last executing test programs: 15.869011738s ago: executing program 0 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x20000851) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008"], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) 15.839156501s ago: executing program 0 (id=115): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000008000000000000000000000000000000001010000000400000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) 15.776087996s ago: executing program 0 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 15.72815691s ago: executing program 0 (id=123): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 15.444049183s ago: executing program 0 (id=136): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) 15.163637076s ago: executing program 0 (id=149): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 15.152057087s ago: executing program 32 (id=149): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.061974532s ago: executing program 4 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) unshare(0x2040400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 1.975692159s ago: executing program 4 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.943717862s ago: executing program 4 (id=608): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffe, @mcast1}, 0x1c) 1.904851505s ago: executing program 5 (id=610): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.691174543s ago: executing program 4 (id=619): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0xf88, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1.657641735s ago: executing program 4 (id=622): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) 1.47662574s ago: executing program 3 (id=633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000000), 0x4) 1.440657593s ago: executing program 3 (id=634): socket(0x28, 0x6, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 1.422451115s ago: executing program 3 (id=635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.407588335s ago: executing program 3 (id=636): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.287572745s ago: executing program 3 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x1c) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.271247216s ago: executing program 3 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) 1.041267235s ago: executing program 5 (id=639): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000240)=""/117, 0x75, 0x20040, 0x0, 0x0) 994.464539ms ago: executing program 5 (id=641): perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 763.488468ms ago: executing program 4 (id=643): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed", 0x27) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 609.152871ms ago: executing program 2 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 551.956265ms ago: executing program 5 (id=647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 541.147476ms ago: executing program 1 (id=648): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 521.017088ms ago: executing program 2 (id=649): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 442.114474ms ago: executing program 5 (id=650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 397.644418ms ago: executing program 2 (id=651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x1, 0xa, 0x4, 0x68, 0x8001, 0x2, 0x2, 0x1ff, @dev={0xac, 0x14, 0x14, 0x36}, @remote}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) 379.18525ms ago: executing program 2 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 377.266719ms ago: executing program 1 (id=654): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) read(r0, &(0x7f0000000100)=""/19, 0x13) 254.480079ms ago: executing program 1 (id=655): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="cd5a7a06d4a4759cefdfde20d47eb20b4028e06c51079da55de651bc6757cae10d97cd5a09286ac4dd2f1acebd18eda0c088b13407ac9b77a538beadfaf6d8745d756c49d4dd64af5dde5a240e215e19706b405aa78b5b753c9305bd09dcfcd3644d1efe6f4c6d2501feb09e39e7ae0d5d24fd016fbbb5b38e318d4ae197805f351269554e4cd96304faf62f7dff4f7d25c7153e006d9b3d3bed7c964ee20be6d5a5b8f59a231115eb7c1c93e7f475cd03d87c227d48bd08e5808b60885080cf2efc202adb00190168f50ce2cfedc2dc", 0xffffffc3}], 0x1}}], 0x1, 0x24008094) 221.764222ms ago: executing program 2 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) 189.342995ms ago: executing program 1 (id=657): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 144.895629ms ago: executing program 2 (id=658): creat(&(0x7f00000002c0)='./file0\x00', 0x109) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 97.213162ms ago: executing program 1 (id=659): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x0) 35.696357ms ago: executing program 5 (id=660): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) 0s ago: executing program 1 (id=661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000080)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000dc0)=0xf0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 25.117984][ T29] audit: type=1400 audit(1755774226.791:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.118921][ T3291] cgroup: Unknown subsys name 'net' [ 25.147131][ T29] audit: type=1400 audit(1755774226.791:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.180765][ T29] audit: type=1400 audit(1755774226.821:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.327583][ T3291] cgroup: Unknown subsys name 'cpuset' [ 25.334908][ T3291] cgroup: Unknown subsys name 'rlimit' [ 25.463218][ T29] audit: type=1400 audit(1755774227.131:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.489433][ T29] audit: type=1400 audit(1755774227.131:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.524408][ T29] audit: type=1400 audit(1755774227.131:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.559097][ T29] audit: type=1400 audit(1755774227.131:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.567269][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.583354][ T29] audit: type=1400 audit(1755774227.161:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.624664][ T29] audit: type=1400 audit(1755774227.161:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.651667][ T29] audit: type=1400 audit(1755774227.271:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.694259][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.762031][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.873099][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 26.887866][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.895651][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.903748][ T3302] bridge_slave_0: entered allmulticast mode [ 26.910794][ T3302] bridge_slave_0: entered promiscuous mode [ 26.917857][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.925109][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.932409][ T3302] bridge_slave_1: entered allmulticast mode [ 26.939135][ T3302] bridge_slave_1: entered promiscuous mode [ 26.974504][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.983086][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.993219][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.003045][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.023268][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.064458][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.071865][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.079585][ T3306] bridge_slave_0: entered allmulticast mode [ 27.086350][ T3306] bridge_slave_0: entered promiscuous mode [ 27.108341][ T3302] team0: Port device team_slave_0 added [ 27.116864][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.124171][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.131955][ T3306] bridge_slave_1: entered allmulticast mode [ 27.138752][ T3306] bridge_slave_1: entered promiscuous mode [ 27.150705][ T3302] team0: Port device team_slave_1 added [ 27.208318][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.215614][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.242864][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.254622][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.262136][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.269503][ T3316] bridge_slave_0: entered allmulticast mode [ 27.275963][ T3316] bridge_slave_0: entered promiscuous mode [ 27.283705][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.293847][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.301927][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.309743][ T3316] bridge_slave_1: entered allmulticast mode [ 27.316583][ T3316] bridge_slave_1: entered promiscuous mode [ 27.323499][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.331141][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.339771][ T3304] bridge_slave_0: entered allmulticast mode [ 27.347256][ T3304] bridge_slave_0: entered promiscuous mode [ 27.354315][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.362547][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.370307][ T3308] bridge_slave_0: entered allmulticast mode [ 27.377185][ T3308] bridge_slave_0: entered promiscuous mode [ 27.384273][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.391587][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.420912][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.434349][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.449503][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.456941][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.464824][ T3304] bridge_slave_1: entered allmulticast mode [ 27.472116][ T3304] bridge_slave_1: entered promiscuous mode [ 27.478907][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.486843][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.494295][ T3308] bridge_slave_1: entered allmulticast mode [ 27.500811][ T3308] bridge_slave_1: entered promiscuous mode [ 27.534880][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.550103][ T3306] team0: Port device team_slave_0 added [ 27.559917][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.571270][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.586518][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.598742][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.611332][ T3306] team0: Port device team_slave_1 added [ 27.632786][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.658815][ T3302] hsr_slave_0: entered promiscuous mode [ 27.665040][ T3302] hsr_slave_1: entered promiscuous mode [ 27.686039][ T3316] team0: Port device team_slave_0 added [ 27.692917][ T3316] team0: Port device team_slave_1 added [ 27.704825][ T3308] team0: Port device team_slave_0 added [ 27.712161][ T3308] team0: Port device team_slave_1 added [ 27.718945][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.726168][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.755433][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.767413][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.774441][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.802076][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.818935][ T3304] team0: Port device team_slave_0 added [ 27.856572][ T3304] team0: Port device team_slave_1 added [ 27.870297][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.877631][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.910546][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.924741][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.933268][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.961528][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.973513][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.980980][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.010735][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.025172][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.032816][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.062308][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.102630][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.112142][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.144483][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.159659][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.167155][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.194329][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.217577][ T3306] hsr_slave_0: entered promiscuous mode [ 28.224103][ T3306] hsr_slave_1: entered promiscuous mode [ 28.230250][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 28.236230][ T3306] Cannot create hsr debugfs directory [ 28.286330][ T3308] hsr_slave_0: entered promiscuous mode [ 28.293055][ T3308] hsr_slave_1: entered promiscuous mode [ 28.299641][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.305597][ T3308] Cannot create hsr debugfs directory [ 28.319379][ T3316] hsr_slave_0: entered promiscuous mode [ 28.325763][ T3316] hsr_slave_1: entered promiscuous mode [ 28.332453][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.338592][ T3316] Cannot create hsr debugfs directory [ 28.346567][ T3304] hsr_slave_0: entered promiscuous mode [ 28.353174][ T3304] hsr_slave_1: entered promiscuous mode [ 28.360165][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 28.367095][ T3304] Cannot create hsr debugfs directory [ 28.514530][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.523423][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.542062][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.569959][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.605472][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.614869][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.624665][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.634971][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.671314][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.687817][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.699890][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.716363][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.742660][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.752138][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.766565][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.776278][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.799303][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.810962][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.842895][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.853801][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.867804][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.880994][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.888596][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.898367][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.905947][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.915593][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.929766][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.969161][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.979345][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.993532][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.008975][ T2209] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.017047][ T2209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.026793][ T2209] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.034193][ T2209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.064199][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.075841][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.096780][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.106858][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.114550][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.124702][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.134289][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.163579][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.182758][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.191595][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.199302][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.219239][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.235896][ T2209] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.243325][ T2209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.261856][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.279670][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.287692][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.313302][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.326347][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.333990][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.362564][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.373935][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.415023][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.451204][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.488344][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.538297][ T3302] veth0_vlan: entered promiscuous mode [ 29.559354][ T3302] veth1_vlan: entered promiscuous mode [ 29.594652][ T3306] veth0_vlan: entered promiscuous mode [ 29.604960][ T3308] veth0_vlan: entered promiscuous mode [ 29.621524][ T3308] veth1_vlan: entered promiscuous mode [ 29.631227][ T3302] veth0_macvtap: entered promiscuous mode [ 29.638589][ T3306] veth1_vlan: entered promiscuous mode [ 29.663372][ T3308] veth0_macvtap: entered promiscuous mode [ 29.674360][ T3302] veth1_macvtap: entered promiscuous mode [ 29.684735][ T3308] veth1_macvtap: entered promiscuous mode [ 29.703676][ T3304] veth0_vlan: entered promiscuous mode [ 29.713654][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.723655][ T3306] veth0_macvtap: entered promiscuous mode [ 29.731714][ T3306] veth1_macvtap: entered promiscuous mode [ 29.742353][ T3304] veth1_vlan: entered promiscuous mode [ 29.753310][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.766713][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.782517][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.793108][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.802444][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.821488][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.832370][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.846518][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.859549][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.873080][ T3304] veth0_macvtap: entered promiscuous mode [ 29.880575][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.892339][ T3304] veth1_macvtap: entered promiscuous mode [ 29.907629][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.922009][ T3316] veth0_vlan: entered promiscuous mode [ 29.930548][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.950256][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.965837][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.978546][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.989195][ T3316] veth1_vlan: entered promiscuous mode [ 30.001200][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.023555][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.037579][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.051997][ T2209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.088734][ T3475] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 30.089843][ T2209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.118171][ T3316] veth0_macvtap: entered promiscuous mode [ 30.143297][ T3316] veth1_macvtap: entered promiscuous mode [ 30.165561][ T2209] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.178684][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.194485][ T2209] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.205495][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.229045][ T2209] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.233500][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 30.233514][ T29] audit: type=1400 audit(1755774231.901:100): avc: denied { open } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.265313][ T29] audit: type=1400 audit(1755774231.901:101): avc: denied { kernel } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.304070][ T2209] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.325298][ T2209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.350622][ T2209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361190][ T29] audit: type=1400 audit(1755774231.961:102): avc: denied { tracepoint } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.393547][ T2209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.406289][ T2209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.428013][ T3503] IPv6: Can't replace route, no match found [ 30.517726][ T29] audit: type=1400 audit(1755774232.191:103): avc: denied { create } for pid=3511 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.542435][ T29] audit: type=1400 audit(1755774232.191:104): avc: denied { bind } for pid=3511 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.565874][ T29] audit: type=1400 audit(1755774232.191:105): avc: denied { name_bind } for pid=3511 comm="syz.1.13" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 30.590951][ T29] audit: type=1400 audit(1755774232.191:106): avc: denied { node_bind } for pid=3511 comm="syz.1.13" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 30.614592][ T29] audit: type=1400 audit(1755774232.191:107): avc: denied { setopt } for pid=3511 comm="syz.1.13" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.638525][ T29] audit: type=1400 audit(1755774232.191:108): avc: denied { listen } for pid=3511 comm="syz.1.13" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.679516][ T29] audit: type=1400 audit(1755774232.331:109): avc: denied { write } for pid=3511 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.762901][ T3528] loop1: detected capacity change from 0 to 1024 [ 30.818637][ T3528] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 30.836502][ T3528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.911854][ T3528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.16: bg 0: block 88: padding at end of block bitmap is not set [ 30.937137][ T3528] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.036540][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.141529][ T3518] loop0: detected capacity change from 0 to 32768 [ 31.187759][ T3518] loop0: p1 p2 p3 < p5 p6 > [ 31.215661][ T3518] loop0: p2 size 16775168 extends beyond EOD, truncated [ 31.250558][ T3518] loop0: p5 start 4294970168 is beyond EOD, truncated [ 31.337468][ T3582] syzkaller0: entered promiscuous mode [ 31.343698][ T3582] syzkaller0: entered allmulticast mode [ 31.355069][ T3589] openvswitch: netlink: Message has 6 unknown bytes. [ 31.377772][ T3594] loop0: detected capacity change from 0 to 128 [ 31.417103][ T3594] ======================================================= [ 31.417103][ T3594] WARNING: The mand mount option has been deprecated and [ 31.417103][ T3594] and is ignored by this kernel. Remove the mand [ 31.417103][ T3594] option from the mount to silence this warning. [ 31.417103][ T3594] ======================================================= [ 31.498960][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 31.511950][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 31.512081][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 31.537083][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 31.578927][ T3606] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 31.863123][ T3631] process 'syz.4.57' launched './file0' with NULL argv: empty string added [ 31.962605][ T3594] syz.0.41: attempt to access beyond end of device [ 31.962605][ T3594] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 31.977863][ T3594] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 31.988235][ T3594] syz.0.41: attempt to access beyond end of device [ 31.988235][ T3594] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 32.002929][ T3594] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 32.200479][ T3661] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 32.208715][ T3661] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.239688][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 32.249575][ T3665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 32.258939][ T3665] netlink: 'syz.1.74': attribute type 20 has an invalid length. [ 