last executing test programs: 3.994945916s ago: executing program 1 (id=363): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a0091"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r2) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 3.862827175s ago: executing program 1 (id=365): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 3.008796033s ago: executing program 1 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2.583728893s ago: executing program 2 (id=374): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x3, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 2.514818737s ago: executing program 2 (id=376): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x8000000000000001, 0x0, 0x7}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 2.415606054s ago: executing program 0 (id=377): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) iopl(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) 2.061514158s ago: executing program 1 (id=380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xffffff9c}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069a0d001d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696890953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac931809ad5190b9324d8d66280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a69770c01d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e83a03e82642156fb14f7dc5d05d76e4cc2fc5d16d0a70e2dbdeda54fe9cf33ccaa327e8c15e0006529a397720a3104e33dc039b813416366334239dbbb9cca72d3618fef5f898bc2d751f6c214567b663ed41be7943b784413fa03dc1e56cd995af6911679b871c20ecf1f8eb9d3b7520e7a66667ca99e08f32fc9d95b3258d3f118aa6a90a9d3a2889eaf9a7b6e5b187a2316ed05dd719b8f3c7ac82f4913cb3cbfb6a0446cec2dfc4eed98c7ce4026b923b910f1eaa00a14cf00549166dda2a4decd6b00c4ce20a8ea4cb663a5681b9c8cf4812dad9879e2f72eebd887e1eebdd29589e8c2a9c60d9d0ea36ba81ff50972f3807d921cec59204e9e0b5a36cca6adce93c1afabd5daee333f4f838716f8065400e4e789dd53d9f8a5c9b6160f33f4c3212842993cd9f192a655d812ebbcde30455815510db4e217f6c6c429aa52034fc3f1eed6a370083dbccd422d6f2e3a0e3e76dade7069451fc252d71d1819ee62a90da03758d7e7cf889077fdd0e02275d8a2e382f5e90a9911522d05989993265b138f286da72ec8813f815e438af88c50bf8245dddf6430ed785691066b95ada8cd71d3074ee0afc3c78fa6b7072d2e571e0e", 0xda9}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd700000000246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0cc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0x9c}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) 2.061347728s ago: executing program 4 (id=381): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 1.841021353s ago: executing program 1 (id=382): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.625974268s ago: executing program 4 (id=383): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.495324558s ago: executing program 4 (id=384): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x540, 0x4) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$setpipe(r1, 0x407, 0xffffffff80000000) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 1.355571407s ago: executing program 0 (id=385): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0xa0880, 0x0) fremovexattr(r4, &(0x7f0000000300)=@known='user.incfs.size\x00') 1.333032228s ago: executing program 4 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x14, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, @jmp={0x5, 0x0, 0x0, 0x2, 0x8, 0xfffffffffffffff0, 0x10}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @alu={0x3, 0x1, 0x2, 0xb, 0x6, 0x80, 0x4}], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x4, 0x1f8d}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x5, 0xe, 0xb}, {0x3, 0x4, 0x6, 0x1}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x111be0, 0x8001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, &(0x7f00000004c0)}, 0x28c0) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, 0x0, 0x2}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) 1.260071813s ago: executing program 0 (id=387): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.259671243s ago: executing program 4 (id=388): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='a', 0x1, 0x8000c61) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000380)={[], [{@euid_gt}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x8}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x37, 0x39, 0x33, 0x37, 0x63, 0x31], 0x2d, [0x6, 0x37, 0x38, 0x38], 0x2d, [0x33, 0x63, 0x1, 0x33], 0x2d, [0x62, 0x36, 0x36, 0x65], 0x2d, [0x62, 0x64, 0x37, 0x38, 0x63, 0x39, 0x0, 0x34]}}}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 1.252054054s ago: executing program 2 (id=389): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x9}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$hidraw(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.142914412s ago: executing program 0 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x401, 0x7, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) 1.121052583s ago: executing program 3 (id=391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.103881404s ago: executing program 0 (id=392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 928.755136ms ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x188, 0x240, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0x16, 0x1, 0x30}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e01, 0x2, 0x3], 0x0, 0x2}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b36, 0x4], 0x6, 0x7}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffffff, 'sit0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x84, 0x3, 0x40}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 825.074593ms ago: executing program 3 (id=394): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 779.383087ms ago: executing program 3 (id=395): syz_socket_connect_nvme_tcp() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 672.382934ms ago: executing program 3 (id=396): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000000) 427.486961ms ago: executing program 3 (id=397): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xe3}, 0x100002, 0x8, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc) 376.471084ms ago: executing program 3 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x62000000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0xf55f, @empty}, 0x0, {[0x127]}}, 0x5c) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x20004085}, 0x80) 213.660225ms ago: executing program 2 (id=399): r0 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) close(0x3) fchdir(r3) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x6) 176.495238ms ago: executing program 4 (id=400): write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 136.074711ms ago: executing program 2 (id=401): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001500)="00005135eba1", 0x0, 0x400000, 0x10011, 0x1, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000340)=[{0x0}], 0x1) 16.686229ms ago: executing program 0 (id=402): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 0s ago: executing program 2 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {0x2}, {0xe, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048841}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 34.902044][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 34.902061][ T28] audit: type=1400 audit(1775685478.284:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.932162][ T28] audit: type=1400 audit(1775685478.314:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.934830][ T3301] cgroup: Unknown subsys name 'net' [ 34.960441][ T28] audit: type=1400 audit(1775685478.344:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.057948][ T3301] cgroup: Unknown subsys name 'cpuset' [ 35.064446][ T3301] cgroup: Unknown subsys name 'rlimit' [ 35.185968][ T28] audit: type=1400 audit(1775685478.564:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.213793][ T28] audit: type=1400 audit(1775685478.564:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.235627][ T28] audit: type=1400 audit(1775685478.564:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.256913][ T28] audit: type=1400 audit(1775685478.564:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.277678][ T28] audit: type=1400 audit(1775685478.594:77): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.298800][ T28] audit: type=1400 audit(1775685478.594:78): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.324096][ T28] audit: type=1400 audit(1775685478.594:79): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.330777][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.410298][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.590130][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.667591][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.720124][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.727585][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.734971][ T3312] bridge_slave_0: entered allmulticast mode [ 36.741855][ T3312] bridge_slave_0: entered promiscuous mode [ 