last executing test programs: 13.806026143s ago: executing program 1 (id=702): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 13.793534563s ago: executing program 1 (id=704): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 13.322010399s ago: executing program 1 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 13.321659879s ago: executing program 1 (id=707): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 13.01399772s ago: executing program 1 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 11.915144257s ago: executing program 1 (id=724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x200000081}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 11.885258828s ago: executing program 32 (id=724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x200000081}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 3.650207436s ago: executing program 3 (id=873): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 3.289206458s ago: executing program 3 (id=876): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000400000e4ff00000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.220187581s ago: executing program 3 (id=878): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc6a6}, 0x100002, 0x8000000000000001, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r0, 0x1) 3.119705154s ago: executing program 3 (id=882): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x40}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffff}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 1.585919526s ago: executing program 5 (id=905): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 1.585564996s ago: executing program 4 (id=906): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x34, 0x0, 0xa}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5c9, &(0x7f0000000140)={0x0, 0x800ffe, 0x0, 0x6, 0x40000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6(0xa, 0x3, 0x3c) 1.379582543s ago: executing program 0 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.371862173s ago: executing program 5 (id=910): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) ptrace(0x4208, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tgkill(0x0, 0x0, 0x29) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 1.17188851s ago: executing program 5 (id=912): openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r0 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x975, 0x9, 0x2}, {0xc, 0xc, 0x9d, 0x8000}, {0x800, 0x3, 0x3, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 1.019693255s ago: executing program 5 (id=913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}]}}) 934.118338ms ago: executing program 3 (id=916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 846.104751ms ago: executing program 3 (id=918): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 670.175567ms ago: executing program 4 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) setregid(0xffffffffffffffff, 0x0) listen(r2, 0x100) r3 = dup(r2) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) 652.866668ms ago: executing program 5 (id=922): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r2, 0x0, 0x0) 652.333618ms ago: executing program 4 (id=924): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 604.555719ms ago: executing program 4 (id=925): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 518.010402ms ago: executing program 2 (id=926): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'virt_wifi0\x00'}}, 0x1e) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000306050000000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xa7a, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x20, 0x0, 0x0, 0xfffffdcf) 478.897723ms ago: executing program 0 (id=927): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 476.195203ms ago: executing program 2 (id=928): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 430.078415ms ago: executing program 4 (id=929): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_setup(0xaae, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) syz_open_pts(r3, 0x80) 408.018276ms ago: executing program 0 (id=930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x6) 394.960166ms ago: executing program 2 (id=931): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xa85, 0x4) 351.382678ms ago: executing program 2 (id=932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) setregid(0xffffffffffffffff, 0x0) listen(r2, 0x100) r3 = dup(r2) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) 350.787248ms ago: executing program 0 (id=933): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) close(r1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 325.823039ms ago: executing program 2 (id=934): socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0x1, 0x59c, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 185.915484ms ago: executing program 0 (id=935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 115.512376ms ago: executing program 2 (id=936): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 85.267367ms ago: executing program 0 (id=937): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000100000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) 832.76µs ago: executing program 4 (id=938): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") mbind(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x3, 0x1, 0x8000c62) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=948): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xc9bc, 0x8, 0x2, 0x801ef}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.690021][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 19.690047][ T29] audit: type=1400 audit(1765020129.230:57): avc: denied { transition } for pid=3193 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.694647][ T29] audit: type=1400 audit(1765020129.230:58): avc: denied { noatsecure } for pid=3193 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.697584][ T29] audit: type=1400 audit(1765020129.240:59): avc: denied { write } for pid=3193 comm="sh" path="pipe:[2555]" dev="pipefs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.700810][ T29] audit: type=1400 audit(1765020129.240:60): avc: denied { rlimitinh } for pid=3193 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.703692][ T29] audit: type=1400 audit(1765020129.240:61): avc: denied { siginh } for pid=3193 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.366074][ T29] audit: type=1400 audit(1765020130.900:62): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.388052][ T29] audit: type=1400 audit(1765020130.900:63): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.410627][ T29] audit: type=1400 audit(1765020130.900:64): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.433597][ T29] audit: type=1400 audit(1765020130.900:65): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.456590][ T29] audit: type=1400 audit(1765020130.900:66): avc: denied { read open } for pid=3200 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 28.388400][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 28.388419][ T29] audit: type=1400 audit(1765020137.920:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.417466][ T29] audit: type=1400 audit(1765020137.960:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.418483][ T3304] cgroup: Unknown subsys name 'net' [ 28.445295][ T29] audit: type=1400 audit(1765020137.990:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.581070][ T3304] cgroup: Unknown subsys name 'cpuset' [ 28.587311][ T3304] cgroup: Unknown subsys name 'rlimit' [ 28.679856][ T29] audit: type=1400 audit(1765020138.220:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.707049][ T29] audit: type=1400 audit(1765020138.220:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.727636][ T29] audit: type=1400 audit(1765020138.220:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.747991][ T29] audit: type=1400 audit(1765020138.220:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.768304][ T29] audit: type=1400 audit(1765020138.220:77): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.793119][ T29] audit: type=1400 audit(1765020138.220:78): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.802280][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.816528][ T29] audit: type=1400 audit(1765020138.250:79): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.872850][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.985687][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.007402][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 31.043281][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 31.062118][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.132818][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.139889][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.147075][ T3320] bridge_slave_0: entered allmulticast mode [ 31.153652][ T3320] bridge_slave_0: entered promiscuous mode [ 31.169973][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.182198][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.189260][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.196462][ T3320] bridge_slave_1: entered allmulticast mode [ 31.202934][ T3320] bridge_slave_1: entered promiscuous mode [ 31.222035][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.229109][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.236341][ T3324] bridge_slave_0: entered allmulticast mode [ 31.242787][ T3324] bridge_slave_0: entered promiscuous mode [ 31.266057][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.273174][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.280578][ T3324] bridge_slave_1: entered allmulticast mode [ 31.286924][ T3324] bridge_slave_1: entered promiscuous mode [ 31.317366][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.331610][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.338668][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.345877][ T3316] bridge_slave_0: entered allmulticast mode [ 31.352359][ T3316] bridge_slave_0: entered promiscuous mode [ 31.366799][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.376028][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.383168][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.390267][ T3315] bridge_slave_0: entered allmulticast mode [ 31.396672][ T3315] bridge_slave_0: entered promiscuous mode [ 31.403306][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.410398][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.417738][ T3316] bridge_slave_1: entered allmulticast mode [ 31.424234][ T3316] bridge_slave_1: entered promiscuous mode [ 31.434251][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.448243][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.455325][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.462662][ T3315] bridge_slave_1: entered allmulticast mode [ 31.468978][ T3315] bridge_slave_1: entered promiscuous mode [ 31.485368][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.517854][ T3320] team0: Port device team_slave_0 added [ 31.529686][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.538869][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.546019][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.553220][ T3318] bridge_slave_0: entered allmulticast mode [ 31.559418][ T3318] bridge_slave_0: entered promiscuous mode [ 31.570874][ T3320] team0: Port device team_slave_1 added [ 31.577693][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.587937][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.597143][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.604239][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.611618][ T3318] bridge_slave_1: entered