last executing test programs: 5.557348228s ago: executing program 1 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.74368147s ago: executing program 1 (id=371): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 4.571689492s ago: executing program 1 (id=375): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.521653293s ago: executing program 1 (id=376): llistxattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) 4.496132723s ago: executing program 1 (id=377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 4.415108735s ago: executing program 1 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4.391382615s ago: executing program 0 (id=381): socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) socket$igmp(0x2, 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES16=r2], 0x1000f) 4.218608288s ago: executing program 2 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000c4c30000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3.062964294s ago: executing program 4 (id=384): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000d00)=""/161, 0xa1}, {0x0}], 0x2) 2.389775625s ago: executing program 0 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.148949268s ago: executing program 2 (id=386): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000000180)=""/111}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 2.140737668s ago: executing program 4 (id=387): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x1c4, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x3}) mq_timedreceive(r2, 0x0, 0x0, 0x800000000000, 0x0) unshare(0x42000000) syz_usb_connect(0x1, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x17, 0xdf, 0xab, 0x40, 0x2040, 0xc010, 0xc8f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0xe0, 0x8, [{{0x9, 0x4, 0x31, 0x40, 0x0, 0xff, 0xff, 0xff, 0x4}}]}}]}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 2.063296549s ago: executing program 2 (id=388): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000180), 0x0, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x46) sendfile(r1, r1, 0x0, 0xe0000000) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2.00029269s ago: executing program 0 (id=389): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.832865842s ago: executing program 0 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x14, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.818092323s ago: executing program 2 (id=391): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.796644193s ago: executing program 3 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 1.703233384s ago: executing program 3 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000400), 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) write(r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x100000001}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.511237408s ago: executing program 2 (id=394): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 1.195209372s ago: executing program 4 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000007c89000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}, {@timeout={'timeout', 0x3d, 0x3}}]}}) 1.039077074s ago: executing program 3 (id=396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r1, 0x407, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f00000002c0)=[{r5}], 0x1, 0x0, 0x0, 0xfffffffffffffd4c) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {0x0, 0x4000}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000019000109000000000000000002200000fe00fe0300000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2004000}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0xd8, &(0x7f0000000340)=""/216, 0x0, 0x2c}, 0x94) 1.006389135s ago: executing program 3 (id=397): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x543, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 566.958991ms ago: executing program 2 (id=398): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@nouser_xattr}, {@orlov}, {@grpid}]}, 0x4, 0x46b, &(0x7f00000009c0)="$eJzs289vFFUcAPDvTFt+IxXxBz/UKhobf2yhgHLwotHEgyYmXvBY20KQhRpaEyFE0Rg8GhITj8ajiX+BJ70Y9WTiVe+GhBguoqcxsztDd9fttsC2A93PJ9nueztv9r3vvHm7b+Z1AxhYY/mfJGJbRPweETua2fYCY82n69cuTP9z7cJ0Eln21l9Jo9zf1y5Ml0XL/bYWmfE0Iv00ib1d6p0/d/7UVL0+e7bITyycfm9i/tz5506enjoxe2L2zOTRo4cPHXzh+ckjfYnz3rytez6c27f7tbcvvzF97PI7P3+blPF3xNEnY702Ppllfa6uWttb0snwCnYYWsXGsGJ5N+TdNdIY/ztiKBY7b0e8+kmljQNWVVZYYvPFDFjHkqi6BUA1yi/6/Pq3fKzd7KN6V19qXgDlcV8vHs0tw5EWZUY6rm/7aSwijl3896v8EatzHwIAoM33+fzn2W7zvzQeaCl3T2xsrA2NFmspOyPivojYFRH3RzTKPhgRD3WrpMeCQOciyf/nP+mVW49uefn878Vibat9/lfO/mJ0qMhtb8R/JI2ozx5oHJOI8RjZePxkffZgjzp+eOW3z5fa1jr/yx95/eVcsGjHleGN7fvMTC1M3U7Mra5+HLFnuFv8yY2VgCQidkfEnlus4+TT3+xbatvy8fewknWmZWRfRzzV7P+L0RF/Kem9PjmxKT8fJvKz4EDXOn759dKbS9V/W/H3Qd7/W7qe/zfiH01a12vnb+bdm6P70h+fLXlNU7ul83/xhQ3F8wdTCwtnD0ZsSF5vNrr19cnFfct8WT6Pf3x/9/G/MxaPxN6IyE/ihyPikYh4tIjusYh4PCL29zgKP738xLu9jlD3+Df1eMf+yeOf6ej/0fYiHf2/mNgQna90Twyd+vG79ndcSfylvP8PN1LjxSuNz78ve8e1knbd7NkMAAAAd6s0IrZFktZupNO0Vmv+D/+u2JLW5+YXnjk+9/6ZmeZvBEZjJC3vdDXvB48k5f3P0Zb8ZEf+UHHf+IuhzY18bXquPlN18DDgtraO//KWb6359KffaMD614d1NOAuZfzD4DL+YXAZ/zC4uoz/zVW0A1h73b7/P6qgHcDa6xj/lv1ggLj+h8E1HFlSdRuAarR+//sggIExvzmW/5H8ekhkWZbdAc1YP4lI74hm9CeRrPIo2FZ1gDefqPqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/+CwAA//9lEuuH") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 463.103723ms ago: executing program 0 (id=399): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x38c, &(0x7f0000000640)="$eJzs3U1oXNUXAPAzeZOvPy3J4g9FQXi6EzS0VRHdmFJSKGZTZfBjIQ42VcnEQoKD7SLTuBGXgksFwZUudOGiO0EERdy5cGuFUhUX2l3B0idv3puZN5mZKEr6gb/fYnp67zn33Tu5MC8P5ubF5Vg/PR1nrl69EnNztagvH1+Oa7VYjCR6LsSomeKfD8Z0AQC3uWtZFr9nhYjP/05Jbf9nBQDsp+7n/8sHKy1vfrVXfubTHwDueOXv//PVtmRXztyk4rP7Ni0AYB8NP/+PiPtGUmYGYX3k3gAAuPM8/dzzTx5bjXgqTeciNt5qN9qNeHzQf+xMvBqtWIvDsRDXI4obhfyl1n09cXJ15XCapp34aTEaeUW7EbHRaTeKO4VjSbd+No7EQiyW9eXdRpZlyYnPVleOpF0RcaHTvX5s1NqN6Zgvr//D/2ItjkYa/x+pjzi5unI0LQdobPTqpyN2Bs8t8vkvxUJ891KcjVacjry2d1uzurJ9JE2PZ6sHaoP6Trsx280rTHwCAgAAAAAAAAAAAAAAAAAAAAAA/8hS2rfYPz8nG5zfs7Q0pr97Pk5RX54PtFOcD5TNZpFlv73xYOPtJIbOB9p1Pk+n3ajH1K1dOgAAAAAAAAAAAAAAAAAAANw2ts7NRLPVWtvcOnd+vRp0NrfOTUVE3vLaN598OR/DOfPlAMNVQ0G9TKl0pYOqLOklZ8lQThkk+cVr9aLl44v9GVdzZvurGDuN2dGuZG2zXsz54L2X3xt03ZP0Rr5RSY6x6zqf7JpGEcwNvbGT35Y9gqN/kXMpy7JJ5dsvjFZFLaI+Zqr/Ksjy4Osrr9z10NahR7otX2SF+x9YeObSux/+st5s5VfOtVozm1vXs/Vm+f/xm21ykPT2z0eX+5utVt0J9ebDN04dmDDyznBLM/n+12fvfufbsmVq5Md0sFqeVbter4xTK6uS4qKf7p7zTBHk0+x3PZEH+Xs0utLpMZt/XPBo7J0zupyh4ND7y82L2z/+PLZ8anSTVPaygzoAAAAAAAAAAAAAAAAAAOCmqHxXvFR+2Xd6r6rHTu3/zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5hn8/f9+EFM7u1omB/VymLzlj06M5szmA8ZM5YqLt2ilAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8l/0ZAAD//y5pXNw=") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) write$evdev(r1, &(0x7f0000000000), 0xaa6f50) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) 277.332505ms ago: executing program 0 (id=400): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0x3) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) 266.937456ms ago: executing program 4 (id=401): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x20}}], 0x2, 0x20004800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0x3ff, 0x1, 0x4, 0x3}, {0x0, 0x5, 0x0, 0x80000000}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000140)={0x7, 0x7fffffff, 0x0, 'queue0\x00', 0xfffffff8}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) readv(r1, &(0x7f0000001980)=[{&(0x7f0000000340)=""/59, 0xff8e}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) brk(0x20001000) 154.558027ms ago: executing program 4 (id=402): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 88.643778ms ago: executing program 3 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}}, 0x40004) 29.688619ms ago: executing program 3 (id=404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(r3, &(0x7f0000000000)="fd4e09b370ad518c46af1dc2b8e01940dc8f25e60e723d810be7083e416328bf84ecead4d163f65e705a625c", 0x2c, 0x8000c61) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 4 (id=405): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 28.349044][ T29] audit: type=1400 audit(1751690166.367:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.350222][ T3292] cgroup: Unknown subsys name 'net' [ 28.371794][ T29] audit: type=1400 audit(1751690166.367:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.399220][ T29] audit: type=1400 audit(1751690166.397:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.542090][ T3292] cgroup: Unknown subsys name 'cpuset' [ 28.548355][ T3292] cgroup: Unknown subsys name 'rlimit' [ 28.669840][ T29] audit: type=1400 audit(1751690166.687:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.693320][ T29] audit: type=1400 audit(1751690166.697:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.713866][ T29] audit: type=1400 audit(1751690166.697:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.734350][ T29] audit: type=1400 audit(1751690166.697:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.743427][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.754715][ T29] audit: type=1400 audit(1751690166.707:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.788259][ T29] audit: type=1400 audit(1751690166.707:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.811655][ T29] audit: type=1400 audit(1751690166.797:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.846356][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.114184][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.155071][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.226848][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.240782][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.266280][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.273448][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.280609][ T3303] bridge_slave_0: entered allmulticast mode [ 30.287150][ T3303] bridge_slave_0: entered promiscuous mode [ 30.293568][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.300640][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.307950][ T3304] bridge_slave_0: entered allmulticast mode [ 30.314578][ T3304] bridge_slave_0: entered promiscuous mode [ 30.324361][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.331486][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.338625][ T3304] bridge_slave_1: entered allmulticast mode [ 30.345088][ T3304] bridge_slave_1: entered promiscuous mode [ 30.356314][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.363447][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.370670][ T3303] bridge_slave_1: entered allmulticast mode [ 30.377258][ T3303] bridge_slave_1: entered promiscuous mode [ 30.421718][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.436567][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.445799][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 30.455770][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.476264][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.521335][ T3303] team0: Port device team_slave_0 added [ 30.527731][ T3304] team0: Port device team_slave_0 added [ 30.534735][ T3304] team0: Port device team_slave_1 added [ 30.553273][ T3303] team0: Port device team_slave_1 added [ 30.565844][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.572978][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.580185][ T3312] bridge_slave_0: entered allmulticast mode [ 30.586729][ T3312] bridge_slave_0: entered promiscuous mode [ 30.593011][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.600113][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.607497][ T3305] bridge_slave_0: entered allmulticast mode [ 30.614193][ T3305] bridge_slave_0: entered promiscuous mode [ 30.635281][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.642406][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.649613][ T3312] bridge_slave_1: entered allmulticast mode [ 30.656171][ T3312] bridge_slave_1: entered promiscuous mode [ 30.662420][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.669539][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.676846][ T3305] bridge_slave_1: entered allmulticast mode [ 30.683289][ T3305] bridge_slave_1: entered promiscuous mode [ 30.704792][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.711864][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.737854][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.758879][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.765902][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.791844][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.802693][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.809773][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.817084][ T3309] bridge_slave_0: entered allmulticast mode [ 30.823609][ T3309] bridge_slave_0: entered promiscuous mode [ 30.830088][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.837190][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.863158][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.879960][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.889581][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.896598][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.922568][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.933418][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.940541][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.947738][ T3309] bridge_slave_1: entered allmulticast mode [ 30.954211][ T3309] bridge_slave_1: entered promiscuous mode [ 30.964183][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.974404][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.001686][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.027307][ T3305] team0: Port device team_slave_0 added [ 31.034248][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.044948][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.054821][ T3312] team0: Port device team_slave_0 added [ 31.070983][ T3305] team0: Port device team_slave_1 added [ 31.082348][ T3312] team0: Port device team_slave_1 added [ 31.094327][ T3309] team0: Port device team_slave_0 added [ 31.130564][ T3309] team0: Port device team_slave_1 added [ 31.143017][ T3304] hsr_slave_0: entered promiscuous mode [ 31.149042][ T3304] hsr_slave_1: entered promiscuous mode [ 31.155789][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.162800][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.188771][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.201739][ T3303] hsr_slave_0: entered promiscuous mode [ 31.207893][ T3303] hsr_slave_1: entered promiscuous mode [ 31.213775][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.221358][ T3303] Cannot create hsr debugfs directory [ 31.227285][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.234296][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.260270][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.284377][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.291489][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.317503][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.328845][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.335892][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.361937][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.375376][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.382371][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.408387][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.439554][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.446595][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.472558][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.499716][ T3312] hsr_slave_0: entered promiscuous mode [ 31.505858][ T3312] hsr_slave_1: entered promiscuous mode [ 31.511912][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.519521][ T3312] Cannot create hsr debugfs directory [ 31.595735][ T3305] hsr_slave_0: entered promiscuous mode [ 31.601952][ T3305] hsr_slave_1: entered promiscuous mode [ 31.607765][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.615400][ T3305] Cannot create hsr debugfs directory [ 31.631994][ T3309] hsr_slave_0: entered promiscuous mode [ 31.637992][ T3309] hsr_slave_1: entered promiscuous mode [ 31.644022][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.651645][ T3309] Cannot create hsr debugfs directory [ 31.785399][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.793828][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.813208][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.824541][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.845859][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.855047][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.867709][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.877039][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.905461][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.914261][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.924167][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.933311][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.987195][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.996323][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.005645][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.015248][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.055342][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.062852][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.078093][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.087244][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.096365][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.127324][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.139191][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.154872][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.162001][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.170898][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.178051][