last executing test programs: 3.06937022s ago: executing program 3 (id=502): socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa080) timerfd_create(0x9, 0x800) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) acct(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) setresuid(0x0, 0xee00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000006c0)={{0x1, 0x3, 0x1ff, 0x3, 0x7ff}, 0x9, 0x100000200, 0x32}) get_robust_list(r0, 0x0, &(0x7f0000000300)) 3.02417092s ago: executing program 3 (id=505): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) socket$inet(0x2, 0x3, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 2.620463976s ago: executing program 0 (id=512): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x2e, 0x2000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200007d33763ccee5c8eadb8f7b01bcae2000010000000000000004000000000000001000000000484f2f5e35b0a5decb3300000020000000000000006dd27f7a34ffe9e87442db0c89e6b0f7842ee2bb6b986a2c6a210b68a95f6140a2415fcc20140f851a3db2dbc87a782723a1ffaebfd183b95ef822122fc120b8f23ea48b9a3246dced4475606319f345d72d74c1b55adb4e2609423382a6b0c98d6b79263756f2397bd74a52a6a0d384458502fcc144133c8c5095101efc5055718e7645acdcb325d4bcc4f07f7f215f0000000001000000da008c0e6e04001fa0819165390c15a26ccb2a20ef451d4a3ff3530a375ca87fe4aa0fadd8ff71b18ec5b955905a415a09ffc4e203adbe7f78da3ad7d19322c053166ec7f8c9998a0e1c64d8902224"], 0x24, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000b80)=""/225, &(0x7f0000000140)=0xe1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 2.580755076s ago: executing program 4 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x294, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff3e8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x571a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4f50}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x48, 0x3, "4b57f410a4b7265ea3d90f1616f6ff6749a2807fcc6921d3ca1c94b755e8f57a33ba56b8ec2ad3153993973c521857b26382d1f4e30d239c07c9f72c53e1c9cb714386a6"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7ef0614b8c44d10ae930539babb18d2e3e8776082a203a5c8d10da1f94a01d"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "b93127648c4eaded01b0ad360a356188c4ea61cd7c3ab9e95845844da76dbba9debb687de564b9bd2692"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "78153eb5e23370a7a7be67163dcf837ac16f8299309ee6712b1ba3"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x44851) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r4, 0x20, 0x7ff, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$rds(0x15, 0x5, 0x0) r10 = inotify_init() inotify_add_watch(r10, &(0x7f00000009c0)='./file0\x00', 0x40000002) 2.556911666s ago: executing program 0 (id=514): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f", 0x52, 0xc001, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0xc4) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.530211587s ago: executing program 0 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) 2.483979647s ago: executing program 4 (id=517): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xfffffe9f) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000003c0)) lseek(r3, 0x84b0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 2.421501968s ago: executing program 2 (id=519): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) 2.352611329s ago: executing program 0 (id=520): ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x12002, 0x18e, 0x1}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pivot_root(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.30719061s ago: executing program 4 (id=521): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x60) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) sendfile(r0, r2, 0x0, 0xe0000000) 2.089903092s ago: executing program 3 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x261d, &(0x7f0000000640)={0x0, 0x8879, 0x40, 0x2, 0x333}, &(0x7f0000000400), &(0x7f00000006c0)) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6, 0x0, r1}, &(0x7f00000002c0), 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) r5 = dup2(r3, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) fcntl$setown(r3, 0x8, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) tkill(r2, 0x13) 2.022897093s ago: executing program 4 (id=523): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/33, 0x21, 0x40000042, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200000000622c, 0x0) 2.022349353s ago: executing program 2 (id=524): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = msgget$private(0x0, 0x214) msgsnd(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x173, 0x2}, 0x0, 0x0, 0x3, 0x4, 0xa32, 0x0, 0x9, 0xfffe, 0x1b, 0x1000}) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r4 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x30000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 1.936791004s ago: executing program 2 (id=525): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$loop(0x0, 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.618675488s ago: executing program 1 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.618074108s ago: executing program 2 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x368, 0x2e8, 0x2e8, 0x368, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x168, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b500", 0x1, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x7, 0x4, 0x1, 0x0, "9c2d68c9fe7a3fe21a38fc41cae3540d864acbf238f3f08750d4b25cbb84846840562379ddc9f61533c3629cdd2b1708b4a1e1fb51c2bfbe4367d4af7009f411"}}}, {{@ipv6={@loopback, @private2, [0xff, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xff, 0xffffffff, 0xff], 'bond_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x3b, 0xff}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="14"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r4}, 0x38) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) 1.559910939s ago: executing program 2 (id=528): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x10e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x0) 1.463131731s ago: executing program 0 (id=529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) tkill(0x0, 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 672.61973ms ago: executing program 3 (id=530): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000180)="72f26a9343141dc0221824f2623976907878bf71c717c38885fb273718df0508336f08d254648d66311379e577f5f84b9929aafa01ee07967503e69482dd00a058d23c622e1dcea22a5e9a0254fc5ff4bc703f97321132690b3b", 0x5a, 0x8000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 671.866061ms ago: executing program 4 (id=531): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)="45bc39b45bc5c1b7de03b12c64b5d77f89950a7ec48ee3469a59ba8a5c8add04c461e2028705bc248e1131fcee31f726a37376a1d2af77fea9f808e3f839450566", 0x41}, {&(0x7f0000000380)="bfc57292612694", 0x7}], 0x3, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts={{0x30, 0x29, 0x37, {0x1, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0xe8, 0x29, 0x36, {0x3b, 0x19, '\x00', [@generic={0x7, 0xca, "224a41acddf5987a8be643f58a073f9c7dff35e2cf72a873b1b74164035619ab3c918c26514752dd654320b613962e9c303670fcde652dfe5b3e811412a85a97795c7ae3acff73a14d9de968d818e353584d6fb242720eaa6874fd6f5bf17e6411e97a09d0a3f2623e342dc0a08f4bd836bb8a48d9459b1d226d70a057a55c88f7a5b5c5bb4277dc1629598e53d0764636f1b91f8470980657fec222061e755332357e5922e808ac4b0e80053dc9110848d59e424202790bea0c38d9f99f5b274d9d14c4920931f1b5ab"}]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x0, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0xf2}, @calipso={0x7, 0x40, {0x2, 0xe, 0x2, 0x30a1, [0x6, 0xffffffffffffffff, 0x3ff, 0x6, 0x6, 0xb, 0x1ff]}}, @generic={0xf8, 0x81, "dadf45fa7cf19fd4d44d5e02fc2c0e5eb5afd3d65f383f1215a694821c6b22e71118c9d638db98131c5df4419aa9be3fb8145c20b7296a846808855ec1373afb174c814cf336ec8b768daf48ec7a816df8409a7f58dcd0153e8be04f855dbdb6eb2792035d216df0d6c25d9663a3cbf60ad31a8c84326d4467e8409184fa24e88a"}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x91}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0xac, 0x3, '\x00', [@pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0xc, 0x7, [0xf993, 0x5]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd8}}], 0x2b8}, 0x5) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) writev(r0, &(0x7f0000001280)=[{0x0, 0x100000}, {&(0x7f0000000140)="92", 0x1}], 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = epoll_create1(0x0) r7 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x2, r7, 0x0) 671.41607ms ago: executing program 3 (id=532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x7}, 0x1100, 0x5dd8, 0x203a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x11120, 0x5dd8, 0x0, 0x6, 0x0, 0xfffffffc, 0xfff9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000300)="8932ed209b230932", 0x8, 0x64008004, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x2, &(0x7f0000000200)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 585.462552ms ago: executing program 1 (id=533): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x4, 0x573, &(0x7f0000000ec0)="$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") r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000580)=""/231, 0xe7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000026e0850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x5, 0x0, &(0x7f00000002c0)="0000ffffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) fallocate(r3, 0x10, 0xffc, 0x6da) write$UHID_INPUT(r3, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x1006) 584.945622ms ago: executing program 2 (id=534): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x8) splice(r3, 0x0, r1, 0x0, 0xd4, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xffffff0c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000540)=@assoc_value, &(0x7f0000000200)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x49cd, &(0x7f0000000480)={0x0, 0xfffffffb, 0x80, 0x2, 0x1b0}, &(0x7f0000000500)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) 488.698683ms ago: executing program 3 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaff) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) 403.488634ms ago: executing program 1 (id=536): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000f00)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8ab2805613406ebc9a22eeab3ebab190314e31296462ca2622493ce2104ac980f745f8e087eea8f7c9107ffd7e1b803753b3029ae26a25daeb45f324e8e058c383622685cc1b9785ecd36895c04908ae25af9e53f7303e5720d893a53da3caaaa0b93cf7ca17cbe3fe05e3e271fa190c3eb5b5ae5d0e91d6dfed133e4dceb42098c53cad39970137999fb1f99ac0ecf20d16f32f74a965f217738be5225d2cd", 