allmulticast mode [ 31.618240][ T3318] bridge_slave_1: entered promiscuous mode [ 31.625529][ T3324] team0: Port device team_slave_0 added [ 31.636889][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.657400][ T3324] team0: Port device team_slave_1 added [ 31.687353][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.694377][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.720352][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.736619][ T3316] team0: Port device team_slave_0 added [ 31.743656][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.757855][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.764842][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.790817][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.802344][ T3315] team0: Port device team_slave_0 added [ 31.808546][ T3316] team0: Port device team_slave_1 added [ 31.815085][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.824485][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.831562][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.857496][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.871686][ T3315] team0: Port device team_slave_1 added [ 31.886986][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.894029][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.919947][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.960058][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.967172][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.993062][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.004573][ T3318] team0: Port device team_slave_0 added [ 32.015874][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.022967][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.048889][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.059880][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.066898][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.092904][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.106908][ T3318] team0: Port device team_slave_1 added [ 32.123334][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.130290][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.156464][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.181994][ T3320] hsr_slave_0: entered promiscuous mode [ 32.187974][ T3320] hsr_slave_1: entered promiscuous mode [ 32.205899][ T3324] hsr_slave_0: entered promiscuous mode [ 32.212038][ T3324] hsr_slave_1: entered promiscuous mode [ 32.217800][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 32.223544][ T3324] Cannot create hsr debugfs directory [ 32.230572][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.237564][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.263605][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.290649][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.297657][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.323623][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.336614][ T3316] hsr_slave_0: entered promiscuous mode [ 32.342665][ T3316] hsr_slave_1: entered promiscuous mode [ 32.348473][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 32.354280][ T3316] Cannot create hsr debugfs directory [ 32.383067][ T3315] hsr_slave_0: entered promiscuous mode [ 32.389074][ T3315] hsr_slave_1: entered promiscuous mode [ 32.395075][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.400829][ T3315] Cannot create hsr debugfs directory [ 32.438038][ T3318] hsr_slave_0: entered promiscuous mode [ 32.444094][ T3318] hsr_slave_1: entered promiscuous mode [ 32.450033][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.455795][ T3318] Cannot create hsr debugfs directory [ 32.627831][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.636558][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.645503][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.656321][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.678918][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.687364][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.696464][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.709082][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.738469][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.749292][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.762740][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.771683][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.805087][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.814924][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.824025][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.833411][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.879082][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.893583][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.903870][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.914560][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.929487][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.938533][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.951356][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.973498][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.980603][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.997301][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.004377][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.015560][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.033076][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.040161][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.053474][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.060532][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.078166][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.098263][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.128415][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.146472][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.153571][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.167293][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.174362][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.184755][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.212582][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.222742][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.229822][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.250559][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.257693][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.277099][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.311344][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.318443][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.335618][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.343984][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.351047][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.370526][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.504352][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.520102][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.554139][ T3320] veth0_vlan: entered promiscuous mode [ 33.566231][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.591182][ T3320] veth1_vlan: entered promiscuous mode [ 33.605010][ T3318] veth0_vlan: entered promiscuous mode [ 33.641692][ T3318] veth1_vlan: entered promiscuous mode [ 33.653100][ T3320] veth0_macvtap: entered promiscuous mode [ 33.664966][ T3320] veth1_macvtap: entered promiscuous mode [ 33.689142][ T3318] veth0_macvtap: entered promiscuous mode [ 33.709211][ T3318] veth1_macvtap: entered promiscuous mode [ 33.717601][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.743883][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.756847][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.769008][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.776684][ T3316] veth0_vlan: entered promiscuous mode [ 33.792710][ T1532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.802448][ T3315] veth0_vlan: entered promiscuous mode [ 33.810947][ T1532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.819789][ T1532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.831790][ T1532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.840589][ T1532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.851352][ T3315] veth1_vlan: entered promiscuous mode [ 33.857619][ T1532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.871821][ T1532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.884534][ T1532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.894446][ T3316] veth1_vlan: entered promiscuous mode [ 33.905324][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 33.905336][ T29] audit: type=1400 audit(1765020143.450:90): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.xKepNA/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.941059][ T3324] veth0_vlan: entered promiscuous mode [ 33.952967][ T3324] veth1_vlan: entered promiscuous mode [ 33.959166][ T3315] veth0_macvtap: entered promiscuous mode [ 33.960550][ T29] audit: type=1400 audit(1765020143.480:91): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.970826][ T3315] veth1_macvtap: entered promiscuous mode [ 33.987040][ T29] audit: type=1400 audit(1765020143.480:92): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.xKepNA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.987143][ T29] audit: type=1400 audit(1765020143.480:93): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.998900][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.017896][ T29] audit: type=1400 audit(1765020143.480:94): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.xKepNA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.052226][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.073468][ T29] audit: type=1400 audit(1765020143.480:95): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.xKepNA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.108022][ T29] audit: type=1400 audit(1765020143.480:96): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.127520][ T29] audit: type=1400 audit(1765020143.480:97): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.150288][ T29] audit: type=1400 audit(1765020143.480:98): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.175693][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.198117][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.213237][ T3316] veth0_macvtap: entered promiscuous mode [ 34.220609][ T29] audit: type=1400 audit(1765020143.760:99): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.254349][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.265067][ T3316] veth1_macvtap: entered promiscuous mode [ 34.277917][ T3488] ALSA: seq fatal error: cannot create timer (-22) [ 34.279728][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.320332][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.338785][ T3324] veth0_macvtap: entered promiscuous mode [ 34.350019][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.367662][ C1] hrtimer: interrupt took 28969 ns [ 34.383728][ T3324] veth1_macvtap: entered promiscuous mode [ 34.393285][ T3494] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 34.401368][ T3494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6'. [ 34.411766][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.434881][ T3494] team0: Port device geneve1 added [ 34.452870][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.477874][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.502341][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.522410][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.560712][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.591015][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.606904][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.642031][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.671887][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.685541][ T3510] wg2: entered promiscuous mode [ 34.690569][ T3510] wg2: entered allmulticast mode [ 34.712621][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.769460][ T3520] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.881111][ T3528] Zero length message leads to an empty skb [ 34.951112][ T3523] netlink: 'syz.1.16': attribute type 3 has an invalid length. [ 35.197784][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 35.457083][ T3615] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 35.580394][ T3627] loop2: detected capacity change from 0 to 164 [ 35.600118][ T3627] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 35.973089][ T3615] syz.1.32 (3615) used greatest stack depth: 10488 bytes left [ 36.414903][ T3651] netlink: 96 bytes leftover after parsing attributes in process `syz.3.44'. [ 36.475583][ T3661] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.531236][ T3668] syz.3.51 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.675483][ T3680] syz.4.53 uses obsolete (PF_INET,SOCK_PACKET) [ 36.690605][ T3678] netlink: 52 bytes leftover after parsing attributes in process `syz.1.55'. [ 36.721090][ T3678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 36.750507][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.765649][ T3678] bridge_slave_0 (unregistering): left allmulticast mode [ 36.772951][ T3678] bridge_slave_0 (unregistering): left promiscuous mode [ 36.780027][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.895467][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 36.977369][ T3711] loop1: detected capacity change from 0 to 128 [ 37.010809][ T3715] IPv6: Can't replace route, no match found [ 37.084373][ T3719] loop2: detected capacity change from 0 to 128 [ 37.095484][ T3719] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.141170][ T3719] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.142971][ T3722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 37.214178][ T3601] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.611791][ T3748] process 'syz.4.81' launched '/dev/fd/3' with NULL argv: empty string added [ 37.814672][ T3776] loop2: detected capacity change from 0 to 512 [ 37.854645][ T3776] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.866208][ T3776] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 37.876308][ T3776] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.91: Corrupt directory, running e2fsck is recommended [ 37.892183][ T3776] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 37.900435][ T3776] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.91: corrupted in-inode xattr: e_name out of bounds [ 37.920700][ T3776] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.91: couldn't read orphan inode 15 (err -117) [ 37.956474][ T3776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.976378][ T3776] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.987912][ T3776] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 37.998046][ T3776] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.91: Corrupt directory, running e2fsck is recommended [ 38.011024][ T3776] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.91: path /21/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 38.031990][ T3776] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 8: comm syz.2.91: path /21/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 38.068463][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.120712][ T3795] loop1: detected capacity change from 0 to 512 [ 38.127702][ T3795] ======================================================= [ 38.127702][ T3795] WARNING: The mand mount option has been deprecated and [ 38.127702][ T3795] and is ignored by this kernel. Remove the mand [ 38.127702][ T3795] option from the mount to silence this warning. [ 38.127702][ T3795] ======================================================= [ 38.316265][ T3801] loop2: detected capacity change from 0 to 1024 [ 38.331533][ T3801] EXT4-fs: Ignoring removed bh option [ 38.375795][ T3795] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.98: EA inode hash validation failed [ 38.388454][ T3801] EXT4-fs: inline encryption not supported [ 38.439195][ T3801] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.493049][ T3795] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.545853][ T3801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 38.593439][ T3795] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.98: corrupted inode contents [ 38.595297][ T3801] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.100: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.605753][ T3795] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.98: mark_inode_dirty error [ 38.619440][ T3801] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.100: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.630981][ T3795] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.98: corrupted inode contents [ 38.657249][ T3795] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.98: mark_inode_dirty error [ 38.657328][ T3801] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.100: Failed to acquire dquot type 0 [ 38.681498][ T3801] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 38.691150][ T3801] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.100: mark_inode_dirty error [ 38.702803][ T3801] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 38.713042][ T3801] EXT4-fs (loop2): 1 orphan inode deleted [ 38.719199][ T3801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.734309][ T3562] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.739268][ T3795] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.98: mark inode dirty (error -117) [ 38.762363][ T3795] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 38.771614][ T3795] EXT4-fs (loop1): 1 orphan inode deleted [ 38.776516][ T3562] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:22: Failed to release dquot type 0 [ 38.777969][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.819007][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.828349][ T3801] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.934335][ T3821] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 38.953711][ T3823] loop4: detected capacity change from 0 to 164 [ 38.954082][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.990826][ T3823] syz.4.108: attempt to access beyond end of device [ 38.990826][ T3823] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 39.008738][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 39.008806][ T29] audit: type=1326 audit(1765020148.550:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.028716][ T3823] syz.4.108: attempt to access beyond end of device [ 39.028716][ T3823] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.039100][ T29] audit: type=1326 audit(1765020148.580:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.123749][ T29] audit: type=1326 audit(1765020148.660:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.147372][ T29] audit: type=1326 audit(1765020148.660:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.171405][ T29] audit: type=1326 audit(1765020148.660:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.194659][ T29] audit: type=1326 audit(1765020148.690:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.217994][ T29] audit: type=1326 audit(1765020148.690:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.241314][ T29] audit: type=1326 audit(1765020148.690:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.264675][ T29] audit: type=1326 audit(1765020148.690:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.287915][ T29] audit: type=1326 audit(1765020148.690:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 39.585043][ T3847] loop7: detected capacity change from 0 to 7 [ 39.598245][ T3848] loop3: detected capacity change from 0 to 164 [ 39.609071][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.618276][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.630225][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.639376][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.659837][ T3847] loop7: unable to read partition table [ 39.665513][ T3847] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 39.712110][ T3848] syz.3.118: attempt to access beyond end of device [ 39.712110][ T3848] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 39.722250][ T3853] syzkaller0: entered promiscuous mode [ 39.726032][ T3848] syz.3.118: attempt to access beyond end of device [ 39.726032][ T3848] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.731334][ T3853] syzkaller0: entered allmulticast mode [ 39.762949][ T3853] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 39.775287][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.784462][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.789781][ T3856] loop2: detected capacity change from 0 to 512 [ 39.798609][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.807761][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.815628][ T3524] loop7: unable to read partition table [ 39.824192][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.833383][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.843043][ T3856] EXT4-fs: Ignoring removed oldalloc option [ 39.844907][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.858121][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.866055][ T3847] loop7: unable to read partition table [ 39.873723][ T3847] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 39.877449][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.896379][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.905792][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.918693][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.927875][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.936907][ T3856] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.951499][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.960706][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.968833][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.978007][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 39.989180][ T3856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.132925][ T3874] vlan2: entered allmulticast mode [ 41.684134][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 41.852263][ T3912] loop1: detected capacity change from 0 to 128 [ 41.905655][ T3912] syz.1.137: attempt to access beyond end of device [ 41.905655][ T3912] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 42.877722][ T3961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.924887][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 42.986927][ T3973] Driver unsupported XDP return value 0 on prog (id 101) dev N/A, expect packet loss! [ 43.007101][ T3482] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.015690][ T3482] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.062579][ T3981] IPv6: Can't replace route, no match found [ 43.071736][ T3976] loop4: detected capacity change from 0 to 1024 [ 43.145127][ T3976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.183535][ T3976] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.260591][ T3572] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:31: bg 0: block 112: padding at end of block bitmap is not set [ 43.305819][ T3572] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 43.318419][ T3572] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.318419][ T3572] [ 43.328209][ T3572] EXT4-fs (loop4): Total