32.273853][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 32.273886][ T2209] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.283803][ T3665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 32.305531][ T3665] netlink: 'syz.1.74': attribute type 20 has an invalid length. [ 32.317218][ T2209] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.328287][ T3665] Zero length message leads to an empty skb [ 32.335144][ T2209] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.358108][ T2209] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.083777][ T3708] syz.3.94 (3708) used greatest stack depth: 10624 bytes left [ 33.207377][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 33.228857][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 33.243967][ T3713] syz.3.96 (3713) used greatest stack depth: 10000 bytes left [ 33.258801][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 33.281666][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 33.533631][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 33.709630][ T3761] syzkaller0: entered promiscuous mode [ 33.717332][ T3761] syzkaller0: entered allmulticast mode [ 33.728446][ T3769] loop0: detected capacity change from 0 to 512 [ 33.769071][ T3769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.800928][ T3769] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.858745][ T3785] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 33.858745][ T3785] program syz.2.128 not setting count and/or reply_len properly [ 33.927087][ T3769] loop0: detected capacity change from 512 to 64 [ 33.950476][ T3769] syz.0.123: attempt to access beyond end of device [ 33.950476][ T3769] loop0: rw=2051, sector=104, nr_sectors = 408 limit=64 [ 33.981389][ T3308] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Out of memory [ 33.993566][ T3308] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 34.019951][ T3804] loop4: detected capacity change from 0 to 764 [ 34.035279][ T3806] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 34.105240][ T3812] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 34.130346][ T3812] team0: Port device geneve1 added [ 34.141910][ T3814] mmap: syz.4.142 (3814) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.217852][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.231976][ T1382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.280004][ T1382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.340636][ T1382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.422123][ T1382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.461871][ T3847] loop2: detected capacity change from 0 to 512 [ 34.475581][ T3847] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.536024][ T3847] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.551567][ T3847] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.566136][ T1382] bridge_slave_1: left allmulticast mode [ 34.574387][ T1382] bridge_slave_1: left promiscuous mode [ 34.581039][ T1382] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.594148][ T1382] bridge_slave_0: left allmulticast mode [ 34.598608][ T3847] EXT4-fs (loop2): 1 truncate cleaned up [ 34.601459][ T1382] bridge_slave_0: left promiscuous mode [ 34.619370][ T1382] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.665535][ T3847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.851105][ T3878] loop3: detected capacity change from 0 to 512 [ 34.899606][ T1382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.912427][ T1382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.934214][ T1382] bond0 (unregistering): Released all slaves [ 35.007213][ T1382] hsr_slave_0: left promiscuous mode [ 35.028952][ T1382] hsr_slave_1: left promiscuous mode [ 35.038543][ T1382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.047922][ T1382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.058149][ T1382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.066348][ T1382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.143584][ T1382] veth1_macvtap: left promiscuous mode [ 35.153759][ T1382] veth0_macvtap: left promiscuous mode [ 35.199734][ T1382] veth1_vlan: left promiscuous mode [ 35.206150][ T1382] veth0_vlan: left promiscuous mode [ 35.417413][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 35.417428][ T29] audit: type=1400 audit(1755774237.091:379): avc: denied { connect } for pid=3912 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.500640][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.505787][ T29] audit: type=1400 audit(1755774237.141:380): avc: denied { write } for pid=3912 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.542344][ T29] audit: type=1326 audit(1755774237.171:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.576326][ T29] audit: type=1326 audit(1755774237.171:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.633228][ T29] audit: type=1326 audit(1755774237.211:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.670888][ T29] audit: type=1326 audit(1755774237.211:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.709940][ T29] audit: type=1326 audit(1755774237.211:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.755223][ T29] audit: type=1326 audit(1755774237.211:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.801441][ T29] audit: type=1326 audit(1755774237.211:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.833543][ T29] audit: type=1326 audit(1755774237.211:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 35.894520][ T1382] team0 (unregistering): Port device team_slave_1 removed [ 35.921794][ T3924] SELinux: ebitmap: truncated map [ 35.935798][ T3924] SELinux: failed to load policy [ 35.945950][ T1382] team0 (unregistering): Port device team_slave_0 removed [ 36.133468][ T3948] 9pnet_fd: Insufficient options for proto=fd [ 36.334142][ T3834] chnl_net:caif_netlink_parms(): no params data found [ 36.549452][ T3977] team0 (unregistering): Port device team_slave_0 removed [ 36.562801][ T3988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3988 comm=syz.3.194 [ 36.576516][ T3988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3988 