0xd0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0052b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99e", 0x6f}, {&(0x7f0000001700)}, {&(0x7f0000000580)="156f58eda3eaf40347c8fcb457593de1fc6e1d31409cf209139a891d4718361585bfb36cc0c0fffb007ad8176b40047b9b333cc2b86d11cefa6387fed76e611ca44de9ed7fa9f1b85663b4edb341e4540122b84005f5ec9cc3b5421dcd83aa6f289716b42062e393bbfaa8aac292e206a539f70c73f17cf52754ad53b2fd6c964add609261bb4b97eaf3531f806ffa000000000000", 0x95}, {&(0x7f0000000e00)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0fc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197df729ce0200b52927ecb190cc359052470c77f3a884e1208092d7ab2446a8d6e3ca5b642723a5519faaa38542c5ef7e98d45b4bf5852749d96a5748f2d42ca3da2a34250d84a64bc6bc43a5b094b31ea4ec17a9b4973a4a0c589f1c1159773ec6bdcf99dacc886b07fa86e452e7acd9383a0d4ce2343b1c", 0xc6}, {&(0x7f0000000880)="4f7a08cb7e877b8063c9939a6fc02812ad2fe5f90078e5bb023fd64f0bfa7f93390f8ac20b392ba4eed28cfbfb1f917ef31d75b93d17d75eca60a9f8f24e5fd3a05eeafc0baa41c747752ec23fb297ee50a5c8a7e4fcf385f218a2753e08dd6a598813e6d721ff302ed3473555947a1739f095d5e96353698e0fe0f31a5dce1c968e0a0d1b14c271f2db9992475b5843fb4a5b2ab568ac178c823dfd7a6dfe0452cf37c22c26ef9e48bb", 0xaa}, {&(0x7f0000002ec0)="cc098cb4f8101a257eb48ef649e4fd0dad820842c9", 0x15}], 0x9}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000040)=""/19, 0x13, 0x40000041, 0x0, 0x13) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000880), 0x7000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000004000000e47f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 373.495164ms ago: executing program 1 (id=537): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x4006, 0x0, 0x400081, 0xfffffffb}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000002c0)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x4000) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 20.519909ms ago: executing program 4 (id=538): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x3000490, &(0x7f00000003c0), 0x1, 0x7c0, &(0x7f0000000f00)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r3, @ANYBLOB="0174"], 0x20}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x21}}}, @rthdr={{0x18, 0x29, 0x39, {0x1}}}], 0x30}}], 0x1, 0x4) modify_ldt$read(0x0, 0x0, 0x0) fadvise64(r4, 0xc, 0x9d47, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.274889ms ago: executing program 1 (id=548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ed, 0x2, 0x403, 0x1f7}, &(0x7f0000000140)=0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 0s ago: executing program 1 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) pipe2(&(0x7f0000000800)={0x0, 0x0}, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6c, 0xd) syz_emit_ethernet(0x96, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r4, 0x0, 0x478) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) syz_io_uring_setup(0x73bc, &(0x7f0000000080)={0x0, 0xb39d, 0x10000, 0x1, 0x1e8}, &(0x7f0000000100), &(0x7f0000000140)) kernel console output (not intermixed with test programs): [ 20.453729][ T29] audit: type=1400 audit(1746307998.110:81): avc: denied { read } for pid=2989 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 25.987259][ T29] audit: type=1400 audit(1746308003.640:82): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.988285][ T3294] cgroup: Unknown subsys name 'net' [ 26.010030][ T29] audit: type=1400 audit(1746308003.640:83): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.037383][ T29] audit: type=1400 audit(1746308003.670:84): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.153839][ T3294] cgroup: Unknown subsys name 'cpuset' [ 26.159880][ T3294] cgroup: Unknown subsys name 'rlimit' [ 26.270067][ T29] audit: type=1400 audit(1746308003.920:85): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.293386][ T29] audit: type=1400 audit(1746308003.920:86): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.313907][ T29] audit: type=1400 audit(1746308003.920:87): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.321121][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.334237][ T29] audit: type=1400 audit(1746308003.920:88): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.363120][ T29] audit: type=1400 audit(1746308003.930:89): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.387900][ T29] audit: type=1400 audit(1746308003.930:90): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.411205][ T29] audit: type=1400 audit(1746308004.000:91): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.439950][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.212987][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.278412][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.315443][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.372189][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.379431][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.387053][ T3304] bridge_slave_0: entered allmulticast mode [ 28.393585][ T3304] bridge_slave_0: entered promiscuous mode [ 28.411568][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.418693][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.425826][ T3304] bridge_slave_1: entered allmulticast mode [ 28.432169][ T3304] bridge_slave_1: entered promiscuous mode [ 28.443648][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.469166][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.476342][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.483527][ T3305] bridge_slave_0: entered allmulticast mode [ 28.489976][ T3305] bridge_slave_0: entered promiscuous mode [ 28.507688][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.516814][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.523906][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.531036][ T3306] bridge_slave_0: entered allmulticast mode [ 28.537577][ T3306] bridge_slave_0: entered promiscuous mode [ 28.546238][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.553347][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.560551][ T3306] bridge_slave_1: entered allmulticast mode [ 28.567086][ T3306] bridge_slave_1: entered promiscuous mode [ 28.573462][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.580514][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.587719][ T3305] bridge_slave_1: entered allmulticast mode [ 28.594086][ T3305] bridge_slave_1: entered promiscuous mode [ 28.600919][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.652378][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.672010][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.684860][ T3304] team0: Port device team_slave_0 added [ 28.691432][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.701617][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.718246][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.727520][ T3304] team0: Port device team_slave_1 added [ 28.765171][ T3306] team0: Port device team_slave_0 added [ 28.776099][ T3305] team0: Port device team_slave_0 added [ 28.781819][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.788932][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.796112][ T3310] bridge_slave_0: entered allmulticast mode [ 28.802715][ T3310] bridge_slave_0: entered promiscuous mode [ 28.811485][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.818633][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.825799][ T3310] bridge_slave_1: entered allmulticast mode [ 28.832160][ T3310] bridge_slave_1: entered promiscuous mode [ 28.838904][ T3306] team0: Port device team_slave_1 added [ 28.844796][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.851736][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.877748][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.888982][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.896060][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.922019][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.933656][ T3305] team0: Port device team_slave_1 added [ 28.975890][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.985415][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.992437][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.018438][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.029626][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.036606][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.062528][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.073478][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.080519][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.106451][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.131259][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.152407][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.159379][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.185317][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.208994][ T3310] team0: Port device team_slave_0 added [ 29.215565][ T3310] team0: Port device team_slave_1 added [ 29.250835][ T3304] hsr_slave_0: entered promiscuous mode [ 29.256968][ T3304] hsr_slave_1: entered promiscuous mode [ 29.278633][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.285674][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.311614][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.324455][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.331416][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.357533][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.368933][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.376048][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.383286][ T3311] bridge_slave_0: entered allmulticast mode [ 29.389832][ T3311] bridge_slave_0: entered promiscuous mode [ 29.398328][ T3306] hsr_slave_0: entered promiscuous mode [ 29.404450][ T3306] hsr_slave_1: entered promiscuous mode [ 29.410319][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.417895][ T3306] Cannot create hsr debugfs directory [ 29.432538][ T3305] hsr_slave_0: entered promiscuous mode [ 29.438666][ T3305] hsr_slave_1: entered promiscuous mode [ 29.444524][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.452069][ T3305] Cannot create hsr debugfs directory [ 29.462837][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.469962][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.477416][ T3311] bridge_slave_1: entered allmulticast mode [ 29.484131][ T3311] bridge_slave_1: entered promiscuous mode [ 29.512223][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.546147][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.564143][ T3310] hsr_slave_0: entered promiscuous mode [ 29.570071][ T3310] hsr_slave_1: entered promiscuous mode [ 29.575993][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.583569][ T3310] Cannot create hsr debugfs directory [ 29.618967][ T3311] team0: Port device team_slave_0 added [ 29.639601][ T3311] team0: Port device team_slave_1 added [ 29.671285][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.678271][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.704210][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.727144][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.734143][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.760051][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.840915][ T3311] hsr_slave_0: entered promiscuous mode [ 29.846898][ T3311] hsr_slave_1: entered promiscuous mode [ 29.852672][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.860262][ T3311] Cannot create hsr debugfs directory [ 29.878443][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.886925][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.907879][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.920340][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.935414][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.953783][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.980524][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.991276][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.001940][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.010763][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.024596][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.033517][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.084839][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.094977][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.118332][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.128758][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.147211][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.161297][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.172941][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.181984][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.191009][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.203901][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.240353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.247452][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.269811][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.277030][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.295928][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.315706][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.328099][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.348061][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.355148][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.364074][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.371184][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.399789][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.411876][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.424499][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.435331][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.446544][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.458683][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.475289][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.482376][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.493001][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.500155][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.514842][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.522008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.531528][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.538593][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.554093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.561206][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.578011][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.585160][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.612589][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.622997][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.665681][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.690773][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.707098][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.754370][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.780308][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.818348][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.857360][ T3306] veth0_vlan: entered promiscuous mode [ 30.879895][ T3304] veth0_vlan: entered promiscuous mode [ 30.889233][ T3306] veth1_vlan: entered promiscuous mode [ 30.926895][ T3304] veth1_vlan: entered promiscuous mode [ 30.934481][ T3306] veth0_macvtap: entered promiscuous mode [ 30.947810][ T3306] veth1_macvtap: entered promiscuous mode [ 30.968963][ T3311] veth0_vlan: entered promiscuous mode [ 30.978581][ T3310] veth0_vlan: entered promiscuous mode [ 30.989932][ T3311] veth1_vlan: entered promiscuous mode [ 30.998746][ T3304] veth0_macvtap: entered promiscuous mode [ 31.006048][ T3304] veth1_macvtap: entered promiscuous mode [ 31.019822][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.028909][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.037836][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.046666][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.055421][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.064198][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.080664][ T3310] veth1_vlan: entered promiscuous mode [ 31.089038][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.099639][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.110219][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.120091][ T3305] veth0_vlan: entered promiscuous mode [ 31.133662][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.144134][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.154489][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.168573][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.177476][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.186351][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.195209][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.207798][ T3305] veth1_vlan: entered promiscuous mode [ 31.217309][ T3311] veth0_macvtap: entered promiscuous mode [ 31.227828][ T3311] veth1_macvtap: entered promiscuous mode [ 31.246820][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.246835][ T29] audit: type=1400 audit(1746308008.900:110): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.jYyX7X/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.277419][ T29] audit: type=1400 audit(1746308008.900:111): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.300726][ T29] audit: type=1400 audit(1746308008.900:112): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.jYyX7X/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.326001][ T29] audit: type=1400 audit(1746308008.900:113): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.339267][ T3305] veth0_macvtap: entered promiscuous mode [ 31.347926][ T29] audit: type=1400 audit(1746308008.900:114): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.jYyX7X/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.358906][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.380301][ T29] audit: type=1400 audit(1746308008.900:115): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.jYyX7X/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.390715][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.418067][ T29] audit: type=1400 audit(1746308008.900:116): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.427870][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.458033][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.468506][ T29] audit: type=1400 audit(1746308008.970:117): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.479072][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.491430][ T29] audit: type=1400 audit(1746308008.970:118): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=3737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.501096][ T3310] veth0_macvtap: entered promiscuous mode [ 31.530256][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.540696][ T3310] veth1_macvtap: entered promiscuous mode [ 31.552674][ T3305] veth1_macvtap: entered promiscuous mode [ 31.562413][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.572906][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.582726][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.593243][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.604509][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.613968][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.624492][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.634337][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.644811][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.654720][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.665233][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.677870][ T29] audit: type=1400 audit(1746308009.310:119): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.687345][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.722498][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.731450][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.740200][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.749020][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.759927][ C1] hrtimer: interrupt took 57655 ns [ 31.778007][ T3446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.789789][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.800405][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.810363][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.820898][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.830754][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.841201][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.852476][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.886677][ T3446] bond1: entered promiscuous mode [ 31.892018][ T3446] bond1: entered allmulticast mode [ 31.904781][ T3446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.928944][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.937800][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.946608][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.955350][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.971756][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.982427][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.992334][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.002926][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.012925][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.023434][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.033331][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.043762][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.054879][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.071413][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.082104][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.091953][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.102382][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.112386][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.122906][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.132924][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.133024][ T3446] syz.0.6 (3446) used greatest stack depth: 10952 bytes left [ 32.143356][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.163593][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.263464][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.272279][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.281077][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.289802][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.323763][ T3457] bridge_slave_0: left allmulticast mode [ 32.329475][ T3457] bridge_slave_0: left promiscuous mode [ 32.335229][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.346546][ T3457] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.364339][ T3457] syz.1.10 (3457) used greatest stack depth: 10616 bytes left [ 32.409905][ T3474] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 32.470017][ T3484] loop1: detected capacity change from 0 to 1024 [ 32.477246][ T3484] ======================================================= [ 32.477246][ T3484] WARNING: The mand mount option has been deprecated and [ 32.477246][ T3484] and is ignored by this kernel. Remove the mand [ 32.477246][ T3484] option from the mount to silence this warning. [ 32.477246][ T3484] ======================================================= [ 32.512289][ T3474] syz_tun: entered promiscuous mode [ 32.525888][ T3488] loop2: detected capacity change from 0 to 128 [ 32.546827][ T3474] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 32.563211][ T3484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.609706][ T3496] tipc: Started in network mode [ 32.614666][ T3496] tipc: Node identity 4, cluster identity 4711 [ 32.620856][ T3496] tipc: Node number set to 4 [ 32.710334][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.746069][ T3459] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 32.753749][ T3459] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 32.761141][ T3459] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 32.767830][ T3509] bridge_slave_0: left allmulticast mode [ 32.768620][ T3459] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 32.774242][ T3509] bridge_slave_0: left promiscuous mode [ 32.781614][ T3459] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 32.787316][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.794605][ T3459] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 32.813590][ T3459] hid-generic 0021:0009:0000.0001: hidraw0: HID v0.07 Device [syz0] on syz1 [ 32.834969][ T3509] bridge_slave_1: left allmulticast mode [ 32.840657][ T3509] bridge_slave_1: left promiscuous mode [ 32.846529][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.871959][ T3509] bond0: (slave bond_slave_0): Releasing backup interface [ 32.897021][ T3509] bond0: (slave bond_slave_1): Releasing backup interface [ 32.929790][ T3509] team0: Port device team_slave_0 removed [ 32.939512][ T3509] team0: Port device team_slave_1 removed [ 32.946531][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.954034][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.966429][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.974038][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.006590][ T3530] Zero length message leads to an empty skb [ 33.063261][ T3540] netlink: 552 bytes leftover after parsing attributes in process `syz.1.32'. [ 33.072217][ T3540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 33.174885][ T3552] loop0: detected capacity change from 0 to 1024 [ 33.185777][ T3551] netlink: 'syz.3.38': attribute type 39 has an invalid length. [ 33.198221][ T3551] bond0: (slave syz_tun): Releasing backup interface [ 33.210843][ T3555] loop2: detected capacity change from 0 to 512 [ 33.231829][ T3552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.245151][ T3555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.245453][ T3558] syzkaller0: entered promiscuous mode [ 33.258419][ T3555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.264037][ T3558] syzkaller0: entered allmulticast mode [ 33.307592][ T3561] loop1: detected capacity change from 0 to 128 [ 33.352250][ T3536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.30: bg 0: block 88: padding at end of block bitmap is not set [ 33.367724][ T3555] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.386793][ T3563] @: renamed from vlan0 (while UP) [ 33.394645][ T3555] EXT4-fs (loop2): 1 truncate cleaned up [ 33.404518][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.456126][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.469253][ T3568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.43'. [ 33.478186][ T3568] netlink: 284 bytes leftover after parsing attributes in process `syz.4.43'. [ 33.612174][ T3536] syz.0.30 (3536) used greatest stack depth: 10400 bytes left [ 33.665662][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.692815][ T3583] syzkaller0: entered promiscuous mode [ 33.698350][ T3583] syzkaller0: entered allmulticast mode [ 34.372116][ T3609] loop0: detected capacity change from 0 to 512 [ 34.394935][ T3609] EXT4-fs (loop0): 1 orphan inode deleted [ 34.401137][ T3609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.415129][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 34.423343][ T3609] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.450061][ T3613] netem: change failed [ 34.519859][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.722405][ T3623] serio: Serial port ptm0 [ 35.211145][ T3643] SELinux: failed to load policy [ 35.238700][ T3646] loop4: detected capacity change from 0 to 512 [ 35.246158][ T3646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.258405][ T3646] EXT4-fs (loop4): 1 truncate cleaned up [ 35.264701][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.318263][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.369872][ T3651] bridge_slave_0: left allmulticast mode [ 35.375677][ T3651] bridge_slave_0: left promiscuous mode [ 35.381406][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.391061][ T3651] bridge_slave_1: left allmulticast mode [ 35.396913][ T3651] bridge_slave_1: left promiscuous mode [ 35.402641][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.415836][ T3651] bond0: (slave bond_slave_0): Releasing backup interface [ 35.425469][ T3651] bond0: (slave bond_slave_1): Releasing backup interface [ 35.438404][ T3651] team0: Port device team_slave_0 removed [ 35.448722][ T3651] team0: Port device team_slave_1 removed [ 35.456066][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.463726][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.504484][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.509350][ T3652] netlink: 60 bytes leftover after parsing attributes in process `syz.4.72'. [ 35.511938][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.595112][ T3663] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.659634][ T3652] team0: Mode changed to "loadbalance" [ 35.679175][ T3663] ip6gretap0: entered promiscuous mode [ 35.694477][ T3663] vlan2: entered promiscuous mode [ 35.720855][ T3667] pim6reg1: entered promiscuous mode [ 35.726376][ T3667] pim6reg1: entered allmulticast mode [ 35.797021][ T3673] vlan2: entered allmulticast mode [ 35.802196][ T3673] bond0: entered allmulticast mode [ 35.809107][ T3675] netlink: 'syz.0.83': attribute type 27 has an invalid length. [ 35.855604][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.862839][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.947472][ T3681] loop2: detected capacity change from 0 to 2048 [ 35.976205][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.005187][ T3681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.013743][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.042440][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.070866][ T3687] loop4: detected capacity change from 0 to 1024 [ 36.104230][ T3691] loop2: detected capacity change from 0 to 512 [ 36.111145][ T3691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.133324][ T3691] EXT4-fs (loop2): 1 truncate cleaned up [ 36.139170][ T3675] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.139562][ T3691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.148327][ T3675] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.169366][ T3675] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.178252][ T3675] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.205634][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.224506][ T3687] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 36.252102][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.264597][ T3675] bond1: left promiscuous mode [ 36.269401][ T3675] bond1: left allmulticast mode [ 36.285271][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.309702][ T3696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 36.334924][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 36.334979][ T29] audit: type=1400 audit(1746308013.990:227): avc: denied { create } for pid=3695 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.398676][ T29] audit: type=1400 audit(1746308014.020:228): avc: denied { bind } for pid=3695 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.405565][ T3702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'. [ 36.418003][ T29] audit: type=1400 audit(1746308014.030:229): avc: denied { name_bind } for pid=3695 comm="syz.2.90" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 36.447537][ T29] audit: type=1400 audit(1746308014.030:230): avc: denied { node_bind } for pid=3695 comm="syz.2.90" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 36.468221][ T29] audit: type=1400 audit(1746308014.030:231): avc: denied { listen } for pid=3695 comm="syz.2.90" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.488822][ T29] audit: type=1400 audit(1746308014.030:232): avc: denied { connect } for pid=3695 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.508383][ T29] audit: type=1400 audit(1746308014.030:233): avc: denied { name_connect } for pid=3695 comm="syz.2.90" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 36.529310][ T29] audit: type=1400 audit(1746308014.030:234): avc: denied { accept } for pid=3695 comm="syz.2.90" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.541325][ T3702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3702 comm=syz.0.93 [ 36.549627][ T29] audit: type=1400 audit(1746308014.030:235): avc: denied { write } for pid=3695 comm="syz.2.90" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=46344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.601650][ T29] audit: type=1400 audit(1746308014.250:236): avc: denied { read } for pid=3701 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.689480][ T3712] loop4: detected capacity change from 0 to 1024 [ 36.696307][ T3712] EXT4-fs: Ignoring removed bh option [ 36.701770][ T3712] EXT4-fs: inline encryption not supported [ 36.707748][ T3712] EXT4-fs: Ignoring removed i_version option [ 36.718701][ T3712] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.732001][ T3706] process 'syz.0.97' launched '/dev/fd/6' with NULL argv: empty string added [ 36.816556][ T3712] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.98: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.851460][ T3712] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.98: Failed to acquire dquot type 0 [ 36.901853][ T3712] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.98: Freeing blocks not in datazone - block = 0, count = 4096 [ 36.952905][ T3712] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.98: Invalid inode bitmap blk 0 in block_group 0 [ 36.972862][ T37] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.987496][ T3712] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 36.998011][ T3726] loop2: detected capacity change from 0 to 1024 [ 37.003037][ T3712] EXT4-fs (loop4): 1 orphan inode deleted [ 37.010739][ T3712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.015000][ T3726] EXT4-fs: Ignoring removed oldalloc option [ 37.029275][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 37.050732][ T3726] EXT4-fs: Ignoring removed orlov option [ 37.053330][ T3712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.056886][ T3726] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 37.086035][ T3726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.103980][ T3730] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.146147][ T3732] loop1: detected capacity change from 0 to 512 [ 37.181370][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.229504][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.248839][ T3732] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.267318][ T3736] pim6reg1: entered promiscuous mode [ 37.272717][ T3736] pim6reg1: entered allmulticast mode [ 37.295811][ T3732] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.106: bg 0: block 217: padding at end of block bitmap is not set [ 37.349707][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.399484][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.419078][ T3742] bridge0: entered allmulticast mode [ 37.444254][ T3742] loop1: detected capacity change from 0 to 512 [ 37.455054][ T3742] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.110: corrupted in-inode xattr: invalid ea_ino [ 37.469754][ T3742] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.110: couldn't read orphan inode 15 (err -117) [ 37.470513][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 37.489033][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 37.496503][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 37.505858][ T3742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.520639][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 37.534145][ T10] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.657331][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.783674][ T3765] loop2: detected capacity change from 0 to 512 [ 37.815238][ T3765] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.118: Failed to acquire dquot type 1 [ 37.834681][ T3765] EXT4-fs (loop2): 1 truncate cleaned up [ 37.840838][ T3765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.855353][ T3765] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.920696][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.980755][ T3781] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.123'. [ 37.980785][ T3781] netlink: zone id is out of range [ 37.980815][ T3781] netlink: zone id is out of range [ 37.980825][ T3781] netlink: zone id is out of range [ 37.980832][ T3781] netlink: zone id is out of range [ 37.980857][ T3781] netlink: del zone limit has 8 unknown bytes [ 38.064027][ T3789] wg2: entered promiscuous mode [ 38.064045][ T3789] wg2: entered allmulticast mode [ 38.162280][ T3791] syzkaller0: entered promiscuous mode [ 38.167854][ T3791] syzkaller0: entered allmulticast mode [ 38.360523][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 38.382657][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.410956][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.420511][ T3817] IPv4: Oversized IP packet from 127.202.26.0 [ 38.472099][ T3819] loop2: detected capacity change from 0 to 512 [ 38.508388][ T3819] EXT4-fs (loop2): 1 orphan inode deleted [ 38.524208][ T1842] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 38.540518][ T3819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.553510][ T3819] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.560833][ T3824] loop3: detected capacity change from 0 to 512 [ 38.602609][ T3819] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 38.622096][ T3824] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.142: bg 0: block 393: padding at end of block bitmap is not set [ 38.654860][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.669951][ T3824] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 38.680892][ T3824] EXT4-fs (loop3): 2 truncates cleaned up [ 38.687856][ T3824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.732374][ T3824] netlink: 96 bytes leftover after parsing attributes in process `syz.3.142'. [ 38.748059][ T3838] pim6reg1: entered promiscuous mode [ 38.753605][ T3838] pim6reg1: entered allmulticast mode [ 38.760680][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.877605][ T3853] capability: warning: `syz.0.155' uses deprecated v2 capabilities in a way that may be insecure [ 38.893938][ T3853] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 38.920336][ T3857] loop2: detected capacity change from 0 to 2048 [ 38.946197][ T3857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.970663][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.978270][ T3908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'. [ 40.058907][ T3910] Illegal XDP return value 32768 on prog (id 137) dev N/A, expect packet loss! [ 40.416897][ T3934] loop4: detected capacity change from 0 to 512 [ 40.441834][ T3934] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.468301][ T3940] loop1: detected capacity change from 0 to 8192 [ 40.491239][ T3940] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.515248][ T3305] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 40.750948][ T3965] loop3: detected capacity change from 0 to 2048 [ 40.792087][ T3965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.810872][ T3972] netlink: 96 bytes leftover after parsing attributes in process `syz.1.203'. [ 40.831942][ T3971] delete_channel: no stack [ 40.913208][ T3982] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.201: bg 0: block 234: padding at end of block bitmap is not set [ 40.942137][ T3979] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.206'. [ 40.963600][ T3982] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 20 with error 117 [ 40.976151][ T3982] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.976151][ T3982] [ 41.006152][ T1628] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 20 with max blocks 2048 with error 28 [ 41.018748][ T1628] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.018748][ T1628] [ 41.028620][ T1628] EXT4-fs (loop3): Total free blocks count 0 [ 41.034679][ T1628] EXT4-fs (loop3): Free/Dirty block details [ 41.040692][ T1628] EXT4-fs (loop3): free_blocks=0 [ 41.045733][ T1628] EXT4-fs (loop3): dirty_blocks=2160 [ 41.051038][ T1628] EXT4-fs (loop3): Block reservation details [ 41.162881][ T3995] loop3: detected capacity change from 0 to 256 [ 41.162988][ T3993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 41.178206][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 41.187168][ T3995] netlink: 180 bytes leftover after parsing attributes in process `syz.3.212'. [ 41.360296][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 41.360314][ T29] audit: type=1400 audit(1746308019.010:704): avc: denied { ioctl } for pid=4003 comm="syz.3.217" path="socket:[6428]" dev="sockfs" ino=6428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.399884][ T29] audit: type=1400 audit(1746308019.050:705): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 41.464089][ T4008] loop3: detected capacity change from 0 to 128 [ 41.517183][ T29] audit: type=1400 audit(1746308019.170:706): avc: denied { create } for pid=4011 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.559730][ T29] audit: type=1400 audit(1746308019.200:707): avc: denied { connect } for pid=4011 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.562721][ T4008] SELinux: ebitmap: truncated map [ 41.579264][ T29] audit: type=1400 audit(1746308019.200:708): avc: denied { write } for pid=4011 