36.756118][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.765425][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.772870][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.780057][ T3312] bridge_slave_1: entered allmulticast mode [ 36.787029][ T3312] bridge_slave_1: entered promiscuous mode [ 36.793584][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 36.831649][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.858716][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.883986][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.898493][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.905871][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.913135][ T3314] bridge_slave_0: entered allmulticast mode [ 36.919735][ T3314] bridge_slave_0: entered promiscuous mode [ 36.943695][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.951046][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.958412][ T3314] bridge_slave_1: entered allmulticast mode [ 36.964967][ T3314] bridge_slave_1: entered promiscuous mode [ 37.000472][ T3312] team0: Port device team_slave_0 added [ 37.006413][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.013846][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.021146][ T3315] bridge_slave_0: entered allmulticast mode [ 37.027783][ T3315] bridge_slave_0: entered promiscuous mode [ 37.047404][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.057642][ T3312] team0: Port device team_slave_1 added [ 37.063576][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.071095][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.078295][ T3315] bridge_slave_1: entered allmulticast mode [ 37.085333][ T3315] bridge_slave_1: entered promiscuous mode [ 37.102358][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.134581][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.142640][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.150235][ T3311] bridge_slave_0: entered allmulticast mode [ 37.157232][ T3311] bridge_slave_0: entered promiscuous mode [ 37.174638][ T3314] team0: Port device team_slave_0 added [ 37.180678][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.188400][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.214838][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.226462][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.233672][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.260169][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.271435][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.278762][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.285903][ T3317] bridge_slave_0: entered allmulticast mode [ 37.292328][ T3317] bridge_slave_0: entered promiscuous mode [ 37.299288][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.306414][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.313740][ T3311] bridge_slave_1: entered allmulticast mode [ 37.320404][ T3311] bridge_slave_1: entered promiscuous mode [ 37.333179][ T3314] team0: Port device team_slave_1 added [ 37.339958][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.352511][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.359856][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.367497][ T3317] bridge_slave_1: entered allmulticast mode [ 37.374392][ T3317] bridge_slave_1: entered promiscuous mode [ 37.396144][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.417221][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.437418][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.447836][ T3315] team0: Port device team_slave_0 added [ 37.454528][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.465775][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.480871][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.487921][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.514332][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.530850][ T3315] team0: Port device team_slave_1 added [ 37.556101][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.563468][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.590207][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.606178][ T3317] team0: Port device team_slave_0 added [ 37.613996][ T3312] hsr_slave_0: entered promiscuous mode [ 37.620492][ T3312] hsr_slave_1: entered promiscuous mode [ 37.627412][ T3311] team0: Port device team_slave_0 added [ 37.637093][ T3311] team0: Port device team_slave_1 added [ 37.648277][ T3317] team0: Port device team_slave_1 added [ 37.675704][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.682878][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.709117][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.724769][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.732116][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.758593][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.783980][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.791823][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.818235][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.837764][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.844936][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.872152][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.891545][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.898795][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.925475][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.947590][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.954681][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.981159][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.994388][ T3314] hsr_slave_0: entered promiscuous mode [ 38.000724][ T3314] hsr_slave_1: entered promiscuous mode [ 38.006601][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.012599][ T3314] Cannot create hsr debugfs directory [ 38.037759][ T3315] hsr_slave_0: entered promiscuous mode [ 38.044225][ T3315] hsr_slave_1: entered promiscuous mode [ 38.050401][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.056354][ T3315] Cannot create hsr debugfs directory [ 38.077348][ T3311] hsr_slave_0: entered promiscuous mode [ 38.083675][ T3311] hsr_slave_1: entered promiscuous mode [ 38.090019][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 38.095878][ T3311] Cannot create hsr debugfs directory [ 38.156371][ T3317] hsr_slave_0: entered promiscuous mode [ 38.163540][ T3317] hsr_slave_1: entered promiscuous mode [ 38.169821][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 38.176270][ T3317] Cannot create hsr debugfs directory [ 38.340166][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.349603][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.369293][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.381189][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.401258][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.411066][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.425224][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.435071][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.466122][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.476439][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.485457][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.494544][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.541020][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.550989][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.561244][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.573348][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.605225][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.614605][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.624153][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.641774][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.672146][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.686591][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.715113][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.726036][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.735996][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.743212][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.759776][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.767422][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.794106][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.801241][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.815595][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.827278][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.834963][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.848790][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.862606][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.880710][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.907895][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.915769][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.926476][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.937471][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.950050][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.957360][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.966225][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.973626][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.995346][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.002738][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.016372][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.024180][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.041088][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.048581][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.154569][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.172631][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.185273][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.232297][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.275689][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.353883][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.438707][ T3314] veth0_vlan: entered promiscuous mode [ 39.461392][ T3314] veth1_vlan: entered promiscuous mode [ 39.484329][ T3315] veth0_vlan: entered promiscuous mode [ 39.491433][ T3317] veth0_vlan: entered promiscuous mode [ 39.529255][ T3315] veth1_vlan: entered promiscuous mode [ 39.535835][ T3317] veth1_vlan: entered promiscuous mode [ 39.545523][ T3312] veth0_vlan: entered promiscuous mode [ 39.552294][ T3314] veth0_macvtap: entered promiscuous mode [ 39.569600][ T3314] veth1_macvtap: entered promiscuous mode [ 39.581176][ T3312] veth1_vlan: entered promiscuous mode [ 39.598274][ T3311] veth0_vlan: entered promiscuous mode [ 39.617728][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.631041][ T3317] veth0_macvtap: entered promiscuous mode [ 39.640745][ T3317] veth1_macvtap: entered promiscuous mode [ 39.649534][ T3311] veth1_vlan: entered promiscuous mode [ 39.657130][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.665671][ T3315] veth0_macvtap: entered promiscuous mode [ 39.686392][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.695884][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.706698][ T3315] veth1_macvtap: entered promiscuous mode [ 39.720743][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.730086][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.743307][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.753176][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.765504][ T3312] veth0_macvtap: entered promiscuous mode [ 39.773786][ T3312] veth1_macvtap: entered promiscuous mode [ 39.795231][ T3311] veth0_macvtap: entered promiscuous mode [ 39.802703][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.812227][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.822554][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.831786][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.841527][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.850870][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866574][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.879735][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.889893][ T3311] veth1_macvtap: entered promiscuous mode [ 39.899990][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.922972][ T29] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.932294][ T29] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.952623][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 39.952638][ T28] audit: type=1400 audit(1775685483.334:99): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.958891][ T29] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967161][ T28] audit: type=1400 audit(1775685483.344:100): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.013648][ T29] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.029629][ T28] audit: type=1400 audit(1775685483.344:101): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.044526][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.067087][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.077164][ T28] audit: type=1400 audit(1775685483.414:102): avc: denied { create } for pid=3479 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.079450][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.098379][ T28] audit: type=1400 audit(1775685483.414:103): avc: denied { write } for pid=3479 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.107935][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.145844][ T29] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.159730][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.173216][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.186981][ T29] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.210191][ T29] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.252745][ T29] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.261686][ T28] audit: type=1400 audit(1775685483.634:104): avc: denied { prog_load } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.277046][ T29] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.333298][ T28] audit: type=1400 audit(1775685483.634:105): avc: denied { bpf } for pid=3486 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.361888][ T29] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.372701][ T29] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.387281][ T3497] loop3: detected capacity change from 0 to 1024 [ 40.396161][ T28] audit: type=1400 audit(1775685483.644:106): avc: denied { map_create } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.426761][ T29] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.442388][ T3497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.447970][ T28] audit: type=1400 audit(1775685483.644:107): avc: denied { map_read map_write } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.481583][ T28] audit: type=1400 audit(1775685483.644:108): avc: denied { perfmon } for pid=3486 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.641949][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 40.655081][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 40.939717][ T3530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.990775][ T3530] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 41.058037][ T29] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 41.186861][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 41.385096][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.927002][ T3575] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.31'. [ 41.932775][ C1] hrtimer: interrupt took 61804 ns [ 41.957672][ T3575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 41.981033][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 41.998473][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 42.075597][ T3580] geneve2: entered promiscuous mode [ 42.083658][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 42.104334][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 42.123288][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 42.146015][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 42.488074][ T3600] Zero length message leads to an empty skb [ 42.725060][ T3604] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 42.760521][ T3603] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 43.347555][ T3636] io-wq is not configured for unbound workers [ 43.890857][ T3660] loop0: detected capacity change from 0 to 512 [ 43.904979][ T3660] ext4: Unknown parameter 'euid>00000000000000000000' [ 44.158776][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.167070][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.218027][ T3679] loop4: detected capacity change from 0 to 512 [ 44.315717][ T3679] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.69: inode has both inline data and extents flags [ 44.339363][ T3679] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.339517][ T3679] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.69: couldn't read orphan inode 15 (err -117) [ 44.349607][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 44.349632][ C1] EXT4-fs (loop4): initial error at time 1775685487: ext4_orphan_get:1397: inode 15 [ 44.349693][ C1] EXT4-fs (loop4): last error at time 1775685487: ext4_orphan_get:1397: inode 15 [ 44.391354][ T3679] loop4: lost filesystem error report for type 5 error -117 [ 44.405534][ T3679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.480997][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.525175][ T3690] loop4: detected capacity change from 0 to 128 [ 44.556254][ T3690] syz.4.73: attempt to access beyond end of device [ 44.556254][ T3690] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 44.999147][ T3709] syz.0.80 uses obsolete (PF_INET,SOCK_PACKET) [ 45.065591][ T3711] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 45.082776][ T3711] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 45.150628][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 45.150646][ T28] audit: type=1400 audit(1775685488.524:220): avc: denied { create } for pid=3714 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.258397][ T28] audit: type=1400 audit(1775685488.534:221): avc: denied { write } for pid=3714 