free blocks count 0 [ 43.334257][ T3572] EXT4-fs (loop4): Free/Dirty block details [ 43.340233][ T3572] EXT4-fs (loop4): free_blocks=0 [ 43.345248][ T3572] EXT4-fs (loop4): dirty_blocks=16 [ 43.350427][ T3572] EXT4-fs (loop4): Block reservation details [ 43.356481][ T3572] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 43.365533][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.397497][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.405289][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.413087][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.420851][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.428573][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.436378][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.444183][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.451957][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.459732][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 43.476723][ T3482] hid-generic 0000:FFFFFFFF:0000.0002: hidraw0: HID v0.00 Device [syz1] on [ 43.553301][ T4004] fido_id[4004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.602454][ T4014] loop3: detected capacity change from 0 to 1024 [ 43.609204][ T4014] EXT4-fs: inline encryption not supported [ 43.701499][ T4014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.761231][ T4014] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.173: Allocating blocks 385-513 which overlap fs metadata [ 43.939459][ T4014] EXT4-fs (loop3): pa ffff888107588070: logic 16, phys. 129, len 24 [ 43.947634][ T4014] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 44.105785][ T4014] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 44.118231][ T4014] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.118231][ T4014] [ 44.128245][ T4014] EXT4-fs (loop3): Total free blocks count 0 [ 44.134472][ T4014] EXT4-fs (loop3): Free/Dirty block details [ 44.140418][ T4014] EXT4-fs (loop3): free_blocks=128 [ 44.145549][ T4014] EXT4-fs (loop3): dirty_blocks=0 [ 44.150600][ T4014] EXT4-fs (loop3): Block reservation details [ 44.156584][ T4014] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 44.276799][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 44.276837][ T29] audit: type=1400 audit(1765020153.740:437): avc: denied { setopt } for pid=4037 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.336942][ T4014] syz.3.173 (4014) used greatest stack depth: 9864 bytes left [ 44.422142][ T29] audit: type=1400 audit(1765020153.960:438): avc: denied { connect } for pid=4048 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.445308][ T29] audit: type=1400 audit(1765020153.960:439): avc: denied { setopt } for pid=4048 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.464663][ T29] audit: type=1400 audit(1765020153.960:440): avc: denied { read } for pid=4048 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.595506][ T4062] macvlan2: entered promiscuous mode [ 44.607566][ T4062] macvlan3: entered promiscuous mode [ 44.644486][ T29] audit: type=1400 audit(1765020154.180:441): avc: denied { setopt } for pid=4067 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.787327][ T29] audit: type=1326 audit(1765020154.310:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 44.810675][ T29] audit: type=1326 audit(1765020154.310:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 44.833987][ T29] audit: type=1326 audit(1765020154.310:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4073 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 44.906004][ T4083] loop3: detected capacity change from 0 to 512 [ 44.961351][ T4083] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.202: error while reading EA inode 32 err=-116 [ 44.975740][ T4083] EXT4-fs (loop3): Remounting filesystem read-only [ 44.986822][ T4083] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 44.997265][ T4083] EXT4-fs (loop3): 1 orphan inode deleted [ 45.003627][ T4083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.031992][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.073685][ T29] audit: type=1400 audit(1765020154.610:445): avc: denied { bind } for pid=4093 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.188217][ T4103] netlink: 'syz.2.210': attribute type 10 has an invalid length. [ 45.196638][ T4103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.210'. [ 45.205950][ T4105] loop4: detected capacity change from 0 to 512 [ 45.225803][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.238575][ T4105] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.265531][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.280439][ T29] audit: type=1400 audit(1765020154.810:446): avc: denied { read } for pid=4112 comm="syz.1.213" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.372462][ T4118] tipc: Started in network mode [ 45.377475][ T4118] tipc: Node identity a206834f62be, cluster identity 4711 [ 45.384778][ T4118] tipc: Enabled bearer , priority 0 [ 45.392785][ T4117] tipc: Resetting bearer [ 45.416406][ T4117] tipc: Disabling bearer [ 45.894518][ T4131] loop3: detected capacity change from 0 to 2048 [ 45.977403][ T4142] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 45.990844][ T3524] loop3: p1 < > p4 [ 45.995772][ T3524] loop3: p4 size 8388608 extends beyond EOD, truncated [ 46.009698][ T4131] loop3: p1 < > p4 [ 46.023766][ T4131] loop3: p4 size 8388608 extends beyond EOD, truncated [ 46.112517][ T4162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 46.130997][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 46.147346][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.183702][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 46.195508][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.388243][ T4195] syzkaller0: entered allmulticast mode [ 46.395319][ T4195] syzkaller0: entered promiscuous mode [ 46.403588][ T4195] syzkaller0 (unregistering): left allmulticast mode [ 46.410407][ T4195] syzkaller0 (unregistering): left promiscuous mode [ 46.783136][ T4217] netlink: 'syz.1.245': attribute type 4 has an invalid length. [ 46.939629][ T4217] netlink: 'syz.1.245': attribute type 4 has an invalid length. [ 47.337303][ T36] Process accounting resumed [ 47.457366][ T4238] netlink: 87 bytes leftover after parsing attributes in process `syz.0.252'. [ 47.953216][ T3484] Process accounting resumed [ 48.173169][ T4266] infiniband syz!: set active [ 48.177896][ T4266] infiniband syz!: added team_slave_0 [ 48.350578][ T4266] RDS/IB: syz!: added [ 48.367812][ T4266] smc: adding ib device syz! with port count 1 [ 48.374164][ T4266] smc: ib device syz! port 1 has no pnetid [ 48.382150][ T4282] loop3: detected capacity change from 0 to 164 [ 48.403775][ T4287] netlink: 'syz.2.272': attribute type 4 has an invalid length. [ 48.423885][ T4282] syz.3.269: attempt to access beyond end of device [ 48.423885][ T4282] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.442819][ T4282] syz.3.269: attempt to access beyond end of device [ 48.442819][ T4282] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.458605][ T4287] netlink: 'syz.2.272': attribute type 4 has an invalid length. [ 48.539284][ T36] Process accounting resumed [ 48.791254][ T4323] netlink: 87 bytes leftover after parsing attributes in process `syz.4.289'. [ 48.896491][ T4330] loop4: detected capacity change from 0 to 1024 [ 48.905741][ T4330] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.921644][ T4330] EXT4-fs: Ignoring removed nobh option [ 49.075228][ T4330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.389324][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 49.389338][ T29] audit: type=1326 audit(1765020158.930:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 49.554061][ T29] audit: type=1326 audit(1765020158.960:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 49.577466][ T29] audit: type=1326 audit(1765020159.030:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.600849][ T29] audit: type=1326 audit(1765020159.030:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.624117][ T29] audit: type=1326 audit(1765020159.030:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.647379][ T29] audit: type=1326 audit(1765020159.060:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.670791][ T29] audit: type=1326 audit(1765020159.060:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.694050][ T29] audit: type=1326 audit(1765020159.060:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.717310][ T29] audit: type=1326 audit(1765020159.070:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.740554][ T29] audit: type=1326 audit(1765020159.070:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 49.835887][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.940961][ T4358] netlink: 87 bytes leftover after parsing attributes in process `syz.2.302'. [ 49.954076][ T4360] loop4: detected capacity change from 0 to 256 [ 49.989946][ T4360] FAT-fs (loop4): codepage cp855 not found [ 50.419218][ T4398] loop3: detected capacity change from 0 to 1024 [ 50.426154][ T4398] EXT4-fs: Ignoring removed nobh option [ 50.431802][ T4398] EXT4-fs: Ignoring removed bh option [ 50.530242][ T4398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.565362][ T4398] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.319: Allocating blocks 385-513 which overlap fs metadata [ 50.594569][ T4398] EXT4-fs (loop3): pa ffff888107588150: logic 16, phys. 129, len 24 [ 50.602749][ T4398] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 50.701003][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.098967][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 52.005291][ T4448] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 52.018414][ T4448] team0: Failed to send options change via netlink (err -105) [ 52.025987][ T4448] team0: Port device dummy0 added [ 52.840805][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 53.667713][ T4507] loop3: detected capacity change from 0 to 512 [ 53.688290][ T4507] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.360: error while reading EA inode 32 err=-116 [ 53.703419][ T4507] EXT4-fs (loop3): Remounting filesystem read-only [ 53.713105][ T4507] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 53.723345][ T4507] EXT4-fs (loop3): 1 orphan inode deleted [ 53.729820][ T4507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.756471][ T4507] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.964855][ T4523] loop4: detected capacity change from 0 to 512 [ 53.971786][ T4523] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.984919][ T4523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.001830][ T4523] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.365: invalid indirect mapped block 4294967295 (level 0) [ 54.016004][ T4523] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.365: invalid indirect mapped block 4294967295 (level 1) [ 54.030696][ T4523] EXT4-fs (loop4): 1 orphan inode deleted [ 54.036487][ T4523] EXT4-fs (loop4): 1 truncate cleaned up [ 54.042831][ T4523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.071186][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.164509][ T4535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'. [ 54.178508][ T4537] loop4: detected capacity change from 0 to 512 [ 54.186120][ T4537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.202116][ T4537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.215469][ T4537] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.250890][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.362649][ T4555] tipc: Started in network mode [ 54.367596][ T4555] tipc: Node identity 4682479c2339, cluster identity 4711 [ 54.374851][ T4555] tipc: Enabled bearer , priority 