comm="syz.1.222" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.591760][ T4008] SELinux: failed to load policy [ 41.607692][ T29] audit: type=1400 audit(1746308019.210:709): avc: denied { load_policy } for pid=4007 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 41.770775][ T29] audit: type=1400 audit(1746308019.420:710): avc: denied { tracepoint } for pid=4024 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.797129][ T59] kworker/u8:4: attempt to access beyond end of device [ 41.797129][ T59] loop3: rw=1, sector=145, nr_sectors = 34 limit=128 [ 41.819015][ T4027] loop2: detected capacity change from 0 to 512 [ 41.827941][ T29] audit: type=1400 audit(1746308019.480:711): avc: denied { read } for pid=4024 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.847195][ T29] audit: type=1400 audit(1746308019.480:712): avc: denied { allowed } for pid=4030 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.870944][ T4027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.886329][ T4027] EXT4-fs error (device loop2): ext4_quota_enable:7122: comm syz.2.229: Bad quota inum: 29696, type: 1 [ 41.898989][ T4027] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 41.915345][ T4027] EXT4-fs (loop2): mount failed [ 41.950235][ T4040] loop3: detected capacity change from 0 to 512 [ 41.966470][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.985053][ T29] audit: type=1400 audit(1746308019.640:713): avc: denied { watch watch_reads } for pid=4038 comm="syz.4.233" path="/41/control" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.020756][ T4040] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.105796][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.150062][ T4052] ref_ctr increment failed for inode: 0x13f offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810787b700 [ 42.177883][ T4051] uprobe: syz.2.238:4051 failed to unregister, leaking uprobe [ 42.187707][ T4055] loop3: detected capacity change from 0 to 256 [ 42.259495][ T4059] loop3: detected capacity change from 0 to 128 [ 42.372911][ T4068] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 42.381613][ T36] IPVS: starting estimator thread 0... [ 42.472936][ T4075] IPVS: using max 2592 ests per chain, 129600 per kthread [ 42.532814][ T4086] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 42.542113][ T4086] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.042480][ T4114] ip6gre1: entered allmulticast mode [ 43.163783][ T4120] macsec0: entered promiscuous mode [ 43.531503][ T4137] loop1: detected capacity change from 0 to 512 [ 43.538483][ T4137] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.547569][ T4137] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 43.556483][ T4137] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 43.566014][ T4137] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 43.574369][ T4137] System zones: 0-2, 18-18, 34-35 [ 43.580129][ T4137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.607752][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.624618][ T4143] bridge0: entered allmulticast mode [ 43.641718][ T4143] loop2: detected capacity change from 0 to 512 [ 43.649770][ T4143] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.273: corrupted in-inode xattr: invalid ea_ino [ 43.663371][ T4143] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.273: couldn't read orphan inode 15 (err -117) [ 43.675727][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.692085][ T4147] loop1: detected capacity change from 0 to 512 [ 43.716333][ T4147] EXT4-fs (loop1): 1 orphan inode deleted [ 43.723227][ T4147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.732863][ T1842] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 43.749619][ T4147] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.779508][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.330067][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.505352][ T4222] pim6reg: entered allmulticast mode [ 45.513224][ T4222] pim6reg: left allmulticast mode [ 45.589125][ T4224] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 45.668130][ T4234] ip6gre1: entered allmulticast mode [ 45.812482][ T4243] wg2: entered promiscuous mode [ 45.817887][ T4243] wg2: entered allmulticast mode [ 45.902537][ T4251] pim6reg: entered allmulticast mode [ 45.928552][ T4251] pim6reg: left allmulticast mode [ 45.945005][ T4255] __nla_validate_parse: 1 callbacks suppressed [ 45.945017][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 46.049485][ T4261] loop2: detected capacity change from 0 to 8192 [ 46.173352][ T4271] $Hÿ: renamed from bond0 (while UP) [ 46.181367][ T4271] $Hÿ: entered promiscuous mode [ 46.231130][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 46.249533][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.278865][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.286091][ T4277] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 46.298271][ T4277] bond0: (slave vti0): Error -95 calling set_mac_address [ 46.360069][ T4282] bond0: (slave dummy0): Error -99 calling set_mac_address [ 46.376395][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 46.376454][ T29] audit: type=1326 audit(1746308024.030:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f624eb15927 code=0x7ffc0000 [ 46.413034][ T29] audit: type=1326 audit(1746308024.070:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f624eabab39 code=0x7ffc0000 [ 46.478317][ T4284] loop2: detected capacity change from 0 to 512 [ 46.479657][ T29] audit: type=1326 audit(1746308024.070:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f624eb15927 code=0x7ffc0000 [ 46.507899][ T29] audit: type=1326 audit(1746308024.070:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f624eabab39 code=0x7ffc0000 [ 46.531220][ T29] audit: type=1326 audit(1746308024.070:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f624eb1e969 code=0x7ffc0000 [ 46.554692][ T29] audit: type=1326 audit(1746308024.070:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f624eb15927 code=0x7ffc0000 [ 46.577949][ T29] audit: type=1326 audit(1746308024.070:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f624eabab39 code=0x7ffc0000 [ 46.601223][ T29] audit: type=1326 audit(1746308024.070:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f624eb1e969 code=0x7ffc0000 [ 46.624563][ T29] audit: type=1326 audit(1746308024.080:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f624eb15927 code=0x7ffc0000 [ 46.647945][ T29] audit: type=1326 audit(1746308024.080:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f624eabab39 code=0x7ffc0000 [ 46.680322][ T4284] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.328: corrupted in-inode xattr: invalid ea_ino [ 46.695176][ T4284] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.328: couldn't read orphan inode 15 (err -117) [ 46.715630][ T4286] No such timeout policy "syz0" [ 46.721457][ T4284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.815474][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.101685][ T4311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 47.139623][ T4313] loop4: detected capacity change from 0 to 1024 [ 47.148283][ T4313] EXT4-fs: Ignoring removed orlov option [ 47.175785][ T4313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.406123][ T4335] loop1: detected capacity change from 0 to 512 [ 47.435017][ T4335] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 47.450450][ T4335] EXT4-fs (loop1): mount failed [ 47.952347][ T4358] loop2: detected capacity change from 0 to 1024 [ 47.976245][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.981611][ T4358] EXT4-fs: Ignoring removed i_version option [ 48.008215][ T4358] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.059553][ T4358] EXT4-fs: Ignoring removed nobh option [ 48.065290][ T4358] EXT4-fs: Ignoring removed bh option [ 48.096522][ T4358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.111975][ T4358] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.352: Allocating blocks 385-513 which overlap fs metadata [ 48.138235][ T4371] ip6gretap0: entered promiscuous mode [ 48.203970][ T4358] EXT4-fs (loop2): pa ffff88810699d000: logic 16, phys. 129, len 24 [ 48.212059][ T4358] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 48.303431][ T4358] syz.2.352 (4358) used greatest stack depth: 9496 bytes left [ 48.340392][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.420926][ T4382] loop2: detected capacity change from 0 to 2048 [ 48.456350][ T4382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.493024][ T4387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.359'. [ 48.594697][ T4387] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 48.657663][ T4390] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 48.788779][ T4395] loop1: detected capacity change from 0 to 128 [ 48.796908][ T37] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.814406][ T4395] FAT-fs (loop1): Directory bread(block 162) failed [ 48.821247][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 48.833843][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.833843][ T37] [ 48.843088][ T4395] FAT-fs (loop1): Directory bread(block 163) failed [ 48.843687][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 48.850247][ T4395] FAT-fs (loop1): Directory bread(block 164) failed [ 48.856219][ T37] EXT4-fs (loop2): Free/Dirty block details [ 48.856243][ T37] EXT4-fs (loop2): free_blocks=2415919504 [ 48.856258][ T37] EXT4-fs (loop2): dirty_blocks=4672 [ 48.856273][ T37] EXT4-fs (loop2): Block reservation details [ 48.886010][ T37] EXT4-fs (loop2): i_reserved_data_blocks=292 [ 48.892360][ T4395] FAT-fs (loop1): Directory bread(block 165) failed [ 48.900671][ T4395] FAT-fs (loop1): Directory bread(block 166) failed [ 48.907414][ T4395] FAT-fs (loop1): Directory bread(block 167) failed [ 48.915047][ T4395] FAT-fs (loop1): Directory bread(block 168) failed [ 48.921761][ T4395] FAT-fs (loop1): Directory bread(block 169) failed [ 48.941842][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 48.966459][ T4395] FAT-fs (loop1): Directory bread(block 162) failed [ 48.973179][ T4395] FAT-fs (loop1): Directory bread(block 163) failed [ 48.980618][ T4395] syz.1.362: attempt to access beyond end of device [ 48.980618][ T4395] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 49.009907][ T4395] syz.1.362: attempt to access beyond end of device [ 49.009907][ T4395] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 49.088955][ T4400] loop2: detected capacity