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.191150][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.208104][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.215215][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.230814][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.239774][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.246873][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.281137][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.289864][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.305954][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.318939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.326041][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.343841][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.350935][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.360779][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.367929][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.389750][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.400167][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.430791][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.445225][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.452395][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.489675][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.510890][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.518135][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.551107][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.558220][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.580424][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.592871][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.601487][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.629322][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.639825][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.703275][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.791768][ T3304] veth0_vlan: entered promiscuous mode [ 32.804257][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.813395][ T3304] veth1_vlan: entered promiscuous mode [ 32.859790][ T3303] veth0_vlan: entered promiscuous mode [ 32.868944][ T3303] veth1_vlan: entered promiscuous mode [ 32.880176][ T3304] veth0_macvtap: entered promiscuous mode [ 32.923962][ T3304] veth1_macvtap: entered promiscuous mode [ 32.936004][ T3312] veth0_vlan: entered promiscuous mode [ 32.947949][ T3303] veth0_macvtap: entered promiscuous mode [ 32.957260][ T3305] veth0_vlan: entered promiscuous mode [ 32.968252][ T3303] veth1_macvtap: entered promiscuous mode [ 32.979799][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.990264][ T3305] veth1_vlan: entered promiscuous mode [ 32.997534][ T3312] veth1_vlan: entered promiscuous mode [ 33.010532][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.025953][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.034761][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.043562][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.052484][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.075943][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.083528][ T3309] veth0_vlan: entered promiscuous mode [ 33.105440][ T3312] veth0_macvtap: entered promiscuous mode [ 33.112716][ T3305] veth0_macvtap: entered promiscuous mode [ 33.120010][ T3309] veth1_vlan: entered promiscuous mode [ 33.120907][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.127430][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.151196][ T3305] veth1_macvtap: entered promiscuous mode [ 33.158738][ T3312] veth1_macvtap: entered promiscuous mode [ 33.167595][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.176459][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.185277][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.194119][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.217119][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.240477][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.259189][ T3309] veth0_macvtap: entered promiscuous mode [ 33.278941][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.289375][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.306282][ T3309] veth1_macvtap: entered promiscuous mode [ 33.316989][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.325877][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.334655][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.343406][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.353548][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 33.353564][ T29] audit: type=1400 audit(1751690171.377:107): avc: denied { kexec_image_load } for pid=3477 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 33.359355][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.388388][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397304][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.406346][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.476700][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.493188][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.498161][ T29] audit: type=1400 audit(1751690171.517:108): avc: denied { create } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.520990][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.529858][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.538701][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.544477][ T29] audit: type=1400 audit(1751690171.557:109): avc: denied { write } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.547519][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.566419][ T29] audit: type=1400 audit(1751690171.557:110): avc: denied { open } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.566452][ T29] audit: type=1400 audit(1751690171.557:111): avc: denied { kernel } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.614354][ T29] audit: type=1400 audit(1751690171.627:112): avc: denied { create } for pid=3480 comm="syz.0.1" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.635771][ T29] audit: type=1400 audit(1751690171.627:113): avc: denied { ioctl } for pid=3480 comm="syz.0.1" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4416 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.662453][ T29] audit: type=1400 audit(1751690171.627:114): avc: denied { write } for pid=3480 comm="syz.0.1" name="secretmem" dev="secretmem" ino=4416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.685257][ T29] audit: type=1400 audit(1751690171.627:115): avc: denied { module_load } for pid=3480 comm="syz.0.1" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 33.712251][ T3485] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 33.720063][ T3485] veth0_vlan: entered allmulticast mode [ 33.730093][ T3485] veth0_vlan: left promiscuous mode [ 33.736787][ T3485] veth0_vlan: entered promiscuous mode [ 33.744475][ T3485] team0: Device veth0_vlan failed to register rx_handler [ 33.810483][ T29] audit: type=1400 audit(1751690171.817:116): avc: denied { tracepoint } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.839913][ T3487] loop3: detected capacity change from 0 to 1024 [ 33.848522][ T3490] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 33.923816][ T3487] ======================================================= [ 33.923816][ T3487] WARNING: The mand mount option has been deprecated and [ 33.923816][ T3487] and is ignored by this kernel. Remove the mand [ 33.923816][ T3487] option from the mount to silence this warning. [ 33.923816][ T3487] ======================================================= [ 33.995310][ T3485] syz.0.1 (3485) used greatest stack depth: 9440 bytes left [ 34.005633][ T3487] EXT4-fs: Ignoring removed oldalloc option [ 34.009769][ T3494] geneve1: entered promiscuous mode [ 34.013913][ T3487] EXT4-fs: Ignoring removed orlov option [ 34.023657][ T3487] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 34.048482][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 34.076322][ T3487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.130454][ T3503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.146543][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 34.196105][ T3503] bridge_slave_1: left allmulticast mode [ 34.202037][ T3503] bridge_slave_1: left promiscuous mode [ 34.207956][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.235753][ T3487] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 34.293011][ T3503] bridge_slave_0: left allmulticast mode [ 34.298813][ T3503] bridge_slave_0: left promiscuous mode [ 34.304670][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.359789][ T3478] kexec: Could not allocate control_code_buffer [ 34.374991][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.437269][ T3513] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 34.455826][ T3517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.476773][ T3513] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 34.511218][ T3518] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.17'. [ 34.555128][ T3521] sch_fq: defrate 0 ignored. [ 34.587956][ T3523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 34.599665][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 35.145388][ T3517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.182663][ T3537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24'. [ 35.836329][ T3517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.117280][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 36.163495][ T3574] netlink: 'syz.3.36': attribute type 13 has an invalid length. [ 36.218888][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.226257][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.269076][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.279729][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.315805][ T3574] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.325213][ T3574] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.334143][ T3574] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.343078][ T3574] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.477234][ C1] hrtimer: interrupt took 26510 ns [ 36.522171][ T3582] loop4: detected capacity change from 0 to 512 [ 36.545105][ T3582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.558256][ T3582] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.576806][ T3582] EXT4-fs error (device loop4): ext4_get_first_dir_block:3547: inode #12: comm syz.4.40: directory missing '..' [ 36.606950][ T3517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.619716][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.675873][ T3517] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.688947][ T3517] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.701096][ T3517] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.729274][ T3517] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.775149][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 36.791354][ T3592] hsr_slave_0: left promiscuous mode [ 36.799560][ T3592] hsr_slave_1: left promiscuous mode [ 36.860655][ T3596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 36.929150][ T3598] loop0: detected capacity change from 0 to 128 [ 36.982214][ T3598] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 36.990119][ T3598] FAT-fs (loop0): Filesystem has been set read-only [ 36.998519][ T3598] syz.0.46: attempt to access beyond end of device [ 36.998519][ T3598] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 37.013900][ T3598] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 37.021841][ T3598] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 37.030407][ T3598] syz.0.46: attempt to access beyond end of device [ 37.030407][ T3598] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.052800][ T3602] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 37.061248][ T3602] syz.0.46: attempt to access beyond end of device [ 37.061248][ T3602] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 37.076728][ T3602] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 37.084782][ T3602] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 37.094424][ T3598] syz.0.46: attempt to access beyond end of device [ 37.094424][ T3598] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.110198][ T3598] syz.0.46: attempt to access beyond end of device [ 37.110198][ T3598] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.125015][ T3602] syz.0.46: attempt to access beyond end of device [ 37.125015][ T3602] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.140392][ T3598] syz.0.46: attempt to access beyond end of device [ 37.140392][ T3598] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.156928][ T3602] syz.0.46: attempt to access beyond end of device [ 37.156928][ T3602] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.173684][ T3598] syz.0.46: attempt to access beyond end of device [ 37.173684][ T3598] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.187556][ T3602] syz.0.46: attempt to access beyond end of device [ 37.187556][ T3602] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.411611][ T3616] netlink: 'syz.1.53': attribute type 4 has an invalid length. [ 37.527562][ T3619] netlink: 'syz.1.53': attribute type 4 has an invalid length. [ 37.637041][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 37.647295][ T3625] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 37.664363][ T3627] bond0: (slave bond_slave_0): Releasing backup interface [ 37.735817][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.765681][ T3630] bridge_slave_1 (unregistering): left allmulticast mode [ 37.772858][ T3630] bridge_slave_1 (unregistering): left promiscuous mode [ 37.779864][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.878522][ T3635] wg2: entered promiscuous mode [ 37.900981][ T3635] wg2: entered allmulticast mode [ 37.988452][ T3643] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 38.238775][ T3659] loop3: detected capacity change from 0 to 2048 [ 38.253548][ T3659] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.260069][ T3659] EXT4-fs: Ignoring removed i_version option [ 38.643525][ T3659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.664244][ T3668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.689837][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.762881][ T3668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.837897][ T3676] loop3: detected capacity change from 0 to 256 [ 38.846841][ T3668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.876550][ T3676] FAT-fs (loop3): codepage cp950 not found [ 38.955859][ T3668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.972565][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 38.972615][ T29] audit: type=1400 audit(1751690176.997:341): avc: denied { setopt } for pid=3678 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.112540][ T3668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.135084][ T3668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.175143][ T3668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.223203][ T3668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575546][ T29] audit: type=1400 audit(1751690177.507:342): avc: denied { block_suspend } for pid=3682 comm="syz.0.76" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.713222][ T3693] __nla_validate_parse: 3 callbacks suppressed [ 39.713243][ T3693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.728481][ T3693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.737321][ T3693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.761645][ T3693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.919120][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 39.972975][ T3699] netlink: 3 bytes leftover after parsing attributes in process `syz.4.81'. [ 39.986955][ T3699] 0ªX¹¦À: renamed from caif0 [ 39.993655][ T3699] 0ªX¹¦À: entered allmulticast mode [ 39.998922][ T3699] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 41.221951][ T3702] loop1: detected capacity change from 0 to 512 [ 41.254735][ T3702] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 41.278242][ T29] audit: type=1400 audit(1751690179.297:343): avc: denied { bind } for pid=3716 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.322455][ T29] audit: type=1400 audit(1751690179.327:344): avc: denied { write } for pid=3711 comm="syz.0.85" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.342082][ T3702] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.82: iget: bad i_size value: 12154757448730 [ 41.343078][ T29] audit: type=1400 audit(1751690179.327:345): avc: denied { open } for pid=3711 comm="syz.0.85" path="/12/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.361342][ T29] audit: type=1400 audit(1751690179.357:346): avc: denied { read write } for pid=3719 comm="syz.2.88" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.405403][ T29] audit: type=1400 audit(1751690179.357:347): avc: denied { open } for pid=3719 comm="syz.2.88" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.435652][ T3702] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.82: couldn't read orphan inode 13 (err -117) [ 41.462575][ T3723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.487177][ T29] audit: type=1400 audit(1751690179.507:348): avc: denied { read } for pid=3722 comm="syz.2.89" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.498816][ T3702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.531387][ T3702] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.543304][ T29] audit: type=1400 audit(1751690179.567:349): avc: denied { relabelto } for pid=3701 comm="syz.1.82" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 41.547590][ T3702] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 41.620955][ T3730] TCP: out of memory -- consider tuning tcp_mem [ 41.639280][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.733438][ T3741] loop1: detected capacity change from 0 to 128 [ 41.750784][ T3739] syzkaller0: entered promiscuous mode [ 41.756456][ T3739] syzkaller0: entered allmulticast mode [ 41.808309][ T29] audit: type=1400 audit(1751690179.827:350): avc: denied { read write } for pid=3740 comm="syz.1.96" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.940774][ T3744] netlink: 'syz.1.98': attribute type 13 has an invalid length. [ 41.957649][ T3744] gretap0: refused to change device tx_queue_len [ 41.964075][ T3744] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.052869][ T3750] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 42.067529][ T3750] vlan2: entered allmulticast mode [ 42.072759][ T3750] geneve1: entered allmulticast mode [ 42.096792][ T3752] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.101'. [ 42.110678][ T3749] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.101'. [ 42.964184][ T3787] mmap: syz.4.113 (3787) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.193271][ T3797] lo speed is unknown, defaulting to 1000 [ 43.199192][ T3797] lo speed is unknown, defaulting to 1000 [ 43.205887][ T3797] lo speed is unknown, defaulting to 1000 [ 43.212933][ T3797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.221501][ T3797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.269510][ T3797] lo speed is unknown, defaulting to 1000 [ 43.275733][ T3797] lo speed is unknown, defaulting to 1000 [ 43.281807][ T3797] lo speed is unknown, defaulting to 1000 [ 43.288025][ T3797] lo speed is unknown, defaulting to 1000 [ 43.294075][ T3797] lo speed is unknown, defaulting to 1000 [ 43.619307][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 43.635315][ T3803] loop1: detected capacity change from 0 to 2048 [ 43.646187][ T3803] EXT4-fs: Ignoring removed orlov option [ 43.664096][ T3803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.962210][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.064992][ T3823] netlink: 'syz.1.125': attribute type 13 has an invalid length. [ 44.135537][ T3823] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.142950][ T3823] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.263140][ T3823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.274689][ T3823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.327292][ T3823] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.336538][ T3823] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.345713][ T3823] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.354986][ T3823] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.625664][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 44.625724][ T29] audit: type=1400 audit(1751690182.647:482): avc: denied { sqpoll } for pid=3828 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.176383][ T29] audit: type=1400 audit(1751690183.197:483): avc: denied { mount } for pid=3841 comm="syz.2.131" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.200260][ T3842] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 45.207985][ T3842] netlink: 224 bytes leftover after parsing attributes in process `syz.2.131'. [ 45.255272][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.274803][ T3845] 0ªX¹¦À: left allmulticast mode [ 45.328865][ T3845] bridge_slave_0: left allmulticast mode [ 45.334610][ T3845] bridge_slave_0: left promiscuous mode [ 45.340365][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.354239][ T3845] bond0: (slave bond_slave_0): Releasing backup interface [ 45.365145][ T3845] bond0: (slave bond_slave_1): Releasing backup interface [ 45.380414][ T3845] team0: Port device team_slave_0 removed [ 45.389127][ T3851] nfs4: Bad value for 'source' [ 45.397201][ T3845] team0: Port device team_slave_1 removed [ 45.407041][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.416317][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.427740][ T3845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.436953][ T3845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.483892][ T3845] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.493052][ T3845] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.502008][ T3845] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.510917][ T3845] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.587529][ T3852] 9pnet_fd: Insufficient options for proto=fd [ 45.598166][ T29] audit: type=1400 audit(1751690183.617:484): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.637364][ T3855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.905344][ T3867] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 45.952165][ T3867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.968481][ T3869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.981092][ T3869] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 45.996854][ T3869] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 46.054716][ T3867] gretap1: entered promiscuous mode [ 46.078982][ T3867] bond1: (slave gretap1): making interface the new active one [ 46.113376][ T3867] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 46.168747][ T29] audit: type=1400 audit(1751690184.187:485): avc: denied { getopt } for pid=3871 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.168856][ T3869] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 46.315407][ T3874] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.394692][ T3874] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.533470][ T3874] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.636777][ T3874] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.722572][ T29] audit: type=1326 audit(1751690184.727:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.4.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87cd75e929 code=0x0 [ 46.748093][ T3874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.763851][ T3874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.776901][ T3874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.786898][ T29] audit: type=1400 audit(1751690184.817:487): avc: denied { accept } for pid=3880 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 46.810181][ T3874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.855262][ T3885] Zero length message leads to an empty skb [ 46.861850][ T3877] netlink: 87 bytes leftover after parsing attributes in process `syz.1.142'. [ 46.970643][ T29] audit: type=1400 audit(1751690184.987:488): avc: denied { read } for pid=3888 comm="syz.2.148" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.993903][ T29] audit: type=1400 audit(1751690184.987:489): avc: denied { open } for pid=3888 comm="syz.2.148" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.017425][ T29] audit: type=1400 audit(1751690184.987:490): avc: denied { ioctl } for pid=3888 comm="syz.2.148" path="/newroot/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.078859][ T3898] netlink: 'syz.0.146': attribute type 16 has an invalid length. [ 47.086714][ T3898] netlink: 'syz.0.146': attribute type 17 has an invalid length. [ 47.128802][ T3901] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 47.179572][ T3896] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 47.239931][ T3413] lo speed is unknown, defaulting to 1000 [ 47.245829][ T3152] lo speed is unknown, defaulting to 1000 [ 47.325280][ T3909] loop0: detected capacity change from 0 to 1024 [ 47.367254][ T29] audit: type=1400 audit(1751690185.387:491): avc: denied { watch } for pid=3906 comm="syz.1.152" path="/34/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 47.410344][ T3911] syz.0.153 uses obsolete (PF_INET,SOCK_PACKET) [ 47.437770][ T3915] ªªªªªª: renamed from vlan0 [ 47.484935][ T3913] tipc: Started in network mode [ 47.489851][ T3913] tipc: Node identity 2679e6939da4, cluster identity 4711 [ 47.497174][ T3913] tipc: Enabled bearer , priority 0 [ 47.504896][ T3912] tipc: Resetting bearer [ 47.528102][ T3912] tipc: Disabling bearer [ 47.549419][ T3921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.572635][ T3921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.912479][ T3935] tipc: Started in network mode [ 47.917437][ T3935] tipc: Node identity e23909cab58d, cluster identity 4711 [ 47.924921][ T3935] tipc: Enabled bearer , priority 0 [ 47.968552][ T3941] lo speed is unknown, defaulting to 1000 [ 48.017262][ T3934] tipc: Resetting bearer [ 48.048447][ T3934] tipc: Disabling bearer [ 48.293670][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 48.355385][ T3953] loop4: detected capacity change from 0 to 512 [ 48.365189][ T3953] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.372428][ T3953] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 48.383185][ T3953] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 48.391231][ T3953] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.398263][ T3953] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.167: Invalid block bitmap block 0 in block_group 0 [ 48.412092][ T3953] EXT4-fs (loop4): Remounting filesystem read-only [ 48.481050][ T3957] lo speed is unknown, defaulting to 1000 [ 48.672416][ T3953] EXT4-fs (loop4): 1 orphan inode deleted [ 48.854458][ T3963] loop1: detected capacity change from 0 to 128 [ 48.884836][ T3963] EXT4-fs: Ignoring removed nobh option [ 48.894898][ T3953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.926527][ T3953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.945998][ T3963] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.959913][ T3963] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.978303][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 49.035902][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.169552][ T3980] veth0_vlan: entered allmulticast mode [ 49.170250][ T3983] netlink: 260 bytes leftover after parsing attributes in process `syz.1.176'. [ 49.184336][ T3983] netlink: 260 bytes leftover after parsing attributes in process `syz.1.176'. [ 49.206815][ T3980] veth0_vlan: left promiscuous mode [ 49.217436][ T3980] veth0_vlan: entered promiscuous mode [ 49.329708][ T3996] loop1: detected capacity change from 0 to 512 [ 49.352676][ T3996] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.371581][ T3998] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.184'. [ 49.398613][ T3996] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.415547][ T3996] EXT4-fs (loop1): mount failed [ 49.477854][ T4004] tipc: Failed to remove unknown binding: 66,1,1/0:3160206017/3160206019 [ 49.513048][ T4004] tipc: Failed to remove unknown binding: 66,1,1/0:3160206017/3160206019 [ 49.521582][ T4004] tipc: Failed to remove unknown binding: 66,1,1/0:3160206017/3160206019 [ 49.579174][ T4011] netlink: 'syz.4.189': attribute type 27 has an invalid length. [ 50.198823][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 50.198838][ T29] audit: type=1400 audit(1751690188.217:639): avc: denied { write } for pid=4018 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.608294][ T29] audit: type=1400 audit(1751690188.627:640): avc: denied { connect } for pid=4023 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.627902][ T29] audit: type=1400 audit(1751690188.627:641): avc: denied { name_connect } for pid=4023 comm="syz.3.194" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 50.715034][ T4027] loop2: detected capacity change from 0 to 2048 [ 50.728604][ T29] audit: type=1326 audit(1751690188.747:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cd75e929 code=0x7ffc0000 [ 50.752025][ T29] audit: type=1326 audit(1751690188.747:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cd75e929 code=0x7ffc0000 [ 50.775324][ T29] audit: type=1326 audit(1751690188.747:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cd75e929 code=0x7ffc0000 [ 50.798666][ T29] audit: type=1326 audit(1751690188.747:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cd75e929 code=0x7ffc0000 [ 50.822077][ T29] audit: type=1326 audit(1751690188.747:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cd75e929 code=0x7ffc0000 [ 50.845395][ T29] audit: type=1326 audit(1751690188.747:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f87cd75e929 code=0x7ffc0000 [ 50.868783][ T29] audit: type=1326 audit(1751690188.747:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cd75e929 code=0x7ffc0000 [ 51.033414][ T4035] netlink: 'syz.4.198': attribute type 4 has an invalid length. [ 51.051500][ T4035] netlink: 'syz.4.198': attribute type 4 has an invalid length. [ 51.066466][ T4027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.115741][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.314314][ T4065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 51.323296][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 51.395617][ T4067] loop1: detected capacity change from 0 to 8192 [ 51.443871][ T3304] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 51.451823][ T3304] FAT-fs (loop1): Filesystem has been set read-only [ 51.757341][ T4090] loop1: detected capacity change from 0 to 2048 [ 51.811916][ T4090] loop1: p1 < > p4 [ 51.863194][ T4090] loop1: p4 size 8388608 extends beyond EOD, truncated [ 52.188436][ T4111] netlink: 'syz.2.224': attribute type 10 has an invalid length. [ 52.199149][ T4111] bridge0: port 3(team0) entered blocking state [ 52.205632][ T4111] bridge0: port 3(team0) entered disabled state [ 52.212791][ T4111] team0: entered allmulticast mode [ 52.218083][ T4111] team_slave_0: entered allmulticast mode [ 52.223883][ T4111] team_slave_1: entered allmulticast mode [ 52.258822][ T4114] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 52.260795][ T4111] team0: entered promiscuous mode [ 52.266607][ T4114] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.224'. [ 52.272054][ T4111] team_slave_0: entered promiscuous mode [ 52.286747][ T4111] team_slave_1: entered promiscuous mode [ 52.287941][ T4113] loop1: detected capacity change from 0 to 2048 [ 52.293213][ T4111] bridge0: port 3(team0) entered blocking state [ 52.298907][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 52.305097][ T4111] bridge0: port 3(team0) entered forwarding state [ 52.331490][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 52.350902][ T4113] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.586646][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 52.889982][ T4139] 9pnet_fd: Insufficient options for proto=fd [ 52.987912][ T4139] loop0: detected capacity change from 0 to 164 [ 53.255681][ T4139] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.355758][ T4139] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.408298][ T4139] Symlink component flag not implemented [ 53.414145][ T4139] Symlink component flag not implemented [ 53.499447][ T4139] Symlink component flag not implemented (7) [ 53.505809][ T4139] Symlink component flag not implemented (116) [ 53.659954][ T4148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 53.811750][ T110] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 54.704980][ T4182] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.793309][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 54.802345][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 54.823204][ T4182] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.877424][ T4182] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.926660][ T4194] netlink: 'syz.2.252': attribute type 4 has an invalid length. [ 54.934534][ T4194] netlink: 17 bytes leftover after parsing attributes in process `syz.2.252'. [ 54.963208][ T4182] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.990326][ T4196] lo speed is unknown, defaulting to 1000 [ 55.052055][ T4182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.063571][ T4182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.075083][ T4182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.087362][ T4182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.205737][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 55.205756][ T29] audit: type=1326 audit(1751690193.227:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.236154][ T29] audit: type=1326 audit(1751690193.227:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.259779][ T29] audit: type=1326 audit(1751690193.267:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.283248][ T29] audit: type=1326 audit(1751690193.267:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.306673][ T29] audit: type=1326 audit(1751690193.267:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.330134][ T29] audit: type=1326 audit(1751690193.267:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.353573][ T29] audit: type=1326 audit(1751690193.267:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.376906][ T29] audit: type=1326 audit(1751690193.267:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.400244][ T29] audit: type=1326 audit(1751690193.267:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.423668][ T29] audit: type=1326 audit(1751690193.267:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586a09e929 code=0x7ffc0000 [ 55.520779][ T4219] netlink: 'syz.4.261': attribute type 4 has an invalid length. [ 55.561183][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 55.587356][ T4223] bridge_slave_1 (unregistering): left allmulticast mode [ 55.594600][ T4223] bridge_slave_1 (unregistering): left promiscuous mode [ 55.601671][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.906990][ T4231] netlink: 'syz.3.266': attribute type 10 has an invalid length. [ 55.941728][ T4231] geneve1: entered promiscuous mode [ 56.006102][ T4231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.015126][ T4231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.024099][ T4231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.032918][ T4231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.148312][ T4237] loop4: detected capacity change from 0 to 1024 [ 56.187156][ T4237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.231746][ T4237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.267603][ T4231] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 