comm="syz.2.86" path="socket:[7344]" dev="sockfs" ino=7344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.332105][ T28] audit: type=1400 audit(1775685488.624:222): avc: denied { read write } for pid=3720 comm="syz.2.89" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.361145][ T28] audit: type=1400 audit(1775685488.624:223): avc: denied { open } for pid=3720 comm="syz.2.89" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.454702][ T3728] __nla_validate_parse: 4 callbacks suppressed [ 45.454803][ T3728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 45.766182][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 45.797007][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 46.104207][ T28] audit: type=1400 audit(1775685489.484:224): avc: denied { mount } for pid=3736 comm="syz.1.96" name="/" dev="autofs" ino=7398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 46.195353][ T3741] dummy0: entered promiscuous mode [ 46.200844][ T28] audit: type=1400 audit(1775685489.574:225): avc: denied { accept } for pid=3739 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.224242][ T3744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 46.238228][ T3741] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.252404][ T3746] syz.3.99 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.267134][ T3744] macvlan2: entered promiscuous mode [ 46.275454][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 46.282040][ T3747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'. [ 46.286399][ T28] audit: type=1400 audit(1775685489.654:226): avc: denied { ioctl } for pid=3739 comm="syz.2.97" path="socket:[7421]" dev="sockfs" ino=7421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.573915][ T3765] batman_adv: batadv0: Adding interface: dummy0 [ 46.595402][ T3765] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.652291][ T28] audit: type=1400 audit(1775685490.034:227): avc: denied { create } for pid=3764 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.677290][ T3765] batman_adv: batadv0: Interface activated: dummy0 [ 46.706630][ T3770] batadv0: mtu less than device minimum [ 46.723431][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.734745][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.745856][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.756893][ T28] audit: type=1400 audit(1775685490.084:228): avc: denied { ioctl } for pid=3764 comm="syz.1.107" path="socket:[7482]" dev="sockfs" ino=7482 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.757232][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.792787][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.803952][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.814967][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.826339][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.837644][ T3770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.861937][ T28] audit: type=1400 audit(1775685490.244:229): avc: denied { shutdown } for pid=3771 comm="syz.2.109" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.947857][ T3779] loop2: detected capacity change from 0 to 512 [ 46.969072][ T3779] EXT4-fs: Ignoring removed oldalloc option [ 46.990468][ T3779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.013541][ T3779] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.113: iget: bad i_size value: 38620345925642 [ 47.037380][ T3779] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.040346][ T3779] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.113: couldn't read orphan inode 15 (err -117) [ 47.049652][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.049675][ C1] EXT4-fs (loop2): initial error at time 1775685490: ext4_orphan_get:1397: inode 15 [ 47.049719][ C1] EXT4-fs (loop2): last error at time 1775685490: ext4_orphan_get:1397: inode 15 [ 47.206148][ T3779] loop2: lost filesystem error report for type 5 error -117 [ 47.208137][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.317858][ T3790] process 'syz.3.116' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 47.785805][ T29] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 47.799092][ T29] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.812157][ T29] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.812157][ T29] [ 47.823961][ T29] EXT4-fs (loop2): Total free blocks count 0 [ 47.830425][ T29] EXT4-fs (loop2): Free/Dirty block details [ 47.836478][ T29] EXT4-fs (loop2): free_blocks=0 [ 47.852208][ T29] EXT4-fs (loop2): dirty_blocks=16000 [ 47.868040][ T29] EXT4-fs (loop2): Block reservation details [ 47.906882][ T29] EXT4-fs (loop2): i_reserved_data_blocks=16000 [ 47.966005][ T3809] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.993681][ T578] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 48.097909][ T3314] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 48.178429][ T3824] team0 (unregistering): Port device team_slave_0 removed [ 48.222031][ T3824] team0 (unregistering): Port device team_slave_1 removed [ 48.361913][ T3834] loop3: detected capacity change from 0 to 512 [ 48.428154][ T3834] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 48.450599][ T3845] netlink: 'syz.4.139': attribute type 27 has an invalid length. [ 48.463519][ T3834] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.135: inode has both inline data and extents flags [ 48.488030][ T3834] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 48.491878][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.509374][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.516675][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 48.523242][ C1] EXT4-fs (loop3): initial error at time 1775685491: ext4_orphan_get:1397: inode 13 [ 48.532700][ C1] EXT4-fs (loop3): last error at time 1775685491: ext4_orphan_get:1397: inode 13 [ 48.555096][ T3834] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.135: couldn't read orphan inode 13 (err -117) [ 48.569138][ T3834] loop3: lost filesystem error report for type 5 error -117 [ 48.579712][ T3834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.624986][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.634245][ T3843] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 48.659616][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.668325][ T3834] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 48.703124][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.780313][ T3850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.780938][ T3387] kernel write not supported for file bpf-prog (pid: 3387 comm: kworker/0:3) [ 48.802531][ T3850] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.827150][ T41] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.853300][ T41] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.879071][ T41] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.908778][ T41] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.963699][ T3850] syz.4.139 (3850) used greatest stack depth: 10408 bytes left [ 48.977655][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 49.111670][ T3869] loop4: detected capacity change from 0 to 512 [ 49.120749][ T3869] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.140335][ T3869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.166054][ T3869] EXT4-fs (loop4): 1 truncate cleaned up [ 49.177615][ T3869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.214820][ T3869] netlink: 'syz.4.147': attribute type 2 has an invalid length. [ 49.333308][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.368989][ T3893] Illegal XDP return value 4294967294 on prog (id 31) dev syz_tun, expect packet loss! [ 49.467339][ T3900] ======================================================= [ 49.467339][ T3900] WARNING: The mand mount option has been deprecated and [ 49.467339][ T3900] and is ignored by this kernel. Remove the mand [ 49.467339][ T3900] option from the mount to silence this warning. [ 49.467339][ T3900] ======================================================= [ 49.679710][ T3904] geneve2: entered promiscuous mode [ 49.720865][ T29] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 49.755090][ T578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 49.767296][ T578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 49.781881][ T578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 49.841192][ T3904] syz.4.161 (3904) used greatest stack depth: 10328 bytes left [ 49.884873][ T3912] xt_time: unknown flags 0xc [ 49.907073][ T3912] loop3: detected capacity change from 0 to 512 [ 49.940906][ T3908] xt_CT: No such helper "snmp_trap" [ 49.962775][ T3912] EXT4-fs: Ignoring removed nobh option [ 50.167773][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 50.167794][ T28] audit: type=1400 audit(1775685493.554:261): avc: denied { read } for pid=3915 comm="syz.2.165" path="socket:[8336]" dev="sockfs" ino=8336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.201617][ T3912] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.220551][ T3912] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.162: ea_inode file size=4294967295 entry size=6 [ 50.235004][ T3912] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.248640][ T3912] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.162: corrupted inode contents [ 50.261021][ T3912] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.267244][ T3912] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #15: comm syz.3.162: mark_inode_dirty error [ 50.287927][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 50.287956][ C1] EXT4-fs (loop3): initial error at time 1775685493: ext4_do_update_inode:5602: inode 15 [ 50.288007][ C1] EXT4-fs (loop3): last error at time 1775685493: ext4_do_update_inode:5602: inode 15 [ 50.318190][ T3912] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.318664][ T3912] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.162: corrupted inode contents [ 50.361825][ T28] audit: type=1400 audit(1775685493.744:262): avc: denied { create } for pid=3921 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.376693][ T3912] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.385175][ T3912] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.162: mark_inode_dirty error [ 50.389576][ T28] audit: type=1400 audit(1775685493.764:263): avc: denied { bind } for pid=3921 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.429916][ T3912] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.438239][ T3912] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.162: mark inode dirty (error -117) [ 50.446995][ T28] audit: type=1400 audit(1775685493.764:264): avc: denied { write } for pid=3921 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.505795][ T3912] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.510067][ T3912] EXT4-fs warning (device loop3): ext4_evict_inode:285: xattr delete (err -117) [ 50.547244][ T3912] EXT4-fs (loop3): 1 orphan inode deleted [ 50.562167][ T3912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.621740][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.655366][ T28] audit: type=1400 audit(1775685494.034:265): avc: denied { connect } for pid=3923 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.722548][ T28] audit: type=1400 audit(1775685494.104:266): avc: denied { mount } for pid=3925 comm="syz.3.169" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.787356][ T28] audit: type=1400 audit(1775685494.134:267): avc: denied { setopt } for pid=3925 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.889497][ T3930] IPv6: sit1: Disabled Multicast RS [ 51.283240][ T28] audit: type=1400 audit(1775685494.664:268): avc: denied { create } for pid=3935 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 51.370873][ T28] audit: type=1400 audit(1775685494.664:269): avc: denied { watch watch_reads } for pid=3934 comm="syz.4.172" path="/45/file1" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.462825][ T28] audit: type=1400 audit(1775685494.704:270): avc: denied { connect } for pid=3935 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 52.530648][ T3976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.188'. [ 52.584898][ T3949] syz.4.180 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.604205][ T3949] CPU: 1 UID: 0 PID: 3949 Comm: syz.4.180 Not tainted syzkaller #0 PREEMPT(full) [ 52.604250][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 52.604273][ T3949] Call Trace: [ 52.604282][ T3949] [ 52.604292][ T3949] __dump_stack+0x1d/0x30 [ 52.604448][ T3949] dump_stack_lvl+0x95/0xd0 [ 52.604486][ T3949] dump_stack+0x15/0x1b [ 52.604595][ T3949] dump_header+0x80/0x240 [ 52.604628][ T3949] oom_kill_process+0x295/0x350 [ 52.604689][ T3949] out_of_memory+0x97d/0xb80 [ 52.604725][ T3949] try_charge_memcg+0x62e/0xa10 [ 52.604797][ T3949] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 52.604857][ T3949] __swap_cache_prepare_and_add+0x67/0x460 [ 52.604903][ T3949] ? alloc_pages_mpol+0x217/0x260 [ 52.604941][ T3949] swap_cache_alloc_folio+0xa2/0x120 [ 52.604990][ T3949] swap_cluster_readahead+0x36b/0x3d0 [ 52.605031][ T3949] swapin_readahead+0xde/0x840 [ 52.605074][ T3949] ? _raw_spin_unlock+0x9/0x30 [ 52.605166][ T3949] ? swap_put_entries_cluster+0x385/0x3a0 [ 52.605222][ T3949] ? swap_put_entries_cluster+0x161/0x3a0 [ 52.605269][ T3949] ? __rcu_read_unlock+0x4e/0x70 [ 52.605302][ T3949] ? swap_cache_get_folio+0x26f/0x280 [ 52.605419][ T3949] do_swap_page+0x2fe/0x21e0 [ 52.605473][ T3949] ? css_rstat_updated+0xbb/0x280 [ 52.605504][ T3949] ? __rcu_read_lock+0x36/0x50 [ 52.605535][ T3949] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 52.605697][ T3949] handle_mm_fault+0xb46/0x3020 [ 52.605745][ T3949] ? vma_start_read+0x1c7/0x2c0 [ 52.605791][ T3949] do_user_addr_fault+0x62f/0x1050 [ 52.605850][ T3949] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 52.605893][ T3949] ? trace_page_fault_user+0x1f/0xe0 [ 52.605942][ T3949] exc_page_fault+0x62/0xa0 [ 52.605996][ T3949] asm_exc_page_fault+0x26/0x30 [ 52.606031][ T3949] RIP: 0033:0x7f2d7ea2797e [ 52.606064][ T3949] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 52.606085][ T3949] RSP: 002b:00007ffce6109300 EFLAGS: 00010246 [ 52.606105][ T3949] RAX: 0000000000000000 RBX: 000055557cae3500 RCX: 00007f2d7ea2d04e [ 52.606160][ T3949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.606179][ T3949] RBP: 00007f2d7ece7da0 R08: 0000000000000000 R09: 0000000000000000 [ 52.606199][ T3949] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000cd2a [ 52.606282][ T3949] R13: 00007f2d7ece618c R14: 000000000000cb69 R15: 00007ffce6109480 [ 52.606324][ T3949] [ 52.606384][ T3949] memory: usage 307200kB, limit 307200kB, failcnt 1082 [ 52.873931][ T3979] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.189'. [ 52.876225][ T3949] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 52.885427][ T3979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.189'. [ 52.903574][ T3949] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 52.911713][ T3949] Memory cgroup stats for /syz4: [ 52.912094][ T3949] cache 0 [ 52.920572][ T3949] rss 0 [ 52.923798][ T3949] shmem 0 [ 52.927789][ T3949] mapped_file 0 [ 52.931583][ T3949] dirty 0 [ 52.934757][ T3949] writeback 0 [ 52.938541][ T3949] workingset_refault_anon 61 [ 52.943887][ T3949] workingset_refault_file 437 [ 52.949087][ T3949] swap 200704 [ 52.952631][ T3949] swapcached 450560 [ 52.957055][ T3949] pgpgin 14891 [ 52.960692][ T3949] pgpgout 14891 [ 52.964252][ T3949] pgfault 17387 [ 52.968304][ T3949] pgmajfault 46 [ 52.972125][ T3949] inactive_anon 0 [ 52.975825][ T3949] active_anon 0 [ 52.981275][ T3949] inactive_file 0 [ 52.985150][ T3949] active_file 0 [ 52.988959][ T3949] unevictable 0 [ 52.992737][ T3949] hierarchical_memory_limit 314572800 [ 52.998351][ T3949] hierarchical_memsw_limit 9223372036854771712 [ 53.004761][ T3949] total_cache 0 [ 53.008731][ T3949] total_rss 0 [ 53.012106][ T3949] total_shmem 0 [ 53.015833][ T3949] total_mapped_file 0 [ 53.030956][ T3949] total_dirty 0 [ 53.034633][ T3949] total_writeback 0 [ 53.040521][ T3949] total_workingset_refault_anon 61 [ 53.046367][ T3949] total_workingset_refault_file 437 [ 53.051721][ T3949] total_swap 200704 [ 53.055593][ T3949] total_swapcached 450560 [ 53.066575][ T3949] total_pgpgin 14891 [ 53.070946][ T3949] total_pgpgout 14891 [ 53.075032][ T3949] total_pgfault 17387 [ 53.079442][ T3949] total_pgmajfault 46 [ 53.083781][ T3949] total_inactive_anon 0 [ 53.090707][ T3949] total_active_anon 0 [ 53.094994][ T3949] total_inactive_file 0 [ 53.099707][ T3949] total_active_file 0 [ 53.104327][ T3949] total_unevictable 0 [ 53.109050][ T3949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.180,pid=3949,uid=0 [ 53.161371][ T3949] Memory cgroup out of memory: Killed process 3949 (syz.4.180) total-vm:96344kB, anon-rss:1228kB, file-rss:21956kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 53.219143][ T3950] syz.4.180 (3950) used greatest stack depth: 9896 bytes left [ 53.545791][ T4007] loop4: detected capacity change from 0 to 512 [ 53.559866][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.573556][ T4007] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.801415][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.102375][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 54.159334][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 54.388579][ T4042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 54.404214][ T4042] bond2: entered promiscuous mode [ 54.860498][ T4055] loop1: detected capacity change from 0 to 512 [ 54.877528][ T4055] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=lt{uY(Μ:v_?BAА%3֎Rww/锺1$b넋R ,errors=continue) failed with errno=-22 [ 54.940988][ T4054] loop0: detected capacity change from 0 to 8192 [ 55.088192][ T4054] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 55.108584][ T4054] loop0: partition table partially beyond EOD, truncated [ 55.127384][ T4054] loop0: p1 start 100663296 is beyond EOD, truncated [ 55.135051][ T4054] loop0: p2 size 134217732 extends beyond EOD, truncated [ 55.160556][ T4054] loop0: p4 size 14876672 extends beyond EOD, truncated [ 55.168917][ T4054] loop0: p5 size 134217732 extends beyond EOD, truncated [ 55.180979][ T4054] loop0: p6 size 14876672 extends beyond