change from 0 to 512 [ 49.107300][ T4400] EXT4-fs: Ignoring removed nobh option [ 49.137178][ T4404] vhci_hcd: default hub control req: 4005 v0008 i0005 l0 [ 49.143387][ T4400] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.364: corrupted inode contents [ 49.157147][ T4400] EXT4-fs (loop2): Remounting filesystem read-only [ 49.163810][ T4400] EXT4-fs (loop2): 1 truncate cleaned up [ 49.170077][ T4400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.182886][ T4400] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.185766][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.203865][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.217559][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.239884][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.303454][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 49.326477][ T4420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.372'. [ 49.340703][ T4422] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.373'. [ 49.350825][ T4422] netlink: 'syz.1.373': attribute type 39 has an invalid length. [ 49.374744][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 49.385378][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 49.525497][ T358] tipc: Subscription rejected, illegal request [ 49.551231][ T4435] 9pnet_fd: Insufficient options for proto=fd [ 49.596948][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 49.643191][ T4442] vhci_hcd: invalid port number 94 [ 49.755421][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 49.764656][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.772159][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.779762][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.787303][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.518738][ T4477] netlink: 'syz.1.396': attribute type 2 has an invalid length. [ 50.526714][ T4477] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 50.534464][ T4477] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.396'. [ 50.569625][ T4479] loop1: detected capacity change from 0 to 256 [ 50.619933][ T4486] loop1: detected capacity change from 0 to 512 [ 50.654773][ T4486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.667958][ T4486] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.690347][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.980177][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.987782][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.995334][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.004038][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.011464][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.019563][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.027148][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.034682][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.042086][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.049526][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.056950][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.064426][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.071923][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.079585][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.087032][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.094527][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.102028][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.109537][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.116965][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.124421][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.132008][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.139510][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.146957][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.154509][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.161921][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.169362][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.175895][ T4505] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 51.176826][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.192634][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.201274][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.245247][ T4507] sd 0:0:1:0: device reset [ 51.272211][ T4509] loop4: detected capacity change from 0 to 128 [ 51.289876][ T4509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 51.298312][ T4509] System zones: 1-3, 19-19, 35-36 [ 51.304242][ T4509] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.334519][ T4509] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.390421][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 51.390500][ T29] audit: type=1326 audit(1746308029.040:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53c8fd5927 code=0x7ffc0000 [ 51.423507][ T4516] loop1: detected capacity change from 0 to 128 [ 51.428588][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.430272][ T29] audit: type=1326 audit(1746308029.040:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53c8f7ab39 code=0x7ffc0000 [ 51.462220][ T29] audit: type=1326 audit(1746308029.040:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f53c8fde969 code=0x7ffc0000 [ 51.485658][ T29] audit: type=1326 audit(1746308029.040:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53c8fd5927 code=0x7ffc0000 [ 51.508984][ T29] audit: type=1326 audit(1746308029.040:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53c8f7ab39 code=0x7ffc0000 [ 51.532416][ T29] audit: type=1326 audit(1746308029.040:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f53c8fde969 code=0x7ffc0000 [ 51.555881][ T29] audit: type=1326 audit(1746308029.040:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c8fde969 code=0x7ffc0000 [ 51.579303][ T29] audit: type=1326 audit(1746308029.040:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c8fde969 code=0x7ffc0000 [ 51.663617][ T29] audit: type=1326 audit(1746308029.200:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b32ae969 code=0x7ffc0000 [ 51.687134][ T29] audit: type=1326 audit(1746308029.200:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f56b32ae969 code=0x7ffc0000 [ 52.433575][ T4560] netlink: '+}[@': attribute type 4 has an invalid length. [ 52.484202][ T4564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 52.517162][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 52.528839][ T4566] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 52.545041][ T4566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.817118][ T4581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4581 comm=syz.1.436 [ 52.974650][ T4591] syzkaller0: entered promiscuous mode [ 52.980270][ T4591] syzkaller0: entered allmulticast mode [ 53.027837][ T4593] syz.4.440 uses obsolete (PF_INET,SOCK_PACKET) [ 53.061406][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 53.094307][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 53.180572][ T4597] loop4: detected capacity change from 0 to 512 [ 53.192774][ T4597] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.199669][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 53.216637][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 53.230371][ T4597] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 53.241343][ T4597] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.440: inode #15: comm syz.4.440: iget: illegal inode # [ 53.254960][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 53.255174][ T4597] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.440: couldn't read orphan inode 15 (err -117) [ 53.264049][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 53.277200][ T4597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.316121][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.342527][ T4608] @ÿ: renamed from bond_slave_0 (while UP) [ 53.353663][ T4615] netlink: 596 bytes leftover after parsing attributes in process `syz.3.446'. [ 53.474861][ T4626] mmap: syz.1.448 (4626) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.506217][ T4628] syzkaller0: entered promiscuous mode [ 53.511850][ T4628] syzkaller0: entered allmulticast mode [ 53.559072][ T4632] loop2: detected capacity change from 0 to 512 [ 53.565865][ T4632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.575524][ T4632] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.453: corrupted in-inode xattr: invalid ea_ino [ 53.593051][ T4632] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.453: couldn't read orphan inode 15 (err -117) [ 53.624158][ T4632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.627464][ T4635] loop4: detected capacity change from 0 to 512 [ 53.654597][ T4635] EXT4-fs (loop4): 1 orphan inode deleted [ 53.671831][ T4635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.681653][ T4632] EXT4-fs error (device loop2): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz.2.453: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 53.684661][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 53.707104][ T4635] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.742048][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.754090][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.777565][ T4641] loop4: detected capacity change from 0 to 128 [ 53.789525][ T4644] bridge0: port 1(geneve0) entered blocking state [ 53.796090][ T4644] bridge0: port 1(geneve0) entered disabled state [ 53.802759][ T4644] geneve0: entered allmulticast mode [ 53.808992][ T4644] geneve0: entered promiscuous mode [ 53.809243][ T4641] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.826770][ T4641] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.863299][ T4640] loop1: detected capacity change from 0 to 512 [ 53.870346][ T4640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.881823][ T4640] EXT4-fs (loop1): 1 truncate cleaned up [ 53.888053][ T4640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.901556][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.929985][ T4649] SELinux: Context system_u:object_r:dhcpd_ is not valid (left unmapped). [ 53.943643][ T4647] loop2: detected capacity change from 0 to 128 [ 53.952534][ T4647] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.960488][ T4647] FAT-fs (loop2): Filesystem has been set read-only [ 53.967284][ T4647] syz.2.458: attempt to access beyond end of device [ 53.967284][ T4647] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.981507][ T4647] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.989453][ T4647] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.998351][ T4647] syz.2.458: attempt to access beyond end of device [ 53.998351][ T4647] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.012318][ T4647] syz.2.458: attempt to access beyond end of device [ 54.012318][ T4647] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.013766][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.075705][ T4653] loop1: detected capacity change from 0 to 2048 [ 54.174750][ T4653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.244419][ T4663] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.460: bg 0: block 234: padding at end of block bitmap is not set [ 54.263311][ T4663] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 20 with error 117 [ 54.275762][ T4663] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.275762][ T4663] [ 54.278425][ T4665] syzkaller0: entered promiscuous mode [ 54.291304][ T4665] syzkaller0: entered allmulticast mode [ 54.299217][ T1628] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 20 with max blocks 1092 with error 28 [ 54.311811][ T1628] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.311811][ T1628] [ 54.321530][ T1628] EXT4-fs (loop1): Total free blocks count 0 [ 54.326957][ T4668] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.327525][ T1628] EXT4-fs (loop1): Free/Dirty block details [ 54.340493][ T1628] EXT4-fs (loop1): free_blocks=0 [ 54.345516][ T1628] EXT4-fs (loop1): dirty_blocks=1104 [ 54.346614][ T4668] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 54.350799][ T1628] EXT4-fs (loop1): Block reservation details [ 54.361520][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 54.461778][ T4674] loop1: detected capacity change from 0 to 2048 [ 54.523465][ T4674] loop1: p1 < > p4 [ 54.529539][ T4674] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.819558][ T4699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.164157][ T4702] Set syz1 is full, maxelem 65536 reached [ 55.244682][ T4718] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 55.930391][ T4760] netlink: 'syz.4.491': attribute type 13 has an invalid length. [ 56.057790][ T4760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.114186][ T4769] binfmt_misc: register: failed to install interpreter file ./file0 [ 56.244638][ T4781] 9pnet_fd: Insufficient options for proto=fd [ 56.426356][ T4795] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 56.439080][ T2970] IPVS: starting estimator thread 0... [ 56.444791][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 56.444805][ T29] audit: type=1400 audit(1746308034.100:2016): avc: denied { getopt } for pid=4790 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.554288][ T29] audit: type=1400 audit(1746308034.150:2017): avc: denied { block_suspend } for pid=4787 comm="syz.3.505" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.575817][ T29] audit: type=1400 audit(1746308034.170:2018): avc: denied { watch watch_reads } for pid=4798 comm="syz.2.508" path="/108" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.599482][ T29] audit: type=1400 audit(1746308034.220:2019): avc: denied { create } for pid=4802 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.619052][ T29] audit: type=1326 audit(1746308034.250:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.3.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53c8fde969 code=0x0 [ 56.643697][ T4796] IPVS: using max 2112 ests per chain, 105600 per kthread [ 56.678104][ T4804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 56.697963][ T29] audit: type=1400 audit(1746308034.340:2021): avc: denied { create } for pid=4803 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.718153][ T29] audit: type=1400 audit(1746308034.340:2022): avc: denied { write } for pid=4803 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.738275][ T29] audit: type=1400 audit(1746308034.340:2023): avc: denied { nlmsg_write } for pid=4803 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.759074][ T29] audit: type=1400 audit(1746308034.340:2024): avc: denied { execute } for pid=4807 comm="syz.2.511" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 56.868494][ T29] audit: type=1400 audit(1746308034.460:2025): avc: denied { create } for pid=4810 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.905012][ T4820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30245 sclass=netlink_route_socket pid=4820 comm=syz.4.517 [ 57.082163][ T4833] loop4: detected capacity change from 0 to 1024 [ 57.183191][ T4833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.196636][ T4833] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.216274][ T4833] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.233018][ T4833] EXT4-fs (loop4): Remounting filesystem read-only [ 57.239663][ T4743] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 57.274272][ T4833] syz.4.521 (4833) used greatest stack depth: 9000 bytes left [ 57.312083][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.450535][ T4850] netlink: 'syz.2.525': attribute type 4 has an invalid length. [ 57.766749][ T4854] __nla_validate_parse: 8 callbacks suppressed [ 57.766769][ T4854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'. [ 58.672383][ T4871] random: crng reseeded on system resumption [ 58.801600][ T4879] loop1: detected capacity change from 0 to 1024 [ 58.814352][ T4879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.826647][ T4879] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.869829][ T4879] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 58.885121][ T4879] EXT4-fs (loop1): Remounting filesystem read-only [ 58.891979][ T31] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 58.971642][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.007976][ T4890] loop1: detected capacity change from 0 to 512 [ 59.024366][ T4890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.037335][ T4890] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.065653][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.325322][ T4894] loop4: detected capacity change from 0 to 2048 [ 59.334186][ T4894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.388394][ T4901] loop1: detected capacity change from 0 to 1024 [ 59.396031][ T4901] EXT4-fs: Ignoring removed i_version option [ 59.402607][ T4901] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.409832][ T4902] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.538: bg 0: block 234: padding at end of block bitmap is not set [ 59.409882][ T4901] EXT4-fs: Ignoring removed nobh option [ 59.429929][ T4901] EXT4-fs: Ignoring removed bh option [ 59.436081][ T4902] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 20 with error 117 [ 59.444253][ T4901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.448617][ T4902] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.448617][ T4902] [ 59.471385][ T4743] ================================================================== [ 59.479518][ T4743] BUG: KCSAN: data-race in xas_find_marked / xas_init_marks [ 59.486824][ T4743] [ 59.489149][ T4743] read-write to 0xffff888117378238 of 8 bytes by task 4902 on cpu 1: [ 59.497216][ T4743] xas_init_marks+0x18a/0x320 [ 59.501917][ T4743] __filemap_remove_folio+0x19d/0x2a0 [ 59.504419][ T4901] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.539: Allocating blocks 385-513 which overlap fs metadata [ 59.507318][ T4743] __remove_mapping+0x338/0x460 [ 59.525584][ T4901] EXT4-fs (loop1): pa ffff88810699d150: logic 16, phys. 129, len 24 [ 59.525853][ T4743] remove_mapping+0x22/0x90 [ 59.533859][ T4901] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, [ 59.538310][ T4743] mapping_try_invalidate+0x26a/0x3f0 [ 59.538342][ T4743] invalidate_mapping_pages+0x27/0x40 [ 59.538370][ T4743] generic_fadvise+0x419/0x430 [ 59.538395][ T4743] __x64_sys_fadvise64+0xcb/0x110 [ 59.546807][ T4901] free 0, pa_free 8 [ 59.552138][ T4743] x64_sys_call+0x2ee2/0x2fb0 [ 59.558270][ T4901] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 59.562230][ T4743] do_syscall_64+0xd0/0x1a0 [ 59.567329][ T4901] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.567329][ T4901] [ 59.571042][ T4743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.571065][ T4743] [ 59.571071][ T4743] read to 0xffff888117378238 of 8 bytes by task 4743 on cpu 0: [ 59.571090][ T4743] xas_find_marked+0x218/0x620 [ 59.575776][ T4901] EXT4-fs (loop1): Total free blocks count 0 [ 59.587887][ T4743] find_get_entry+0x5d/0x380 [ 59.587920][ T4743] filemap_get_folios_tag+0x13b/0x210 [ 59.592404][ T4901] EXT4-fs (loop1): Free/Dirty block details [ 59.602014][ T4743] mpage_prepare_extent_to_map+0x330/0xb80 [ 59.607928][ T4901] EXT4-fs (loop1): free_blocks=128 [ 59.610318][ T4743] ext4_do_writepages+0xa25/0x2270 [ 59.617916][ T4901] EXT4-fs (loop1): dirty_blocks=0 [ 59.622587][ T4743] ext4_writepages+0x176/0x300 [ 59.628640][ T4901] EXT4-fs (loop1): Block reservation details [ 59.633212][ T4743] do_writepages+0x1d2/0x480 [ 59.638585][ T4901] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 59.644457][ T4743] __writeback_single_inode+0x80/0x7c0 [ 59.692347][ T4743] writeback_sb_inodes+0x480/0xa20 [ 59.697493][ T4743] wb_writeback+0x252/0x5c0 [ 59.702023][ T4743] wb_workfn+0x194/0x910 [ 59.706276][ T4743] process_scheduled_works+0x4cb/0x9d0 [ 59.711742][ T4743] worker_thread+0x582/0x770 [ 59.716349][ T4743] kthread+0x486/0x510 [ 59.720502][ T4743] ret_from_fork+0x4b/0x60 [ 59.724930][ T4743] ret_from_fork_asm+0x1a/0x30 [ 59.729694][ T4743] [ 59.732014][ T4743] value changed: 0xffffffffffffffe1 -> 0xfffffffffffffe01 [ 59.739205][ T4743] [ 59.741556][ T4743] Reported by Kernel Concurrency Sanitizer on: [ 59.747736][ T4743] CPU: 0 UID: 0 PID: 4743 Comm: kworker/u8:24 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 59.760411][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.770472][ T4743] Workqueue: writeback wb_workfn (flush-7:4) [ 59.776470][ T4743] ================================================================== [ 59.787626][ T4743] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 20 with max blocks 1708 with error 28 [ 59.800292][ T4743] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.800292][ T4743] [ 59.810029][ T4743] EXT4-fs (loop4): Total free blocks count 0 [ 59.816085][ T4743] EXT4-fs (loop4): Free/Dirty block details [ 59.821976][ T4743] EXT4-fs (loop4): free_blocks=0 [ 59.827021][ T4743] EXT4-fs (loop4): dirty_blocks=1728 [ 59.832320][ T4743] EXT4-fs (loop4): Block reservation details