0 [ 54.383386][ T4555] tipc: Disabling bearer [ 54.452876][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 54.452893][ T29] audit: type=1400 audit(1765020163.990:856): avc: denied { create } for pid=4562 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.596020][ T29] audit: type=1400 audit(1765020164.140:857): avc: denied { write } for pid=4567 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.617121][ T4568] netlink: 64 bytes leftover after parsing attributes in process `syz.1.384'. [ 54.635583][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.382'. [ 54.766775][ T29] audit: type=1400 audit(1765020164.160:858): avc: denied { write } for pid=4567 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.786785][ T29] audit: type=1400 audit(1765020164.160:859): avc: denied { nlmsg_write } for pid=4567 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.424105][ T4578] ip6gre1: entered allmulticast mode [ 55.445536][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 55.520574][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 55.573972][ T4592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'. [ 55.633959][ T4595] wg2: entered promiscuous mode [ 55.638867][ T4595] wg2: entered allmulticast mode [ 55.679605][ T4599] netlink: 'syz.0.396': attribute type 3 has an invalid length. [ 55.722673][ T4606] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.733210][ T29] audit: type=1400 audit(1765020165.280:860): avc: denied { load_policy } for pid=4596 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.753280][ T4603] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.764785][ T4603] SELinux: failed to load policy [ 55.943854][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 56.141066][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 56.167481][ T4635] netlink: 64 bytes leftover after parsing attributes in process `syz.3.412'. [ 56.568102][ T4658] netlink: 'syz.0.419': attribute type 4 has an invalid length. [ 56.587745][ T4658] netlink: 'syz.0.419': attribute type 4 has an invalid length. [ 56.824665][ T4671] SELinux: failed to load policy [ 57.041912][ T4684] loop1: detected capacity change from 0 to 512 [ 57.104008][ T4684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.145230][ T4678] loop4: detected capacity change from 0 to 8192 [ 57.211548][ T4684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.237724][ T4678] syz.4.435: attempt to access beyond end of device [ 57.237724][ T4678] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.251130][ T4678] buffer_io_error: 1 callbacks suppressed [ 57.251144][ T4678] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.280584][ T4684] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.291138][ T4678] syz.4.435: attempt to access beyond end of device [ 57.291138][ T4678] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.304501][ T4678] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.312790][ T4677] syz.4.435: attempt to access beyond end of device [ 57.312790][ T4677] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.326201][ T4677] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.334406][ T4678] syz.4.435: attempt to access beyond end of device [ 57.334406][ T4678] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.347759][ T4678] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.356007][ T4677] syz.4.435: attempt to access beyond end of device [ 57.356007][ T4677] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.369344][ T4677] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.378737][ T4678] syz.4.435: attempt to access beyond end of device [ 57.378737][ T4678] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.392141][ T4678] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.406765][ T4677] syz.4.435: attempt to access beyond end of device [ 57.406765][ T4677] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.420133][ T4677] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.430813][ T4678] syz.4.435: attempt to access beyond end of device [ 57.430813][ T4678] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.444223][ T4678] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.453038][ T4688] syz.4.435: attempt to access beyond end of device [ 57.453038][ T4688] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.466439][ T4688] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.474854][ T4678] syz.4.435: attempt to access beyond end of device [ 57.474854][ T4678] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.488238][ T4678] Buffer I/O error on dev loop4, logical block 57847, async page read [ 57.563414][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.025207][ T4710] SELinux: failed to load policy [ 58.226932][ T29] audit: type=1400 audit(1765020167.760:861): avc: denied { ioctl } for pid=4716 comm="syz.3.451" path="socket:[8751]" dev="sockfs" ino=8751 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.545113][ T29] audit: type=1326 audit(1765020168.090:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.4.444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x0 [ 58.848248][ T29] audit: type=1326 audit(1765020168.380:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa636bf749 code=0x7ffc0000 [ 58.871628][ T29] audit: type=1326 audit(1765020168.380:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa636bf749 code=0x7ffc0000 [ 58.894894][ T29] audit: type=1326 audit(1765020168.380:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7faa636bf749 code=0x7ffc0000 [ 58.956004][ T4733] loop3: detected capacity change from 0 to 512 [ 58.966043][ T4734] __nla_validate_parse: 3 callbacks suppressed [ 58.966074][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 59.011819][ T4733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.024538][ T4733] ext4 filesystem being mounted at /file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.036260][ T4733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.050686][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 59.204399][ T4740] loop1: detected capacity change from 0 to 8192 [ 60.662130][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 60.662146][ T29] audit: type=1326 audit(1765020170.200:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf9f749 code=0x0 [ 60.858693][ T29] audit: type=1400 audit(1765020170.390:876): avc: denied { bind } for pid=4811 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.879222][ T4812] loop1: detected capacity change from 0 to 1024 [ 60.888723][ T4818] loop4: detected capacity change from 0 to 128 [ 60.897957][ T4812] EXT4-fs: Ignoring removed bh option [ 60.934273][ T29] audit: type=1326 audit(1765020170.440:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 60.957601][ T29] audit: type=1326 audit(1765020170.440:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 60.980890][ T29] audit: type=1326 audit(1765020170.440:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 61.004094][ T29] audit: type=1326 audit(1765020170.440:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 61.027325][ T29] audit: type=1326 audit(1765020170.440:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 61.030394][ T4812] EXT4-fs: inline encryption not supported [ 61.050764][ T29] audit: type=1326 audit(1765020170.440:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 61.050798][ T29] audit: type=1326 audit(1765020170.440:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 61.050825][ T29] audit: type=1326 audit(1765020170.440:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 61.132334][ T4812] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.150627][ T4812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 61.174873][ T4812] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.477: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.269009][ T4812] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.477: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.378529][ T4812] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.477: Failed to acquire dquot type 0 [ 61.448222][ T4812] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.634904][ T4812] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.477: mark_inode_dirty error [ 61.675211][ T4844] netlink: 168 bytes leftover after parsing attributes in process `syz.4.487'. [ 61.768088][ T4812] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 61.807448][ T4812] EXT4-fs (loop1): 1 orphan inode deleted [ 61.833469][ T4812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.850450][ T3578] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.884313][ T3578] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 0 [ 61.943342][ T4812] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.019207][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.359305][ T4885] loop3: detected capacity change from 0 to 1024 [ 62.368566][ T4885] EXT4-fs: Ignoring removed bh option [ 62.382601][ T4885] EXT4-fs: inline encryption not supported [ 62.388728][ T4885] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.414915][ T4885] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 62.429181][ T4885] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.503: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.443262][ T4885] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.503: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.457410][ T4885] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.503: Failed to acquire dquot type 0 [ 62.468739][ T4885] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 62.478524][ T4885] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.503: mark_inode_dirty error [ 62.489791][ T4885] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 62.501560][ T4885] EXT4-fs (loop3): 1 orphan inode deleted [ 62.507781][ T4885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.540972][ T3625] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:71: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.563504][ T3625] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:71: Failed to release dquot type 0 [ 62.575462][ T4885] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.671038][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.695413][ T4898] syzkaller0: entered promiscuous mode [ 62.700951][ T4898] syzkaller0: entered allmulticast mode [ 62.759561][ T4900] loop3: detected capacity change from 0 to 164 [ 62.814162][ T4900] bio_check_eod: 10745 callbacks suppressed [ 62.814177][ T4900] syz.3.508: attempt to access beyond end of device [ 62.814177][ T4900] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.880356][ T4900] syz.3.508: attempt to access beyond end of device [ 62.880356][ T4900] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 63.050448][ T4918] loop4: detected capacity change from 0 to 8192 [ 63.084209][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 63.093534][ T4918] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 63.142398][ T4929] loop4: detected capacity change from 0 to 1024 [ 63.162733][ T4929] EXT4-fs: Ignoring removed bh option [ 63.168397][ T4929] EXT4-fs: inline encryption not supported [ 63.192411][ T4929] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.230759][ T4929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 63.327264][ T4929] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.520: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.354731][ T4948] syzkaller0: entered promiscuous mode [ 63.360227][ T4948] syzkaller0: entered allmulticast mode [ 63.379904][ T4929] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.520: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.414550][ T4929] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.520: Failed to acquire dquot type 0 [ 63.428521][ T4929] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 63.438489][ T4929] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.520: mark_inode_dirty error [ 63.450111][ T4929] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 63.481488][ T4929] EXT4-fs (loop4): 1 orphan inode deleted [ 63.488118][ T4929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.502729][ T296] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.519392][ T296] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 63.539769][ T4929] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.705741][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.301470][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 64.351231][ T4984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 64.380516][ T4984] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 64.531889][ T5020] SELinux: Context system_u:object_r:var_log_t:s0 is not valid (left unmapped). [ 64.532482][ T5021] loop4: detected capacity change from 0 to 512 [ 64.571410][ T5021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.600161][ T5025] netlink: 'syz.3.560': attribute type 2 has an invalid length. [ 64.607902][ T5025] netlink: 'syz.3.560': attribute type 8 has an invalid length. [ 64.615592][ T5025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.560'. [ 64.633208][ T5021] EXT4-fs (loop4): 1 truncate cleaned up [ 64.646143][ T5021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.672485][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.868570][ T5043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.566'. [ 65.323261][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 65.359000][ T5059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.397551][ T5059] vlan2: entered allmulticast mode [ 65.402812][ T5059] macvtap0: entered allmulticast mode [ 65.408287][ T5059] veth0_macvtap: entered allmulticast mode [ 65.471237][ T5059] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 65.707813][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 65.707830][ T29] audit: type=1326 audit(1765020175.250:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.751592][ T29] audit: type=1326 audit(1765020175.250:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.774964][ T29] audit: type=1326 audit(1765020175.250:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.798406][ T29] audit: type=1326 audit(1765020175.250:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.821791][ T29] audit: type=1326 audit(1765020175.250:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.845169][ T29] audit: type=1326 audit(1765020175.250:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.868516][ T29] audit: type=1326 audit(1765020175.250:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.891879][ T29] audit: type=1326 audit(1765020175.250:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa049451667 code=0x7ffc0000 [ 65.915169][ T29] audit: type=1326 audit(1765020175.250:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 65.938768][ T29] audit: type=1326 audit(1765020175.250:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04944f749 code=0x7ffc0000 [ 66.102641][ T5097] netlink: 72 bytes leftover after parsing attributes in process `syz.2.584'. [ 66.309434][ T5114] netlink: 'syz.4.593': attribute type 4 has an invalid length. [ 66.803691][ T5130] loop4: detected capacity change from 0 to 2048 [ 66.826418][ T5130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.932666][ T3324] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 67.004025][ T3324] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 67.032428][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.118090][ T5153] netlink: 96 bytes leftover after parsing attributes in process `syz.2.607'. [ 67.220714][ T5156] loop4: detected capacity change from 0 to 128 [ 67.227494][ T5156] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.323062][ T5156] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.550552][ T10] IPVS: starting estimator thread 0... [ 67.640404][ T5173] IPVS: using max 2448 ests per chain, 122400 per kthread [ 67.746196][ T5177] loop3: detected capacity change from 0 to 1024 [ 67.773962][ T5177] EXT4-fs: Ignoring removed bh option [ 67.809715][ T5177] EXT4-fs: inline encryption not supported [ 67.832976][ T5177] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.855866][ T5177] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 67.865525][ T5177] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.619: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.879799][ T5177] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.619: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.894218][ T5177] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.619: Failed to acquire dquot type 0 [ 67.906008][ T5177] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 67.915690][ T5177] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.619: mark_inode_dirty error [ 67.927166][ T5177] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 67.937677][ T5177] EXT4-fs (loop3): 1 orphan inode deleted [ 67.943968][ T5177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.956787][ T3562] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.971931][ T3562] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:22: Failed to release dquot type 0 [ 67.985828][ T5177] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.006119][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.024971][ T5190] loop4: detected capacity change from 0 to 128 [ 68.147945][ T5189] loop1: detected capacity change from 0 to 8192 [ 69.318597][ T5248] hsr0: entered promiscuous mode [ 69.325441][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 69.334516][ T5248] hsr_slave_0: left promiscuous mode [ 69.340426][ T5248] hsr_slave_1: left promiscuous mode [ 69.354894][ T5248] hsr0 (unregistering): left promiscuous mode [ 69.726988][ T4069] IPVS: starting estimator thread 0... [ 69.830471][ T5260] IPVS: using max 1872 ests per chain, 93600 per kthread [ 69.882010][ T5274] loop4: detected capacity change from 0 to 1024 [ 69.901257][ T5274] EXT4-fs: inline encryption not supported [ 69.945260][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.000798][ T5274] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.653: Allocating blocks 385-513 which overlap fs metadata [ 70.183539][ T5296] EXT4-fs (loop4): pa ffff8881076a25b0: logic 16, phys. 129, len 24 [ 70.191646][ T5296] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 70.213786][ T5296] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 70.226240][ T5296] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.226240][ T5296] [ 70.235974][ T5296] EXT4-fs (loop4): Total free blocks count 0 [ 70.241995][ T5296] EXT4-fs (loop4): Free/Dirty block details [ 70.247899][ T5296] EXT4-fs (loop4): free_blocks=128 [ 70.253166][ T5296] EXT4-fs (loop4): dirty_blocks=0 [ 70.258204][ T5296] EXT4-fs (loop4): Block reservation details [ 70.264215][ T5296] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 71.002119][ T5321] loop3: detected capacity change from 0 to 1024 [ 71.123238][ T5321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.176069][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 71.176083][ T29] audit: type=1400 audit(1765020180.710:1181): avc: denied { create } for pid=5319 comm="syz.3.666" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.211360][ T5321] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.289906][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.303400][ T29] audit: type=1400 audit(1765020180.750:1182): avc: denied { write } for pid=5319 comm="syz.3.666" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.324963][ T29] audit: type=1400 audit(1765020180.750:1183): avc: denied { rename } for pid=5319 comm="syz.3.666" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.346589][ T29] audit: type=1400 audit(1765020180.750:1184): avc: denied { reparent } for pid=5319 comm="syz.3.666" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.368658][ T29] audit: type=1400 audit(1765020180.750:1185): avc: denied { rename } for pid=5319 comm="syz.3.666" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.391091][ T29] audit: type=1400 audit(1765020180.750:1186): avc: denied { rmdir } for pid=5319 comm="syz.3.666" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.506013][ T5348] loop4: detected capacity change from 0 to 512 [ 71.514029][ T5348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.650388][ T5348] EXT4-fs (loop4): 1 truncate cleaned up [ 71.656819][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.726375][ T29] audit: type=1400 audit(1765020181.260:1187): avc: denied { read append } for pid=5345 comm="syz.4.677" path="/135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.102549][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.137552][ T29] audit: type=1326 audit(1765020181.670:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa636bf749 code=0x7ffc0000 [ 72.185614][ T29] audit: type=1326 audit(1765020181.670:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa636bf749 code=0x7ffc0000 [ 72.209206][ T29] audit: type=1326 audit(1765020181.670:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa636bf749 code=0x7ffc0000 [ 72.610789][ T5426] netlink: 'syz.1.704': attribute type 13 has an invalid length. [ 72.641154][ T3424] hid_parser_main: 5 callbacks suppressed [ 72.641174][ T3424] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 72.672182][ T3424] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.757384][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.853227][ T5426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.882753][ T5426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.928817][ T3562] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.965772][ T3569] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.981460][ T3569] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.007935][ T3569] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.024793][ T3569] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.069417][ T5440] loop1: detected capacity change from 0 to 512 [ 73.089773][ T5440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.161554][ T5440] loop1: detected capacity change from 512 to 64 [ 73.178314][ T5440] syz.1.707: attempt to access beyond end of device [ 73.178314][ T5440] loop1: rw=2049, sector=88, nr_sectors = 8 limit=64 [ 73.191596][ T5440] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 44) [ 73.202960][ T5440] Buffer I/O error on device loop1, logical block 44 [ 73.209750][ T5440] Buffer I/O error on device loop1, logical block 45 [ 73.216516][ T5440] Buffer I/O error on device loop1, logical block 46 [ 73.223358][ T5440] Buffer I/O error on device loop1, logical block 47 [ 73.230680][ T5440] syz.1.707: attempt to access beyond end of device [ 73.230680][ T5440] loop1: rw=2049, sector=104, nr_sectors = 8 limit=64 [ 73.243956][ T5440] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 52) [ 73.255140][ T5440] Buffer I/O error on device loop1, logical block 52 [ 73.261820][ T5440] Buffer I/O error on device loop1, logical block 53 [ 73.268494][ T5440] Buffer I/O error on device loop1, logical block 54 [ 73.275213][ T5440] Buffer I/O error on device loop1, logical block 55 [ 73.307391][ T5440] syz.1.707: attempt to access beyond end of device [ 73.307391][ T5440] loop1: rw=2049, sector=120, nr_sectors = 8 limit=64 [ 73.320780][ T5440] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 60) [ 73.331981][ T5440] Buffer I/O error on device loop1, logical block 60 [ 73.338674][ T5440] Buffer I/O error