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.080932][ T29] audit: type=1400 audit(1755730947.280:1488): avc: denied { bind } for pid=5311 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.226312][ T29] audit: type=1400 audit(1755730947.410:1489): avc: denied { read } for pid=5331 comm="syz.3.649" path="socket:[12923]" dev="sockfs" ino=12923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.281281][ T5334] : renamed from bond0 [ 73.281555][ T29] audit: type=1400 audit(1755730947.474:1490): avc: denied { ioctl } for pid=5333 comm="syz.1.650" path="socket:[13428]" dev="sockfs" ino=13428 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.372912][ T5341] loop4: detected capacity change from 0 to 1024 [ 73.390661][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.403003][ T5341] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.414017][ T5330] loop2: detected capacity change from 0 to 256 [ 73.421152][ T5330] vfat: Unknown parameter '?[J /ͨ[i`$&u+ 8eU7Y v U ֛>^є&͘gx{3G醾:Mo4<9߳Dƿ"صaB.ך[ۍMzS%+as CC8ǫ(s5ǺlFA.aptAX' [ 73.795096][ T29] audit: type=1400 audit(1755730947.936:1491): avc: denied { write } for pid=5363 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.045106][ T31] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 74.070848][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 74.083317][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.083317][ T31] [ 74.097574][ T31] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 74.153608][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 74.166176][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.166176][ T31] [ 74.187940][ T5368] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.662'. [ 74.216200][ T5370] batman_adv: batadv0: Adding interface: dummy0 [ 74.222595][ T5370] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.248214][ T5370] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 74.282070][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 74.329161][ T5372] loop3: detected capacity change from 0 to 512 [ 74.349867][ T5372] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.664: invalid fast symlink length 37 [ 74.386056][ T5372] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.664: couldn't read orphan inode 17 (err -117) [ 74.401185][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.416711][ T5372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.469743][ T29] audit: type=1400 audit(1755730948.554:1492): avc: denied { write } for pid=5371 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.479627][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 74.514838][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.529588][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 74.560011][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 74.600460][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 74.618107][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 74.682482][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 74.735966][ T5402] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 74.795976][ T5398] tipc: Enabled bearer , priority 0 [ 74.810326][ T5397] tipc: Resetting bearer [ 74.827256][ T5397] tipc: Disabling bearer [ 74.847818][ T5412] bridge0: port 1(batadv1) entered blocking state [ 74.854572][ T5412] bridge0: port 1(batadv1) entered disabled state [ 74.861948][ T5412] batadv1: entered allmulticast mode [ 74.870591][ T5412] batadv1: entered promiscuous mode [ 74.880143][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 74.961761][ T5423] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.683'. [ 75.042558][ T5428] lo speed is unknown, defaulting to 1000 [ 75.096847][ T5430] hsr_slave_1 (unregistering): left promiscuous mode [ 75.393552][ T4166] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 75.402882][ T4166] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 75.453997][ T5450] lo speed is unknown, defaulting to 1000 [ 75.739306][ T5456] hub 6-0:1.0: USB hub found [ 75.752729][ T5456] hub 6-0:1.0: 8 ports detected [ 76.346339][ T5465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.356231][ T5465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.385221][ T123] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.395693][ T123] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.405162][ T123] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.426094][ T123] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.448834][ T5471] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 76.463420][ T5471] 8021q: adding VLAN 0 to HW filter on device bond5 [ 76.483800][ T5471] bond5: (slave gretap1): making interface the new active one [ 76.492657][ T5471] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 76.510320][ T5471] vlan2: entered allmulticast mode [ 76.515538][ T5471] bond5: entered allmulticast mode [ 76.520732][ T5471] gretap1: entered allmulticast mode [ 76.527003][ T5471] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 76.739731][ T5493] loop0: detected capacity change from 0 to 128 [ 76.807422][ T5493] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 76.815593][ T5493] FAT-fs (loop0): Filesystem has been set read-only [ 76.823565][ T5493] bio_check_eod: 60 callbacks suppressed [ 76.823586][ T5493] syz.0.708: attempt to access beyond end of device [ 76.823586][ T5493] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 76.843511][ T5493] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 76.851420][ T5493] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 76.860120][ T5493] syz.0.708: attempt to access beyond end of device [ 76.860120][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.874069][ T5493] syz.0.708: attempt to access beyond end of device [ 76.874069][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.887523][ T5493] syz.0.708: attempt to access beyond end of device [ 76.887523][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.901082][ T5493] syz.0.708: attempt to access beyond end of device [ 76.901082][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.914332][ T5493] syz.0.708: attempt to access beyond end of device [ 76.914332][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.927874][ T5493] syz.0.708: attempt to access beyond end of device [ 76.927874][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.941443][ T5493] syz.0.708: attempt to access beyond end of device [ 76.941443][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.954970][ T5493] syz.0.708: attempt to access beyond end of device [ 76.954970][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.968887][ T5493] syz.0.708: attempt to access beyond end of device [ 76.968887][ T5493] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 76.982414][ T5498] buffer_io_error: 48750 callbacks suppressed [ 76.982433][ T5498] Buffer I/O error on dev loop0, logical block 2065, async page read [ 76.997412][ T5498] Buffer I/O error on dev loop0, logical block 2066, async page read [ 77.006511][ T5498] Buffer I/O error on dev loop0, logical block 2067, async page read [ 77.014865][ T5498] Buffer I/O error on dev loop0, logical block 2068, async page read [ 77.025138][ T5498] Buffer I/O error on dev loop0, logical block 2069, async page read [ 77.033299][ T5498] Buffer I/O error on dev loop0, logical block 2070, async page read [ 77.041878][ T5498] Buffer I/O error on dev loop0, logical block 2071, async page read [ 77.050258][ T5498] Buffer I/O error on dev loop0, logical block 2072, async page read [ 77.058414][ T5493] Buffer I/O error on dev loop0, logical block 2065, async page read [ 77.066852][ T5493] Buffer I/O error on dev loop0, logical block 2066, async page read [ 77.331694][ T5504] loop1: detected capacity change from 0 to 512 [ 77.349994][ T5504] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 77.367667][ T5504] System zones: 0-2, 18-18, 34-34 [ 77.379022][ T5504] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.392188][ T5504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.712: bg 0: block 248: padding at end of block bitmap is not set [ 77.420649][ T5504] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.712: Failed to acquire dquot type 1 [ 77.442697][ T5504] EXT4-fs (loop1): 1 orphan inode deleted [ 77.448661][ T4116] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:28: Failed to release dquot type 1 [ 77.467032][ T5504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.514030][ T5504] syz.1.712 (5504) used greatest stack depth: 9280 bytes left [ 77.595136][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.643530][ T5515] loop1: detected capacity change from 0 to 1024 [ 77.960582][ T5520] 9pnet: Could not find request transport: f0x0000000000000006 [ 78.333510][ T5511] net_ratelimit: 1 callbacks suppressed [ 78.333528][ T5511] Set syz1 is full, maxelem 65536 reached [ 78.353904][ T5535] loop1: detected capacity change from 0 to 2048 [ 78.384500][ T5533] ip6gre2: entered allmulticast mode [ 78.393736][ T5535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.488243][ T5542] hub 6-0:1.0: USB hub found [ 78.495280][ T5542] hub 6-0:1.0: 8 ports detected [ 78.510058][ T5545] loop3: detected capacity change from 0 to 1024 [ 78.529056][ T5545] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 78.540240][ T5545] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 78.556431][ T5545] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.577563][ T5545] EXT4-fs (loop3): invalid journal inode [ 78.583394][ T5545] EXT4-fs (loop3): can't get journal size [ 78.590858][ T5545] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.725: blocks 2-2 from inode overlap system zone [ 78.613878][ T5545] EXT4-fs (loop3): failed to initialize system zone (-117) [ 78.621270][ T5545] EXT4-fs (loop3): mount failed [ 78.667985][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 78.668003][ T29] audit: type=1400 audit(1755730952.440:1716): avc: denied { create } for pid=5552 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.728665][ T5524] loop4: detected capacity change from 0 to 1024 [ 78.755862][ T5524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.768887][ T5524] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.802418][ T5556] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.809640][ T5556] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.946085][ T4116] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.973488][ T4116] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.013746][ T4116] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.036362][ T4116] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.089131][ T5564] loop0: detected capacity change from 0 to 1024 [ 79.233142][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.242619][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.286836][ T5568] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.297616][ T5568] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.318068][ T5571] vlan2: entered allmulticast mode [ 79.353384][ T5568] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.353437][ T5575] loop1: detected capacity change from 0 to 512 [ 79.363416][ T5568] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.396141][ T5575] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.402758][ T5575] EXT4-fs: inline encryption not supported [ 79.410108][ T5575] EXT4-fs: test_dummy_encryption option not supported [ 79.457413][ T5581] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.469903][ T29] audit: type=1400 audit(1755730953.188:1717): avc: denied { connect } for pid=5582 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.493143][ T5568] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.503114][ T5568] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.534117][ T5581] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.571584][ T29] audit: type=1400 audit(1755730953.252:1718): avc: denied { bind } for pid=5582 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.591222][ T29] audit: type=1400 audit(1755730953.252:1719): avc: denied { write } for pid=5582 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.624374][ T5568] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.634398][ T5568] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.675026][ T5581] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.724508][ T4116] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.732992][ T4116] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.743769][ T5581] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.754104][ T5590] loop0: detected capacity change from 0 to 512 [ 79.764614][ T4166] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.773101][ T4166] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.775327][ T5590] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 79.789791][ T5590] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.811822][ T5590] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 79.820986][ T5590] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 79.830865][ T5590] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.742: Failed to acquire dquot type 1 [ 79.843678][ T4166] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.852160][ T4166] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.871980][ T5590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.742: bg 0: block 40: padding at end of block bitmap is not set [ 79.886424][ T4166] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.894793][ T4166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.903501][ T4166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.912118][ T4111] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.922147][ T4111] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.930359][ T4111] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.949706][ T5590] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 79.971227][ T5593] loop3: detected capacity change from 0 to 1024 [ 79.978106][ T5593] EXT4-fs: Ignoring removed orlov option [ 79.985940][ T5590] EXT4-fs (loop0): 1 truncate cleaned up [ 79.993079][ T5593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.994260][ T5590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.049266][ T5590] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.103568][ T29] audit: type=1400 audit(1755730953.760:1720): avc: denied { create } for pid=5592 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.129764][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.147431][ T5599] loop4: detected capacity change from 0 to 1024 [ 80.154565][ T29] audit: type=1400 audit(1755730953.815:1721): avc: denied { ioctl } for pid=5592 comm="syz.3.744" path="/131/bus/bus" dev="loop3" ino=18 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.155475][ T5599] EXT4-fs: Ignoring removed orlov option [ 80.192425][ T5599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.255603][ T5604] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 80.346614][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.430198][ T5604] bond0: (slave gretap1): making interface the new active one [ 80.440821][ T5604] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 80.496183][ T5604] vlan2: entered allmulticast mode [ 80.501495][ T5604] bond0: entered allmulticast mode [ 80.506709][ T5604] gretap1: entered allmulticast mode [ 80.528990][ T5604] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 80.564021][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.617667][ T5611] __nla_validate_parse: 2 callbacks suppressed [ 80.617682][ T5611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.748'. [ 80.638094][ T5611] bridge_slave_1: left allmulticast mode [ 80.643877][ T5611] bridge_slave_1: left promiscuous mode [ 80.649678][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.672080][ T5611] bridge_slave_0: left allmulticast mode [ 80.678241][ T5611] bridge_slave_0: left promiscuous mode [ 80.683995][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.728849][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.749881][ T29] audit: type=1326 audit(1755730954.360:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5612 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 80.773550][ T29] audit: type=1326 audit(1755730954.360:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5612 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62ac9ebe9 code=0x7ffc0000 [ 80.858772][ T5616] hub 6-0:1.0: USB hub found [ 80.863709][ T5616] hub 6-0:1.0: 8 ports detected [ 80.947124][ T5602] loop0: detected capacity change from 0 to 1024 [ 80.974857][ T5602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.995248][ T5602] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.097838][ T5631] loop2: detected capacity change from 0 to 512 [ 81.117616][ T5631] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 81.135555][ T5631] System zones: 0-2, 18-18, 34-34 [ 81.141428][ T5631] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.171601][ T5631] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.757: bg 0: block 248: padding at end of block bitmap is not set [ 81.186202][ T5631] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.757: Failed to acquire dquot type 1 [ 81.198692][ T5631] EXT4-fs (loop2): 1 orphan inode deleted [ 81.204799][ T123] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 81.228643][ T5631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.247237][ T5609] ================================================================== [ 81.255450][ T5609] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping [ 81.263639][ T5609] [ 81.265978][ T5609] write to 0xffffea0004be9328 of 8 bytes by task 5602 on cpu 1: [ 81.273697][ T5609] __delete_from_swap_cache+0x1e8/0x280 [ 81.279266][ T5609] delete_from_swap_cache+0x73/0xe0 [ 81.284814][ T5609] shmem_swapin_folio+0xf3e/0x13e0 [ 81.289935][ T5609] shmem_get_folio_gfp+0x26c/0xd60 [ 81.295251][ T5609] shmem_fault+0xf6/0x250 [ 81.299644][ T5609] __do_fault+0xbc/0x200 [ 81.303900][ T5609] handle_mm_fault+0xf78/0x2c20 [ 81.308850][ T5609] do_user_addr_fault+0x3fe/0x1090 [ 81.313988][ T5609] exc_page_fault+0x62/0xa0 [ 81.318542][ T5609] asm_exc_page_fault+0x26/0x30 [ 81.323407][ T5609] fault_in_readable+0xad/0x170 [ 81.328271][ T5609] fault_in_iov_iter_readable+0x129/0x210 [ 81.334017][ T5609] generic_perform_write+0x3cf/0x490 [ 81.339326][ T5609] shmem_file_write_iter+0xc5/0xf0 [ 81.344456][ T5609] vfs_write+0x52a/0x960 [ 81.349150][ T5609] ksys_write+0xda/0x1a0 [ 81.353495][ T5609] __x64_sys_write+0x40/0x50 [ 81.358104][ T5609] x64_sys_call+0x27fe/0x2ff0 [ 81.362804][ T5609] do_syscall_64+0xd2/0x200 [ 81.367328][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.373231][ T5609] [ 81.375559][ T5609] read to 0xffffea0004be9328 of 8 bytes by task 5609 on cpu 0: [ 81.383193][ T5609] folio_mapping+0xdd/0x120 [ 81.387712][ T5609] lru_add+0x80/0x430 [ 81.391708][ T5609] folio_batch_move_lru+0x174/0x230 [ 81.396998][ T5609] lru_add_drain_cpu+0x77/0x250 [ 81.401846][ T5609] lru_add_drain+0x25/0x70 [ 81.406259][ T5609] swap_cluster_readahead+0x35a/0x3e0 [ 81.411666][ T5609] shmem_swapin_folio+0xa2f/0x13e0 [ 81.416840][ T5609] shmem_get_folio_gfp+0x26c/0xd60 [ 81.421967][ T5609] shmem_fault+0xf6/0x250 [ 81.426580][ T5609] __do_fault+0xbc/0x200 [ 81.430844][ T5609] handle_mm_fault+0xf78/0x2c20 [ 81.435754][ T5609] __get_user_pages+0x102e/0x1fa0 [ 81.440864][ T5609] __mm_populate+0x243/0x3a0 [ 81.445487][ T5609] do_mlock+0x47f/0x520 [ 81.449663][ T5609] __x64_sys_mlock+0x36/0x50 [ 81.454264][ T5609] x64_sys_call+0x18f8/0x2ff0 [ 81.458959][ T5609] do_syscall_64+0xd2/0x200 [ 81.463567][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.469477][ T5609] [ 81.471934][ T5609] value changed: 0x0000000000000ca0 -> 0x0000000000000000 [ 81.479163][ T5609] [ 81.481501][ T5609] Reported by Kernel Concurrency Sanitizer on: [ 81.487771][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz.0.745 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.497423][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.507481][ T5609] ================================================================== [ 81.529725][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.666057][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.