EOD, truncated [ 55.218632][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 55.218651][ T28] audit: type=1400 audit(1775685498.604:288): avc: denied { bind } for pid=4064 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.253839][ T4065] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 55.268036][ T4065] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 55.277909][ T28] audit: type=1400 audit(1775685498.634:289): avc: denied { setopt } for pid=4064 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.434440][ T41] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.484192][ T28] audit: type=1400 audit(1775685498.864:290): avc: denied { read } for pid=4078 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.535998][ T3963] udevd[3963]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 55.536035][ T4068] udevd[4068]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 55.548238][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 55.563601][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 55.573061][ T4069] udevd[4069]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 55.581994][ T4082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 55.646122][ T4083] syzkaller0: entered promiscuous mode [ 55.661096][ T4083] syzkaller0: entered allmulticast mode [ 55.687374][ T28] audit: type=1400 audit(1775685499.074:291): avc: denied { relabelfrom } for pid=4081 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.724156][ T4083] syzkaller0: tun_net_xmit 1280 [ 55.729793][ T4083] syzkaller0: create flow: hash 2891824356 index 1 [ 55.749378][ T4088] netlink: 76 bytes leftover after parsing attributes in process `syz.1.231'. [ 55.758821][ T28] audit: type=1400 audit(1775685499.074:292): avc: denied { relabelto } for pid=4081 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.786073][ T4081] syzkaller0: delete flow: hash 2891824356 index 1 [ 55.796267][ T4090] loop2: detected capacity change from 0 to 4096 [ 55.854327][ T4092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 55.861305][ T4092] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.876882][ T4092] vhci_hcd vhci_hcd.0: Device attached [ 55.887827][ T4092] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 55.894916][ T4092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.924925][ T4090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.943757][ T4092] vhci_hcd vhci_hcd.0: Device attached [ 55.999416][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.073683][ T4092] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 56.080355][ T4092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.132272][ T4111] netlink: 'syz.2.235': attribute type 4 has an invalid length. [ 56.140515][ T3387] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 56.157505][ T28] audit: type=1400 audit(1775685499.474:293): avc: denied { shutdown } for pid=4102 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.212925][ T4111] netlink: 'syz.2.235': attribute type 4 has an invalid length. [ 56.336878][ T4092] vhci_hcd vhci_hcd.0: Device attached [ 56.343060][ T4115] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.239'. [ 56.367454][ T4115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.239'. [ 56.390839][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.418445][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.511031][ T4118] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 56.518458][ T4118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 56.544055][ T29] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.563400][ T29] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.607261][ T29] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.667113][ T4118] vhci_hcd vhci_hcd.0: Device attached [ 56.969083][ T4107] vhci_hcd: connection closed [ 56.969570][ T58] vhci_hcd vhci_hcd.1: stop threads [ 56.980512][ T4119] vhci_hcd: connection closed [ 56.980666][ T58] vhci_hcd vhci_hcd.1: release socket [ 57.000242][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 57.015923][ T58] vhci_hcd vhci_hcd.1: stop threads [ 57.021488][ T4093] vhci_hcd: connection reset by peer [ 57.027051][ T4095] vhci_hcd: connection closed [ 57.037975][ T58] vhci_hcd vhci_hcd.1: release socket [ 57.067365][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 57.116966][ T58] vhci_hcd vhci_hcd.1: stop threads [ 57.173436][ T58] vhci_hcd vhci_hcd.1: release socket [ 57.182878][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 57.205056][ T58] vhci_hcd vhci_hcd.1: stop threads [ 57.215144][ T58] vhci_hcd vhci_hcd.1: release socket [ 57.224569][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 57.515103][ T4133] tipc: Failed to remove unknown binding: 66,0,0/0:3402898893/3402898894 [ 57.748121][ T28] audit: type=1400 audit(1775685501.134:294): avc: denied { bind } for pid=4140 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.801960][ T4145] loop4: detected capacity change from 0 to 128 [ 57.852125][ T4147] loop3: detected capacity change from 0 to 256 [ 57.869036][ T4147] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.955708][ T4149] syz.4.247: attempt to access beyond end of device [ 57.955708][ T4149] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 58.037462][ T4149] syz.4.247: attempt to access beyond end of device [ 58.037462][ T4149] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 58.087526][ T4156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.251'. [ 58.097593][ T4149] syz.4.247: attempt to access beyond end of device [ 58.097593][ T4149] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 58.114887][ T4149] syz.4.247: attempt to access beyond end of device [ 58.114887][ T4149] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 58.129661][ T4149] syz.4.247: attempt to access beyond end of device [ 58.129661][ T4149] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 58.155312][ T4149] syz.4.247: attempt to access beyond end of device [ 58.155312][ T4149] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 58.171993][ T4149] syz.4.247: attempt to access beyond end of device [ 58.171993][ T4149] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 58.205614][ T4149] syz.4.247: attempt to access beyond end of device [ 58.205614][ T4149] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 58.269581][ T4149] syz.4.247: attempt to access beyond end of device [ 58.269581][ T4149] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 58.299941][ T4164] loop2: detected capacity change from 0 to 512 [ 58.315466][ T4149] syz.4.247: attempt to access beyond end of device [ 58.315466][ T4149] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 58.330231][ T4164] EXT4-fs: Ignoring removed bh option [ 58.379522][ T4164] EXT4-fs: inline encryption not supported [ 58.411598][ T4164] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.475533][ T4164] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.495088][ T4183] loop4: detected capacity change from 0 to 512 [ 58.519511][ T28] audit: type=1326 audit(1775685501.904:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db00fc819 code=0x7ffc0000 [ 58.571086][ T4187] loop0: detected capacity change from 0 to 1024 [ 58.578805][ T4164] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.252: bg 0: block 248: padding at end of block bitmap is not set [ 58.590341][ T4187] EXT4-fs: Ignoring removed bh option [ 58.600849][ T28] audit: type=1326 audit(1775685501.904:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9db00fc819 code=0x7ffc0000 [ 58.611848][ T4183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.628733][ T28] audit: type=1326 audit(1775685501.904:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4175 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db00fc819 code=0x7ffc0000 [ 58.667286][ T4164] loop2: lost filesystem error report for type 5 error -117 [ 58.673381][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.678888][ T4190] loop3: detected capacity change from 0 to 512 [ 58.694067][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 58.694107][ C1] EXT4-fs (loop2): last error at time 1775685502: ext4_validate_block_bitmap:441 [ 58.695104][ T4187] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20265 [ 58.717929][ T4164] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.252: Failed to acquire dquot type 1 [ 58.741524][ T4187] EXT4-fs error (device loop0): ext4_lookup:1777: inode #2: comm syz.0.262: bad inode number: 12 [ 58.752699][ T4187] EXT4-fs (loop0): Remounting filesystem read-only [ 58.763981][ T4164] loop2: lost filesystem error report for type 5 error -28 [ 58.764530][ T4164] EXT4-fs (loop2): 1 truncate cleaned up [ 58.804603][ T4164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 58.859275][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.992633][ T4198] netlink: 64 bytes leftover after parsing attributes in process `syz.0.266'. [ 59.065877][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 59.085606][ T4164] syz.2.252 (4164) used greatest stack depth: 9400 bytes left [ 59.164423][ T29] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.183151][ T4205] Bluetooth: hci0: Frame reassembly failed (-90) [ 59.628552][ T4220] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 59.637281][ T4218] tipc: Started in network mode [ 59.643510][ T4218] tipc: Node identity ee0e977a067d, cluster identity 4711 [ 59.655137][ T4218] tipc: Enabled bearer , priority 0 [ 59.671096][ T4220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.683271][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.767726][ T4218] syzkaller0: entered promiscuous mode [ 59.773354][ T4218] syzkaller0: entered allmulticast mode [ 59.797249][ T4218] tipc: Resetting bearer [ 59.849021][ T4220] bond1: (slave veth3): Enslaving as an active interface with a down link [ 59.874983][ T4232] loop3: detected capacity change from 0 to 2048 [ 59.886486][ T4225] batman_adv: batadv0: Interface deactivated: dummy0 [ 59.896287][ T4225] batman_adv: batadv0: Removing interface: dummy0 [ 59.909759][ T4225] bond1: (slave dummy0): making interface the new active one [ 59.923627][ T4232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.977819][ T4225] dummy0: entered promiscuous mode [ 59.983809][ T4225] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 60.047473][ T4229] bond1 (unregistering): (slave veth3): Releasing active interface [ 60.120335][ T4229] bond1 (unregistering): (slave dummy0): Releasing active interface [ 60.142080][ T4229] bond1 (unregistering): Released all slaves [ 60.162866][ T4217] tipc: Resetting bearer [ 60.205290][ T4217] tipc: Disabling bearer [ 60.216511][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.248850][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 60.248867][ T28] audit: type=1400 audit(1775685503.634:318): avc: denied { mount } for pid=4243 comm="syz.4.284" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 60.317019][ T28] audit: type=1400 audit(1775685503.694:319): avc: denied { mount } for pid=4247 comm="syz.1.285" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 60.364123][ T28] audit: type=1400 audit(1775685503.744:320): avc: denied { write } for pid=4250 comm="syz.3.286" path="socket:[8931]" dev="sockfs" ino=8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.407542][ T28] audit: type=1400 audit(1775685503.794:321): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 60.539141][ T4263] loop1: detected capacity change from 0 to 512 [ 60.546352][ T4263] EXT4-fs: Ignoring removed bh option [ 60.548620][ T28] audit: type=1400 audit(1775685503.924:322): avc: denied { mounton } for pid=4247 comm="syz.1.285" path="/bus" dev="bpf" ino=8938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 60.584626][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.598538][ T4263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.631596][ T4270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 60.718013][ T28] audit: type=1400 audit(1775685504.104:323): avc: denied { ioctl } for pid=4264 comm="syz.4.292" path="socket:[8946]" dev="sockfs" ino=8946 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.782363][ T4277] loop1: detected capacity change from 0 to 128 [ 60.801683][ T4277] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.824556][ T4277] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.849256][ T28] audit: type=1400 audit(1775685504.234:324): avc: denied { unmount } for pid=4276 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.871524][ T578] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.900345][ T4277] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.996058][ T3420] IPVS: starting estimator thread 0... [ 61.035328][ T4300] netlink: 'syz.2.305': attribute type 22 has an invalid length. [ 61.046732][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 61.059999][ T578] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.077311][ T4300] netlink: 'syz.2.305': attribute type 22 has an invalid length. [ 61.086020][ T578] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.096042][ T578] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.107050][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 61.107185][ T4296] IPVS: using max 1920 ests per chain, 96000 per kthread [ 61.149234][ T28] audit: type=1400 audit(1775685504.534:325): avc: denied { read } for pid=4303 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.169851][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.226241][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.309'. [ 61.317104][ T3387] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 61.417981][ T28] audit: type=1400 audit(1775685504.784:326): avc: denied { create } for pid=4317 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 61.476812][ T28] audit: type=1400 audit(1775685504.784:327): avc: denied { sys_admin } for pid=4317 comm="syz.0.312" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 61.820770][ T4323] netlink: 76 bytes leftover after parsing attributes in process `syz.0.314'. [ 62.269993][ T4349] loop3: detected capacity change from 0 to 512 [ 62.282219][ T4349] EXT4-fs: inline encryption not supported [ 62.319613][ T4349] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 63.131090][ T4378] loop3: detected capacity change from 0 to 128 [ 63.357677][ T4385] bio_check_eod: 41 callbacks suppressed [ 63.357697][ T4385] syz.3.337: attempt to access beyond end of device [ 63.357697][ T4385] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 63.482480][ T4385] syz.3.337: attempt to access beyond end of device [ 63.482480][ T4385] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 63.527817][ T4385] syz.3.337: attempt to access beyond end of device [ 63.527817][ T4385] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 63.558667][ T4385] syz.3.337: attempt to access beyond end of device [ 63.558667][ T4385] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 63.601884][ T4385] syz.3.337: attempt to access beyond end of device [ 63.601884][ T4385] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 63.631320][ T4385] syz.3.337: attempt to access beyond end of device [ 63.631320][ T4385] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 63.663227][ T4385] syz.3.337: attempt to access beyond end of device [ 63.663227][ T4385] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 63.695197][ T4385] syz.3.337: attempt to access beyond end of device [ 63.695197][ T4385] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 63.726812][ T4385] syz.3.337: attempt to access beyond end of device [ 63.726812][ T4385] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 63.757110][ T4385] syz.3.337: attempt to access beyond end of device [ 63.757110][ T4385] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 64.022880][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 64.046187][ T4402] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 64.051116][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 64.053068][ T4402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.069285][ T4402] vhci_hcd vhci_hcd.0: Device attached [ 64.079773][ T4402] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 64.086370][ T4402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.106980][ T4402] vhci_hcd vhci_hcd.0: Device attached [ 64.188908][ T4413] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 64.196034][ T4413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.214501][ T4413] vhci_hcd vhci_hcd.0: Device attached [ 64.271639][ T4402] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 64.278465][ T4402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.296874][ T4124] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 64.305540][ T4402] vhci_hcd vhci_hcd.0: Device attached [ 64.333666][ T4418] vhci_hcd: connection closed [ 64.333816][ T4414] vhci_hcd: connection closed [ 64.358128][ T4403] vhci_hcd: connection reset by peer [ 64.367253][ T4405] vhci_hcd: connection closed [ 64.369648][ T41] vhci_hcd vhci_hcd.2: stop threads [ 64.381069][ T41] vhci_hcd vhci_hcd.2: release socket [ 64.399800][ T41] vhci_hcd vhci_hcd.2: disconnect device [ 64.416419][ T41] vhci_hcd vhci_hcd.2: stop threads [ 64.424797][ T41] vhci_hcd vhci_hcd.2: release socket [ 64.443775][ T41] vhci_hcd vhci_hcd.2: disconnect device [ 64.457376][ T41] vhci_hcd vhci_hcd.2: stop threads [ 64.475248][ T41] vhci_hcd vhci_hcd.2: release socket [ 64.489034][ T41] vhci_hcd vhci_hcd.2: disconnect device [ 64.515303][ T41] vhci_hcd vhci_hcd.2: stop threads [ 64.533251][ T41] vhci_hcd vhci_hcd.2: release socket [ 64.551410][ T41] vhci_hcd vhci_hcd.2: disconnect device [ 64.865485][ T4430] netlink: 'syz.3.352': attribute type 22 has an invalid length. [ 64.904748][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 64.918245][ T1624] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.918293][ T4430] netlink: 'syz.3.352': attribute type 22 has an invalid length. [ 64.918311][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 65.037688][ T4435] tipc: Failed to remove unknown binding: 66,0,0/0:1299517099/1299517100 [ 65.047211][ T4435] tipc: Failed to remove unknown binding: 66,0,0/0:1299517099/1299517100 [ 65.056281][ T1624] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.067563][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.074357][ T4437] Bluetooth: hci0: Frame reassembly failed (-90) [ 65.084833][ T1624] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.116836][ T1624] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.184159][ T4441] loop3: detected capacity change from 0 to 4096 [ 65.261242][ T4441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.317399][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 65.317417][ T28] audit: type=1400 audit(1775685508.704:338): avc: denied { create } for pid=4440 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.352120][ T28] audit: type=1400 audit(1775685508.704:339): avc: denied { add_name } for pid=4440 comm="syz.3.358" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.373841][ T28] audit: type=1400 audit(1775685508.734:340): avc: denied { map } for pid=4447 comm="syz.2.361" path="socket:[9561]" dev="sockfs" ino=9561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.427372][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.162269][ T28] audit: type=1400 audit(1775685509.544:341): avc: denied { read write } for pid=4474 comm="syz.2.371" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.162990][ T4475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.197241][ T4475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.208579][ T28] audit: type=1400 audit(1775685509.544:342): avc: denied { open } for pid=4474 comm="syz.2.371" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.233088][ T28] audit: type=1400 audit(1775685509.544:343): avc: denied { ioctl } for pid=4474 comm="syz.2.371" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.486552][ T4482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.497048][ T4482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.531109][ T4482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.542253][ T4482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.590288][ T4482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.601087][ T4482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.650556][ T4482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.661223][ T4482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.725829][ T58] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.734442][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.747131][ T58] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.762839][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.786082][ T41] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.800604][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.812821][ T41] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.831331][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.847574][ T4489] loop2: detected capacity change from 0 to 512 [ 66.857570][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 66.898512][ T4489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.942715][ T28] audit: type=1400 audit(1775685510.324:344): avc: denied { mounton } for pid=4493 comm="syz.3.378" path="/file0" dev="ramfs" ino=9755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 67.057895][ T4498] loop3: detected capacity change from 0 to 512 [ 67.086866][ T3533] Bluetooth: hci0: command 0x1003 tx timeout [ 67.094067][ T4206] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.107198][ T4498] EXT4-fs: Ignoring removed nobh option [ 67.139327][ T4498] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.379: corrupted inode contents [ 67.157502][ T4498] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.165885][ T4498] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #3: comm syz.3.379: mark_inode_dirty error [ 67.175725][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 67.175747][ C0] EXT4-fs (loop3): initial error at time 1775685510: ext4_do_update_inode:5602: inode 3 [ 67.175777][ C0] EXT4-fs (loop3): last error at time 1775685510: ext4_do_update_inode:5602: inode 3 [ 67.214432][ T4498] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.233262][ T4498] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.379: corrupted inode contents [ 67.254394][ T4498] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.259579][ T4498] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.379: mark_inode_dirty error [ 67.284024][ T4498] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.287508][ T4498] Quota error (device loop3): write_blk: dquota write failed [ 67.304555][ T4498] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 67.314885][ T4498] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.379: Failed to acquire dquot type 0 [ 67.326387][ T4498] loop3: lost filesystem error report for type 5 error -117 [ 67.330775][ T4498] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.379: corrupted inode contents [ 67.397000][ T4498] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.397760][ T4498] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #16: comm syz.3.379: mark_inode_dirty error [ 67.474766][ T4498] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.475560][ T4498] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.379: corrupted inode contents [ 67.525000][ T4498] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.525291][ T4498] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.379: mark_inode_dirty error [ 67.577733][ T4498] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.577948][ T4498] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.379: corrupted inode contents [ 67.660339][ T4498] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.747685][ T4498] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 67.818519][ T4498] loop3: lost filesystem error report for type 5 error -117 [ 67.818764][ T4498] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.379: corrupted inode contents [ 67.877299][ T4498] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.877501][ T4498] EXT4-fs error (device loop3): ext4_truncate:4602: inode #16: comm syz.3.379: mark_inode_dirty error [ 67.937328][ T4498] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 67.946532][ T4498] loop3: lost filesystem error report for type 5 error -117 [ 67.969692][ T4498] EXT4-fs (loop3): 1 truncate cleaned up [ 68.010793][ T4498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.048720][ T4498] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.089205][ T4489] syz.2.376 (4489) used greatest stack depth: 8552 bytes left [ 68.110354][ T4519] loop4: detected capacity change from 0 to 1024 [ 68.124055][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.164979][ T4519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.250913][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.274536][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.293463][ T3387] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.587386][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 68.766860][ T28] audit: type=1400 audit(1775685512.074:345): avc: denied { name_bind } for pid=4544 comm="syz.3.396" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.168171][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.387811][ T4562] netlink: 76 bytes leftover after parsing attributes in process `syz.2.403'. [ 69.416995][ T4124] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 69.455005][ T4559] ================================================================== [ 69.463350][ T4559] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 69.470999][ T4559] [ 69.473445][ T4559] read-write to 0xffff888237d26668 of 1 bytes by task 4557 on cpu 1: [ 69.481980][ T4559] folio_add_lru+0xa4/0x1e0 [ 69.486716][ T4559] shmem_get_folio_gfp+0x7b0/0xd60 [ 69.491993][ T4559] shmem_fault+0xf6/0x250 [ 69.496382][ T4559] __do_fault+0xbc/0x200 [ 69.501019][ T4559] handle_mm_fault+0x11e2/0x3020 [ 69.506455][ T4559] __get_user_pages+0x1023/0x1ea0 [ 69.511718][ T4559] __mm_populate+0x242/0x390 [ 69.516380][ T4559] vm_mmap_pgoff+0x23b/0x2d0 [ 69.521288][ T4559] ksys_mmap_pgoff+0xc1/0x310 [ 69.526018][ T4559] x64_sys_call+0x14df/0x3020 [ 69.530870][ T4559] do_syscall_64+0x12c/0x370 [ 69.535681][ T4559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.541719][ T4559] [ 69.544425][ T4559] read to 0xffff888237d26668 of 1 bytes by task 4559 on cpu 0: [ 69.552263][ T4559] __lru_add_drain_all+0x17e/0x450 [ 69.557428][ T4559] lru_cache_disable+0x1f/0x30 [ 69.562342][ T4559] __se_sys_move_pages+0x2c0/0x1420 [ 69.567691][ T4559] __x64_sys_move_pages+0x78/0x90 [ 69.572785][ T4559] x64_sys_call+0x1d35/0x3020 [ 69.577718][ T4559] do_syscall_64+0x12c/0x370 [ 69.582536][ T4559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.588645][ T4559] [ 69.591001][ T4559] value changed: 0x00 -> 0x01 [ 69.596062][ T4559] [ 69.598424][ T4559] Reported by Kernel Concurrency Sanitizer on: [ 69.604809][ T4559] CPU: 0 UID: 0 PID: 4559 Comm: syz.0.402 Not tainted syzkaller #0 PREEMPT(full) [ 69.614831][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 69.628055][ T4559] ==================================================================