56.386441][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.433983][ T4247] tipc: Started in network mode [ 56.438982][ T4247] tipc: Node identity 56d4cdb4d122, cluster identity 4711 [ 56.446258][ T4247] tipc: Enabled bearer , priority 0 [ 56.585837][ T4243] tipc: Resetting bearer [ 56.605494][ T4256] loop1: detected capacity change from 0 to 512 [ 56.669434][ T4243] tipc: Disabling bearer [ 56.689688][ T4258] loop3: detected capacity change from 0 to 512 [ 56.698750][ T4256] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.275: bg 0: block 16: invalid block bitmap [ 56.720884][ T4260] loop4: detected capacity change from 0 to 1024 [ 56.731060][ T4258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.748575][ T4260] EXT4-fs: Ignoring removed oldalloc option [ 56.754581][ T4260] EXT4-fs: Ignoring removed bh option [ 56.775310][ T4256] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 56.831635][ T4258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.861390][ T4256] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.275: attempt to clear invalid blocks 1669132790 len 1 [ 56.882693][ T4258] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 56.906546][ T4260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.920997][ T4256] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.275: invalid indirect mapped block 4294967295 (level 1) [ 56.936230][ T4258] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.975818][ T4256] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.275: invalid indirect mapped block 4294967295 (level 2) [ 56.990676][ T4258] EXT4-fs (loop3): 1 truncate cleaned up [ 56.997832][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.029402][ T4256] EXT4-fs (loop1): 1 truncate cleaned up [ 57.036012][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.123601][ T4233] Set syz1 is full, maxelem 65536 reached [ 57.225772][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.262489][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.334397][ T4280] loop2: detected capacity change from 0 to 2048 [ 57.355018][ T4280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.414588][ T4282] lo speed is unknown, defaulting to 1000 [ 57.752979][ T4287] loop3: detected capacity change from 0 to 512 [ 57.795262][ T4287] EXT4-fs (loop3): 1 truncate cleaned up [ 57.810056][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.835400][ T4287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.928809][ T4293] __nla_validate_parse: 1 callbacks suppressed [ 57.928825][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 57.983578][ T4287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.999793][ T4293] loop2: detected capacity change from 0 to 1024 [ 58.038413][ T4293] EXT4-fs: Ignoring removed orlov option [ 58.047102][ T4293] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 58.080688][ T4293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.171476][ T4304] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 58.180516][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.210078][ T4304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.241214][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 58.265634][ T4304] ipvlan2: entered promiscuous mode [ 58.281455][ T4304] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 58.296193][ T4304] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 58.422507][ T4318] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.462864][ T4318] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.501999][ T4320] lo speed is unknown, defaulting to 1000 [ 58.523790][ T4318] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.584773][ T4318] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.675328][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.685090][ T4318] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.705159][ T4318] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.720267][ T4318] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.733881][ T4318] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.289605][ T4351] lo speed is unknown, defaulting to 1000 [ 59.471924][ C1] sd 0:0:1:0: [sda] tag#3841 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 59.482407][ C1] sd 0:0:1:0: [sda] tag#3841 CDB: Read(6) 08 00 00 00 80 00 00 00 00 00 00 fe [ 59.702482][ T4413] netlink: 156 bytes leftover after parsing attributes in process `syz.4.310'. [ 59.712187][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 59.724450][ T4413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.734000][ T4413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.177734][ T4481] loop0: detected capacity change from 0 to 512 [ 60.215881][ T4481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.233077][ T4481] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.283498][ T29] kauditd_printk_skb: 714 callbacks suppressed [ 60.283514][ T29] audit: type=1400 audit(1751690198.297:1794): avc: denied { create } for pid=4479 comm="syz.0.314" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.310262][ T29] audit: type=1400 audit(1751690198.307:1795): avc: denied { remove_name } for pid=4479 comm="syz.0.314" name="control" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.333131][ T29] audit: type=1400 audit(1751690198.307:1796): avc: denied { rmdir } for pid=4479 comm="syz.0.314" name="control" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 60.370963][ T29] audit: type=1400 audit(1751690198.387:1797): avc: denied { name_bind } for pid=4489 comm="syz.1.316" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.392800][ T29] audit: type=1400 audit(1751690198.387:1798): avc: denied { node_bind } for pid=4489 comm="syz.1.316" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.417238][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.428545][ T4488] 9pnet_fd: p9_fd_create_tcp (4488): problem connecting socket to 127.0.0.1 [ 60.525893][ T29] audit: type=1400 audit(1751690198.547:1799): avc: denied { write } for pid=4495 comm="syz.0.318" path="socket:[8500]" dev="sockfs" ino=8500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.922349][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 60.931334][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 60.941011][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 60.952031][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 60.960890][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 61.277664][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 61.295907][ T4507] netlink: 'syz.1.324': attribute type 2 has an invalid length. [ 62.410828][ T29] audit: type=1400 audit(1751690200.427:1800): avc: denied { listen } for pid=4544 comm="syz.0.337" lport=57794 faddr=::ffff:172.20.255.187 fport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.439183][ T4541] tipc: Started in network mode [ 62.444338][ T4541] tipc: Node identity 26d9518e3bfd, cluster identity 4711 [ 62.451733][ T4541] tipc: Enabled bearer , priority 0 [ 62.477624][ T4540] tipc: Resetting bearer [ 62.501635][ T4540] tipc: Disabling bearer [ 62.511110][ T4545] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4545 comm=syz.0.337 [ 62.536785][ T29] audit: type=1326 audit(1751690200.557:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90daafe929 code=0x7ffc0000 [ 62.560244][ T29] audit: type=1326 audit(1751690200.557:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90daafe929 code=0x7ffc0000 [ 62.584077][ T29] audit: type=1326 audit(1751690200.557:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90daafe929 code=0x7ffc0000 [ 62.617713][ T4555] Cannot find add_set index 4 as target [ 62.652500][ T4554] loop1: detected capacity change from 0 to 1024 [ 62.686928][ T4554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.712782][ T4554] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.749020][ T4554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 62.759956][ T4560] loop4: detected capacity change from 0 to 256 [ 62.763687][ T4554] System zones: 0-1, 3-12 [ 62.811987][ T4554] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.338: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.826147][ T4554] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.338: Failed to acquire dquot type 0 [ 62.841766][ T4554] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.338: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.858366][ T4554] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.338: Invalid inode bitmap blk 0 in block_group 0 [ 62.873006][ T4468] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.888731][ T4554] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 62.932419][ T4543] __nla_validate_parse: 1 callbacks suppressed [ 62.932436][ T4543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 62.970409][ T4554] EXT4-fs (loop1): 1 orphan inode deleted [ 62.978213][ T4554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.019662][ T4567] tipc: New replicast peer: 255.255.255.83 [ 63.020143][ T4468] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 