comm=syz.3.194 [ 36.615606][ T3977] team0 (unregistering): Port device team_slave_1 removed [ 36.650677][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.658387][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.669828][ T3834] bridge_slave_0: entered allmulticast mode [ 36.678535][ T3834] bridge_slave_0: entered promiscuous mode [ 36.713320][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.720923][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.740394][ T3834] bridge_slave_1: entered allmulticast mode [ 36.749520][ T3834] bridge_slave_1: entered promiscuous mode [ 36.770113][ T3834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.797936][ T3834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.859396][ T3834] team0: Port device team_slave_0 added [ 36.866745][ T3834] team0: Port device team_slave_1 added [ 36.926177][ T3834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.933877][ T3834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.969768][ T3834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.055310][ T3834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.063223][ T3834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.094570][ T3834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.180845][ T3834] hsr_slave_0: entered promiscuous mode [ 37.189311][ T3834] hsr_slave_1: entered promiscuous mode [ 37.202990][ T3834] debugfs: 'hsr0' already exists in 'hsr' [ 37.209543][ T3834] Cannot create hsr debugfs directory [ 37.319147][ T4065] SELinux: failed to load policy [ 37.486638][ T3834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.503258][ T3834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.519749][ T3834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.532448][ T3834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.623616][ T3834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.655822][ T3834] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.672193][ T2209] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.682478][ T2209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.701062][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.710000][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.802234][ T4105] loop3: detected capacity change from 0 to 512 [ 37.813099][ T4105] journal_path: Non-blockdev passed as './bus' [ 37.823130][ T4105] EXT4-fs: error: could not find journal device path [ 37.885425][ T3834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.915335][ T4114] netlink: 'syz.2.233': attribute type 19 has an invalid length. [ 37.925614][ T4114] __nla_validate_parse: 2 callbacks suppressed [ 37.925629][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 37.962535][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.975237][ T4114] netlink: 'syz.2.233': attribute type 19 has an invalid length. [ 37.988073][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 38.002484][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.009284][ T4121] raw_sendmsg: syz.3.234 forgot to set AF_INET. Fix it! [ 38.018381][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.084276][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.114375][ T4127] syz.2.236 uses obsolete (PF_INET,SOCK_PACKET) [ 38.231353][ T3834] veth0_vlan: entered promiscuous mode [ 38.239593][ T3834] veth1_vlan: entered promiscuous mode [ 38.274937][ T3834] veth0_macvtap: entered promiscuous mode [ 38.283942][ T3834] veth1_macvtap: entered promiscuous mode [ 38.301433][ T3834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.320100][ T3834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.337430][ T2209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.352936][ T2209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.370045][ T2209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.387010][ T2209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.440400][ T4155] hub 6-0:1.0: USB hub found [ 38.448773][ T4155] hub 6-0:1.0: 8 ports detected [ 38.476386][ T4160] netlink: 'syz.5.245': attribute type 2 has an invalid length. [ 38.489182][ T4160] netlink: 'syz.5.245': attribute type 1 has an invalid length. [ 38.498702][ T4160] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.245'. [ 38.723724][ T4190] loop5: detected capacity change from 0 to 512 [ 38.749703][ T4190] EXT4-fs (loop5): orphan cleanup on readonly fs [ 38.763528][ T4190] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 38.788277][ T4190] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 38.809508][ T4190] EXT4-fs (loop5): 1 truncate cleaned up [ 38.817576][ T4190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.835969][ T4190] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 38.851090][ T4190] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 0 [ 38.875546][ T4190] +}[@ (4190) used greatest stack depth: 9280 bytes left [ 38.887912][ T3834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.947383][ T4202] netlink: 96 bytes leftover after parsing attributes in process `syz.5.261'. [ 38.998821][ T4207] loop5: detected capacity change from 0 to 1024 [ 39.011620][ T4207] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.024887][ T4207] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.040148][ T4207] JBD2: no valid journal superblock found [ 39.046823][ T4207] EXT4-fs (loop5): Could not load journal inode [ 39.061918][ T4207] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 39.121121][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 39.136849][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 39.179094][ T4213] netlink: 96 bytes leftover after parsing attributes in process `syz.1.267'. [ 39.282346][ T4225] loop4: detected capacity change from 0 to 2048 [ 39.318983][ T4230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.341469][ T4233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.276'. [ 39.383544][ T4225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.391236][ T4230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.461897][ T2209] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 39.494118][ T2209] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.509625][ T2209] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.509625][ T2209] [ 39.520284][ T2209] EXT4-fs (loop4): Total free blocks count 0 [ 39.520472][ T4221] loop1: detected capacity change from 0 to 32768 [ 39.527057][ T2209] EXT4-fs (loop4): Free/Dirty block details [ 39.540836][ T2209] EXT4-fs (loop4): free_blocks=2415919504 [ 39.548139][ T2209] EXT4-fs (loop4): dirty_blocks=16 [ 39.553797][ T2209] EXT4-fs (loop4): Block reservation details [ 39.560341][ T2209] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 39.572758][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.585505][ T4221] loop1: p1 p3 < > [ 39.739760][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.752755][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.774269][ T4265] netlink: 'syz.3.288': attribute type 3 has an invalid length. [ 39.816560][ T4269] loop3: detected capacity change from 0 to 512 [ 39.849985][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.868642][ T4269] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.927833][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.007553][ T4285] syz_tun: entered allmulticast mode [ 40.028375][ T4284] syz_tun: left allmulticast mode [ 40.077156][ T4292] loop2: detected capacity change from 0 to 512 [ 40.108786][ T4292] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 40.143916][ T4292] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.218878][ T4310] sctp: [Deprecated]: syz.5.306 (pid 4310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.218878][ T4310] Use struct sctp_sack_info instead [ 40.247881][ T4292] FAT-fs (loop2): FAT read failed (blocknr 128) [ 40.321353][ T4318] SELinux: security policydb version 17 (MLS) not backwards compatible [ 40.332342][ T4318] SELinux: failed to load policy [ 40.410216][ T4322] netlink: 96 bytes leftover after parsing attributes in process `syz.3.315'. [ 40.529968][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 40.529988][ T29] audit: type=1326 audit(1755774498.202:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.596058][ T29] audit: type=1326 audit(1755774498.202:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.625311][ T29] audit: type=1326 audit(1755774498.202:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.655374][ T29] audit: type=1326 audit(1755774498.202:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.683339][ T29] audit: type=1326 audit(1755774498.202:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.712854][ T29] audit: type=1326 audit(1755774498.202:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.741658][ T29] audit: type=1326 audit(1755774498.242:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.771340][ T29] audit: type=1326 audit(1755774498.252:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.800893][ T29] audit: type=1326 audit(1755774498.252:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 40.846494][ T29] audit: type=1326 audit(1755774498.252:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 41.018230][ T4352] rdma_op ffff888100296980 conn xmit_rdma 0000000000000000 [ 41.218343][ T4367] bond1: entered promiscuous mode [ 41.226778][ T4367] bond1: entered allmulticast mode [ 41.244184][ T4367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.257918][ T4367] bond1 (unregistering): Released all slaves [ 41.447848][ T4395] syz.4.349 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.903483][ T4446] capability: warning: `syz.1.373' uses deprecated v2 capabilities in a way that may be insecure [ 41.957235][ T4452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'. [ 41.976153][ T4452] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 41.984924][ T4452] netlink: 'syz.2.376': attribute type 2 has an invalid length. [ 41.987579][ T4454] unsupported nla_type 65024 [ 42.102341][ T4468] loop5: detected capacity change from 0 to 1024 [ 42.151077][ T4468] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.164899][ T4468] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.193833][ T4468] JBD2: no valid journal superblock found [ 42.200217][ T4468] EXT4-fs (loop5): Could not load journal inode [ 42.246623][ T4480] ALSA: seq fatal error: cannot create timer (-19) [ 42.263231][ T4468] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 43.022927][ T4591] loop3: detected capacity change from 0 to 2048 [ 43.145674][ T3294] loop3: p1 < > p4 [ 43.185219][ T3294] loop3: p4 size 8388608 extends beyond EOD, truncated [ 43.193684][ T4634] netlink: 'syz.5.424': attribute type 13 has an invalid length. [ 43.202557][ T4634] netlink: 'syz.5.424': attribute type 17 has an invalid length. [ 43.219885][ T4591] loop3: p1 < > p4 [ 43.236828][ T4591] loop3: p4 size 8388608 extends beyond EOD, truncated [ 43.270589][ T2991] loop3: p1 < > p4 [ 43.275952][ T2991] loop3: p4 size 8388608 extends beyond EOD, truncated [ 43.307998][ T4646] __nla_validate_parse: 3 callbacks suppressed [ 43.308012][ T4646] netlink: 6 bytes leftover after parsing attributes in process `syz.4.427'. [ 43.423424][ T4659] veth1_to_bridge: entered promiscuous mode [ 43.430061][ T4659] veth1_to_bridge: left promiscuous mode [ 43.455919][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 43.483848][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 43.501363][ T4657] netlink: 'syz.3.430': attribute type 3 has an invalid length. [ 43.544762][ T4662] ref_ctr_offset mismatch. inode: 0x1ac offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 43.684866][ T4680] batadv_slave_1: entered promiscuous mode [ 43.696989][ T4679] netlink: 24 bytes leftover after parsing attributes in process `syz.5.441'. [ 43.708201][ T4678] batadv_slave_1: left promiscuous mode [ 43.768763][ T4689] pimreg: entered allmulticast mode [ 43.820173][ T4689] pimreg: left allmulticast mode [ 43.843867][ T4697] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 43.854471][ T4697] SELinux: failed to load policy [ 44.075979][ T56] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 44.525205][ T4729] Set syz1 is full, maxelem 65536 reached [ 44.846436][ T4768] loop5: detected capacity change