on device loop1, logical block 61 [ 73.367252][ T3318] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 73.404217][ T3318] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: unexpected EA_INODE flag [ 73.420788][ T3318] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: unexpected EA_INODE flag [ 73.555009][ T5455] loop4: detected capacity change from 0 to 1024 [ 73.593278][ T5455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.609819][ T5455] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 74.118730][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.209953][ T5477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.217491][ T5477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.225214][ T5477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.232690][ T5477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.380336][ T5481] netlink: 'syz.4.721': attribute type 83 has an invalid length. [ 74.402102][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.638420][ T3578] bridge_slave_1: left allmulticast mode [ 74.644146][ T3578] bridge_slave_1: left promiscuous mode [ 74.649774][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.809606][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.829326][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.844036][ T3578] bond0 (unregistering): Released all slaves [ 74.970372][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.070970][ T3578] tipc: Left network mode [ 75.210124][ T3578] hsr_slave_0: left promiscuous mode [ 75.228422][ T3578] hsr_slave_1: left promiscuous mode [ 75.239576][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.249377][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.249994][ T5532] loop4: detected capacity change from 0 to 1024 [ 75.292440][ T3578] team0 (unregistering): Port device team_slave_1 removed [ 75.302733][ T5532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.315165][ T3578] team0 (unregistering): Port device team_slave_0 removed [ 75.344052][ T3578] team0 (unregistering): Port device dummy0 removed [ 75.412464][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.518423][ T5494] chnl_net:caif_netlink_parms(): no params data found [ 75.542614][ T5555] netlink: 'syz.2.739': attribute type 83 has an invalid length. [ 75.748463][ T5581] loop4: detected capacity change from 0 to 2048 [ 75.765975][ T5494] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.773150][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.786309][ T5581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.793874][ T5494] bridge_slave_0: entered allmulticast mode [ 75.827834][ T5581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.856329][ T5494] bridge_slave_0: entered promiscuous mode [ 75.871448][ T5594] loop3: detected capacity change from 0 to 512 [ 75.910902][ T5594] EXT4-fs: Ignoring removed bh option [ 75.920402][ T5494] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.927481][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.964301][ T5594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.980718][ T5494] bridge_slave_1: entered allmulticast mode [ 76.000532][ T5594] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.003807][ T5494] bridge_slave_1: entered promiscuous mode [ 76.035242][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.042686][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.081808][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.089231][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.172682][ T5494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.189871][ T5494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.219684][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.266511][ T5494] team0: Port device team_slave_0 added [ 76.272536][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 76.301639][ T5494] team0: Port device team_slave_1 added [ 76.370907][ T5494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.377887][ T5494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.403943][ T5494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.516366][ T5494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.523468][ T5494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.549437][ T5494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.591840][ T5642] loop4: detected capacity change from 0 to 1024 [ 76.625549][ T5642] EXT4-fs: Ignoring removed nobh option [ 76.631247][ T5642] EXT4-fs: Ignoring removed bh option [ 76.683486][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 76.715988][ T5642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.750013][ T5642] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 76.767929][ T5642] EXT4-fs (loop4): Remounting filesystem read-only [ 76.778679][ T5647] team0 (unregistering): Port device team_slave_0 removed [ 76.802806][ T5647] team0 (unregistering): Port device team_slave_1 removed [ 76.822276][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.951144][ T5494] hsr_slave_0: entered promiscuous mode [ 76.961471][ T5494] hsr_slave_1: entered promiscuous mode [ 77.118495][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 77.118509][ T29] audit: type=1326 audit(1765020186.650:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.154190][ T5494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.178156][ T5494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.190419][ T29] audit: type=1326 audit(1765020186.690:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.213940][ T29] audit: type=1326 audit(1765020186.690:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13fb6ff783 code=0x7ffc0000 [ 77.237116][ T29] audit: type=1326 audit(1765020186.690:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13fb6ff783 code=0x7ffc0000 [ 77.260268][ T29] audit: type=1326 audit(1765020186.690:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.283703][ T29] audit: type=1326 audit(1765020186.690:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.307007][ T29] audit: type=1326 audit(1765020186.690:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.330354][ T29] audit: type=1326 audit(1765020186.690:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.342875][ T5494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.353732][ T29] audit: type=1326 audit(1765020186.690:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.353768][ T29] audit: type=1326 audit(1765020186.690:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5679 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb6ff749 code=0x7ffc0000 [ 77.430549][ T5494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.558221][ T5494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.572680][ T5494] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.594362][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.601496][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.626372][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.633636][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.665236][ T5494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.711588][ T5705] pimreg: entered allmulticast mode [ 77.739871][ T5494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.803024][ T5722] rdma_op ffff888104eef180 conn xmit_rdma 0000000000000000 [ 77.877670][ T5735] loop4: detected capacity change from 0 to 128 [ 77.886457][ T5735] EXT4-fs: Ignoring removed nobh option [ 77.905129][ T5735] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.916201][ T5494] veth0_vlan: entered promiscuous mode [ 77.926364][ T5494] veth1_vlan: entered promiscuous mode [ 77.932530][ T5735] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.955816][ T5494] veth0_macvtap: entered promiscuous mode [ 77.971269][ T5494] veth1_macvtap: entered promiscuous mode [ 77.984874][ T5494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.995930][ T5494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.007287][ T3562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.034341][ T3562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.074366][ T3562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.109654][ T3562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.298044][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.471380][ T5770] loop5: detected capacity change from 0 to 128 [ 78.484354][ T5770] +}[@: attempt to access beyond end of device [ 78.484354][ T5770] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 78.504735][ T5770] +}[@: attempt to access beyond end of device [ 78.504735][ T5770] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 78.518621][ T5770] +}[@: attempt to access beyond end of device [ 78.518621][ T5770] loop5: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 78.531592][ T5770] buffer_io_error: 10745 callbacks suppressed [ 78.531646][ T5770] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 78.565359][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 78.569860][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 78.575043][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.590574][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.598026][ T5770] +}[@: attempt to access beyond end of device [ 78.598026][ T5770] loop5: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 78.611006][ T5770] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 78.627899][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.635378][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.643148][ T5770] +}[@: attempt to access beyond end of device [ 78.643148][ T5770] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 78.658407][ T5770] +}[@: attempt to access beyond end of device [ 78.658407][ T5770] loop5: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 78.671467][ T5770] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 78.680703][ T5770] +}[@: attempt to access beyond end of device [ 78.680703][ T5770] loop5: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 78.693712][ T5770] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 78.715320][ T5770] +}[@: attempt to access beyond end of device [ 78.715320][ T5770] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 78.728581][ T5770] +}[@: attempt to access beyond end of device [ 78.728581][ T5770] loop5: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 78.741570][ T5770] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 78.751443][ T5770] +}[@: attempt to access beyond end of device [ 78.751443][ T5770] loop5: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 78.764570][ T5770] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 78.774466][ T5770] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 78.783050][ T5770] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 78.792118][ T5770] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 78.800673][ T5770] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 78.835130][ T5777] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.861714][ T5777] loop3: detected capacity change from 0 to 512 [ 78.868667][ T3572] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.892962][ T5777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.906543][ T5777] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.079866][ T5794] loop5: detected capacity change from 0 to 1024 [ 79.089609][ T5794] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.096839][ T5794] EXT4-fs: Ignoring removed nobh option [ 79.112992][ T5794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.147115][ T5494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.492418][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 79.525057][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 