63.025701][ T4567] tipc: Enabled bearer , priority 10 [ 63.094142][ T4554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.107443][ T4569] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.177221][ T4574] loop1: detected capacity change from 0 to 512 [ 63.200549][ T4569] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.211783][ T4574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.252801][ T4580] netlink: 'syz.3.347': attribute type 4 has an invalid length. [ 63.271386][ T4574] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.287492][ T4582] loop4: detected capacity change from 0 to 1024 [ 63.297453][ T4569] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.382759][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.392995][ T4582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.406658][ T4569] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.471400][ T4582] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.500389][ T4569] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.509920][ T4591] loop1: detected capacity change from 0 to 164 [ 63.552733][ T4569] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.561885][ T4582] EXT4-fs (loop4): Remounting filesystem read-only [ 63.568478][ T4582] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 63.595908][ T4569] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.636903][ T4569] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.651553][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.716089][ T4599] tipc: Enabled bearer , priority 0 [ 63.731776][ T4598] tipc: Resetting bearer [ 63.749614][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 63.752617][ T4598] tipc: Disabling bearer [ 63.996594][ T4621] loop4: detected capacity change from 0 to 256 [ 64.017461][ T4621] FAT-fs (loop4): bogus number of FAT sectors [ 64.023650][ T4621] FAT-fs (loop4): Can't find a valid FAT filesystem [ 64.035601][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 64.105303][ T4629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.363'. [ 64.157270][ T36] tipc: Node number set to 488919438 [ 64.364413][ T4609] loop0: detected capacity change from 0 to 256 [ 64.390114][ T4636] lo speed is unknown, defaulting to 1000 [ 64.404574][ T4609] vfat: Unknown parameter '0x00000000000000030xffffffffffffffff' [ 65.097003][ T4665] ÿÿÿÿÿÿ: renamed from vlan1 [ 65.482200][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 65.482215][ T29] audit: type=1400 audit(1751690203.507:1952): avc: denied { write } for pid=4676 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.549398][ T4680] loop1: detected capacity change from 0 to 128 [ 65.674016][ T4680] EXT4-fs: test_dummy_encryption option not supported [ 66.029958][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 66.614725][ T29] audit: type=1400 audit(1751690204.637:1953): avc: denied { read write } for pid=4674 comm="syz.0.381" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.639028][ T29] audit: type=1400 audit(1751690204.637:1954): avc: denied { open } for pid=4674 comm="syz.0.381" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.888527][ T29] audit: type=1400 audit(1751690204.697:1955): avc: denied { bind } for pid=4674 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.907909][ T29] audit: type=1400 audit(1751690204.697:1956): avc: denied { name_bind } for pid=4674 comm="syz.0.381" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 66.929630][ T29] audit: type=1400 audit(1751690204.697:1957): avc: denied { node_bind } for pid=4674 comm="syz.0.381" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 67.218122][ T4692] xt_hashlimit: size too large, truncated to 1048576 [ 67.370264][ T29] audit: type=1400 audit(1751690205.387:1958): avc: denied { connect } for pid=4691 comm="syz.0.385" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.390846][ T29] audit: type=1400 audit(1751690205.387:1959): avc: denied { write } for pid=4691 comm="syz.0.385" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.519947][ T4701] loop2: detected capacity change from 0 to 1024 [ 67.544686][ T4699] lo speed is unknown, defaulting to 1000 [ 67.561827][ T4701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.575481][ T4701] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.589774][ T4701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.388: bg 0: block 393: padding at end of block bitmap is not set [ 67.598641][ T4705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.614646][ T4701] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 67.631475][ T4705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.675445][ T4701] bridge: RTM_NEWNEIGH with invalid ether address [ 67.758637][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.128523][ T29] audit: type=1400 audit(1751690206.147:1960): avc: denied { read } for pid=4721 comm="syz.2.394" path="socket:[8919]" dev="sockfs" ino=8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.547865][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 69.043998][ T4733] loop2: detected capacity change from 0 to 512 [ 69.050848][ T4733] ext4: Unknown parameter 'nouser_xattr' [ 69.126779][ T4736] loop0: detected capacity change from 0 to 256 [ 69.152511][ T4736] FAT-fs (loop0): codepage cp950 not found [ 69.168131][ T29] audit: type=1400 audit(1751690207.187:1961): avc: denied { read write } for pid=4735 comm="syz.0.399" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.369563][ T4744] loop0: detected capacity change from 0 to 128 [ 69.380068][ T4744] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 69.388092][ T4744] FAT-fs (loop0): Filesystem has been set read-only [ 69.399963][ T4744] bio_check_eod: 12221 callbacks suppressed [ 69.399983][ T4744] syz.0.400: attempt to access beyond end of device [ 69.399983][ T4744] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 69.434180][ T4746] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 69.441485][ T4744] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 69.449763][ T4744] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 69.486470][ T4746] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 69.499818][ T4744] syz.0.400: attempt to access beyond end of device [ 69.499818][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.552061][ T4744] syz.0.400: attempt to access beyond end of device [ 69.552061][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.590022][ T4744] syz.0.400: attempt to access beyond end of device [ 69.590022][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.631394][ T4744] syz.0.400: attempt to access beyond end of device [ 69.631394][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.671565][ T4744] syz.0.400: attempt to access beyond end of device [ 69.671565][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.687469][ T4750] ================================================================== [ 69.695611][ T4750] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 69.704244][ T4750] [ 69.706606][ T4750] write to 0xffff888118845228 of 8 bytes by task 4753 on cpu 0: [ 69.714270][ T4750] shmem_file_splice_read+0x470/0x600 [ 69.719692][ T4750] splice_direct_to_actor+0x26f/0x680 [ 69.725103][ T4750] do_splice_direct+0xda/0x150 [ 69.729915][ T4750] do_sendfile+0x380/0x650 [ 69.734384][ T4750] __x64_sys_sendfile64+0x105/0x150 [ 69.739629][ T4750] x64_sys_call+0xb39/0x2fb0 [ 69.744261][ T4750] do_syscall_64+0xd2/0x200 [ 69.748804][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.754742][ T4750] [ 69.757096][ T4750] write to 0xffff888118845228 of 8 bytes by task 4750 on cpu 1: [ 69.764765][ T4750] shmem_file_splice_read+0x470/0x600 [ 69.770187][ T4750] splice_direct_to_actor+0x26f/0x680 [ 69.775620][ T4750] do_splice_direct+0xda/0x150 [ 69.780474][ T4750] do_sendfile+0x380/0x650 [ 69.784936][ T4750] __x64_sys_sendfile64+0x105/0x150 [ 69.790181][ T4750] x64_sys_call+0xb39/0x2fb0 [ 69.794825][ T4750] do_syscall_64+0xd2/0x200 [ 69.799378][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.805313][ T4750] [ 69.807670][ T4750] value changed: 0x0000000000000750 -> 0x0000000000000752 [ 69.814815][ T4750] [ 69.817166][ T4750] Reported by Kernel Concurrency Sanitizer on: [ 69.823366][ T4750] CPU: 1 UID: 0 PID: 4750 Comm: syz.3.404 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 69.835736][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.845836][ T4750] ================================================================== [ 69.862954][ T4744] syz.0.400: attempt to access beyond end of device [ 69.862954][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.887083][ T4744] syz.0.400: attempt to access beyond end of device [ 69.887083][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.911547][ T4744] syz.0.400: attempt to access beyond end of device [ 69.911547][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.945872][ T4744] syz.0.400: attempt to access beyond end of device [ 69.945872][ T4744] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128