79.538178][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 79.679096][ T5830] loop4: detected capacity change from 0 to 512 [ 79.691145][ T5830] EXT4-fs: Ignoring removed bh option [ 79.697015][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.707304][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.717250][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.727080][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.736800][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.746422][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.756165][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.765488][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.765531][ T5830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.787335][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.796435][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.805530][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.814687][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.823884][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.832992][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.842154][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.851162][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.860208][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.869347][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.878348][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.887170][ T5830] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.900688][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.935785][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 79.945545][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.964400][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 79.978481][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.002092][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.020757][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.031422][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.031512][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.050735][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.064590][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.112728][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.130800][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.160073][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.169148][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.195371][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.217022][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.258282][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.286102][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.339134][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.356827][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.401545][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.421602][ T5831] 9pnet_fd: p9_fd_create_tcp (5831): problem connecting socket to 127.0.0.1 [ 80.890521][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 80.900658][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.916485][ T5874] loop5: detected capacity change from 0 to 128 [ 80.935078][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.015089][ T5878] syzkaller0: entered promiscuous mode [ 81.020705][ T5878] syzkaller0: entered allmulticast mode [ 81.589266][ T5892] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 81.602438][ T5894] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 81.610105][ T5894] netlink: 224 bytes leftover after parsing attributes in process `syz.4.842'. [ 81.632603][ T5892] team0 (unregistering): Port device team_slave_0 removed [ 81.644606][ T5892] team0 (unregistering): Port device team_slave_1 removed [ 81.658840][ T5892] team0 (unregistering): Port device geneve1 removed [ 81.774001][ T5905] random: crng reseeded on system resumption [ 81.810633][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 82.067751][ T5934] netlink: 'syz.5.858': attribute type 10 has an invalid length. [ 82.081193][ T5934] team0 (unregistering): Port device team_slave_0 removed [ 82.095842][ T5934] team0 (unregistering): Port device team_slave_1 removed [ 82.123584][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 82.123598][ T29] audit: type=1326 audit(1765020191.660:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.156055][ T29] audit: type=1326 audit(1765020191.700:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.197376][ T29] audit: type=1326 audit(1765020191.710:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.220684][ T29] audit: type=1326 audit(1765020191.720:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.246137][ T29] audit: type=1326 audit(1765020191.740:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.269552][ T29] audit: type=1326 audit(1765020191.740:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.279714][ T5947] loop3: detected capacity change from 0 to 4096 [ 82.292806][ T29] audit: type=1326 audit(1765020191.760:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.302996][ T5947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.322422][ T29] audit: type=1400 audit(1765020191.760:1674): avc: denied { ioctl } for pid=5942 comm="syz.2.871" path="socket:[13392]" dev="sockfs" ino=13392 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.353763][ T29] audit: type=1326 audit(1765020191.760:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.377112][ T29] audit: type=1326 audit(1765020191.770:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5936 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7b9cf9f749 code=0x7ffc0000 [ 82.405123][ T5947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.425760][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 82.743703][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.788940][ T5977] bridge_slave_0: left allmulticast mode [ 82.794770][ T5977] bridge_slave_0: left promiscuous mode [ 82.800540][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.812540][ T5977] bridge_slave_1: left allmulticast mode [ 82.818323][ T5977] bridge_slave_1: left promiscuous mode [ 82.824093][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.834336][ T5977] bond0: (slave bond_slave_0): Releasing backup interface [ 82.860634][ T5977] bond0: (slave bond_slave_1): Releasing backup interface [ 82.872690][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.880226][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.921586][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.928999][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.979061][ T5977] bond1: (slave vlan2): Releasing backup interface [ 83.131656][ T5990] netlink: 'syz.3.876': attribute type 12 has an invalid length. [ 83.177905][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 83.187550][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 83.197280][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 83.216973][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 83.225982][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 83.238749][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 83.274491][ T6001] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 83.277511][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.287103][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 83.698790][ T6036] random: crng reseeded on system resumption [ 83.705996][ T6030] bridge_slave_0: left allmulticast mode [ 83.711842][ T6030] bridge_slave_0: left promiscuous mode [ 83.717548][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.727490][ T6030] bridge_slave_1: left allmulticast mode [ 83.733200][ T6030] bridge_slave_1: left promiscuous mode [ 83.738882][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.749277][ T6030] bond0: (slave bond_slave_0): Releasing backup interface [ 83.759854][ T6030] bond0: (slave bond_slave_1): Releasing backup interface [ 83.774602][ T6030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.026588][ T6077] random: crng reseeded on system resumption [ 85.041735][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.049182][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.057058][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.064505][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.290377][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.630436][ T6093] loop3: detected capacity change from 0 to 1024 [ 85.640460][ T6093] EXT4-fs: Ignoring removed orlov option [ 85.663647][ T6093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.950649][ T3391] kernel read not supported for file bpf-prog (pid: 3391 comm: kworker/1:3) [ 86.209401][ T6133] netlink: 'syz.2.934': attribute type 4 has an invalid length. [ 86.398216][ T6103] ================================================================== [ 86.406410][ T6103] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 86.413634][ T6103] [ 86.415968][ T6103] write to 0xffff88811b933bd4 of 4 bytes by task 6093 on cpu 1: [ 86.423618][ T6103] __xa_set_mark+0x172/0x1a0 [ 86.428227][ T6103] __folio_mark_dirty+0x384/0x4a0 [ 86.433280][ T6103] mark_buffer_dirty+0x11e/0x210 [ 86.438259][ T6103] block_write_end+0x12d/0x210 [ 86.443042][ T6103] ext4_write_end+0x134/0x730 [ 86.447742][ T6103] generic_perform_write+0x312/0x490 [ 86.453059][ T6103] ext4_buffered_write_iter+0x1ee/0x3c0 [ 86.458636][ T6103] ext4_file_write_iter+0x387/0xf60 [ 86.463862][ T6103] iter_file_splice_write+0x66b/0xa20 [ 86.469273][ T6103] direct_splice_actor+0x156/0x2a0 [ 86.474391][ T6103] splice_direct_to_actor+0x312/0x680 [ 86.479768][ T6103] do_splice_direct+0xda/0x150 [ 86.484542][ T6103] do_sendfile+0x380/0x650 [ 86.488982][ T6103] __x64_sys_sendfile64+0x105/0x150 [ 86.494192][ T6103] x64_sys_call+0x2db1/0x3000 [ 86.498882][ T6103] do_syscall_64+0xd8/0x2a0 [ 86.503405][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.509317][ T6103] [ 86.511655][ T6103] read to 0xffff88811b933bd4 of 4 bytes by task 6103 on cpu 0: [ 86.519194][ T6103] xas_find_marked+0x5dc/0x620 [ 86.523983][ T6103] find_get_entry+0x5d/0x380 [ 86.528579][ T6103] filemap_get_folios_tag+0x92/0x210 [ 86.533871][ T6103] file_write_and_wait_range+0x1ea/0x2c0 [ 86.539515][ T6103] generic_buffers_fsync_noflush+0x45/0x130 [ 86.545414][ T6103] ext4_sync_file+0x1ab/0x690 [ 86.550099][ T6103] vfs_fsync_range+0x10d/0x130 [ 86.554868][ T6103] ext4_buffered_write_iter+0x34f/0x3c0 [ 86.560431][ T6103] ext4_file_write_iter+0x387/0xf60 [ 86.565648][ T6103] iter_file_splice_write+0x66b/0xa20 [ 86.571023][ T6103] direct_splice_actor+0x156/0x2a0 [ 86.576138][ T6103] splice_direct_to_actor+0x312/0x680 [ 86.581513][ T6103] do_splice_direct+0xda/0x150 [ 86.586282][ T6103] do_sendfile+0x380/0x650 [ 86.590702][ T6103] __x64_sys_sendfile64+0x105/0x150 [ 86.595904][ T6103] x64_sys_call+0x2db1/0x3000 [ 86.600583][ T6103] do_syscall_64+0xd8/0x2a0 [ 86.605102][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.610998][ T6103] [ 86.613318][ T6103] value changed: 0x04000021 -> 0x0e000021 [ 86.619035][ T6103] [ 86.621363][ T6103] Reported by Kernel Concurrency Sanitizer on: [ 86.627514][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.3.918 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.637149][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.647201][ T6103] ================================================================== [ 86.680870][ T6148] loop4: detected capacity change from 0 to 164 [ 86.688459][ T6148] ISOFS: unable to read i-node block [ 86.695017][ T6148] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 86.705226][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.728753][ T6148] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 86.766783][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1