from 0 to 1024 [ 44.862046][ T4761] netlink: 'syz.2.478': attribute type 4 has an invalid length. [ 44.872631][ T4761] netlink: 17 bytes leftover after parsing attributes in process `syz.2.478'. [ 44.874109][ T4768] EXT4-fs: Ignoring removed orlov option [ 44.923185][ T4775] macsec1: entered allmulticast mode [ 44.930387][ T4775] veth1_macvtap: entered allmulticast mode [ 44.944211][ T4775] veth1_macvtap: left allmulticast mode [ 44.963777][ T4768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.078585][ T3834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.148217][ T4808] loop4: detected capacity change from 0 to 512 [ 45.158126][ T4808] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.242316][ T4822] loop1: detected capacity change from 0 to 512 [ 45.274811][ T4822] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.504: invalid block [ 45.313239][ T4822] EXT4-fs (loop1): Remounting filesystem read-only [ 45.321977][ T4822] EXT4-fs (loop1): 2 truncates cleaned up [ 45.329442][ T4833] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.346126][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.374923][ T4822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.436079][ T4845] netlink: 51563 bytes leftover after parsing attributes in process `syz.3.513'. [ 45.523782][ T4854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4854 comm=syz.4.515 [ 45.551713][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 45.551735][ T29] audit: type=1326 audit(1755774503.222:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b931ebe9 code=0x7ffc0000 [ 45.607515][ T29] audit: type=1326 audit(1755774503.222:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b931ebe9 code=0x7ffc0000 [ 45.662642][ T29] audit: type=1326 audit(1755774503.232:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fd8b931ebe9 code=0x7ffc0000 [ 45.707211][ T29] audit: type=1326 audit(1755774503.232:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b931ebe9 code=0x7ffc0000 [ 45.762682][ T29] audit: type=1326 audit(1755774503.232:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b931ebe9 code=0x7ffc0000 [ 45.829283][ T4869] ip6gre1: entered allmulticast mode [ 46.047517][ T4881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.529'. [ 46.090049][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.533'. [ 46.131931][ T4889] netlink: '+}[@': attribute type 10 has an invalid length. [ 46.146466][ T29] audit: type=1326 audit(1755774503.802:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 46.188053][ T29] audit: type=1326 audit(1755774503.802:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 46.219815][ T29] audit: type=1326 audit(1755774503.802:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 46.250772][ T29] audit: type=1326 audit(1755774503.802:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 46.283651][ T29] audit: type=1326 audit(1755774503.802:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773bc4ebe9 code=0x7ffc0000 [ 46.320808][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.329736][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.373617][ T4895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 46.387384][ T4895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 46.508524][ T4917] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 46.613243][ T4933] netlink: 136 bytes leftover after parsing attributes in process `syz.4.554'. [ 46.623784][ T4933] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 46.662541][ T4932] loop2: detected capacity change from 0 to 512 [ 46.685487][ T4932] EXT4-fs: Ignoring removed i_version option [ 46.702780][ T4932] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.711911][ T4932] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.555: bg 0: block 131: padding at end of block bitmap is not set [ 46.728912][ T4932] EXT4-fs (loop2): Remounting filesystem read-only [ 46.736438][ T4932] EXT4-fs (loop2): 1 truncate cleaned up [ 46.743271][ T4932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.780972][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.842547][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 47.153744][ T4990] syzkaller0: entered promiscuous mode [ 47.162209][ T4990] syzkaller0: entered allmulticast mode [ 47.186602][ T5011] loop2: detected capacity change from 0 to 128 [ 47.195481][ T5011] EXT4-fs: Ignoring removed nobh option [ 47.213287][ T5011] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.220395][ T5009] vlan3: entered allmulticast mode [ 47.236432][ T5011] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.283590][ T5018] netlink: 'syz.4.594': attribute type 3 has an invalid length. [ 47.370913][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.414694][ T5040] loop1: detected capacity change from 0 to 512 [ 47.424075][ T5040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.445497][ T5040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.466950][ T5040] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.614211][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.795925][ T5081] loop1: detected capacity change from 0 to 764 [ 47.826467][ T5083] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 47.826467][ T5083] program syz.3.625 not setting count and/or reply_len properly [ 48.454315][ T5164] loop5: detected capacity change from 0 to 512 [ 48.464694][ T5164] EXT4-fs: Ignoring removed nobh option [ 48.478439][ T5164] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.641: corrupted inode contents [ 48.492274][ T5164] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.641: mark_inode_dirty error [ 48.506352][ T5164] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.641: corrupted inode contents [ 48.528717][ T5164] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.641: mark_inode_dirty error [ 48.545814][ T5164] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.641: Failed to acquire dquot type 0 [ 48.561589][ T5164] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.641: corrupted inode contents [ 48.579268][ T5164] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.641: mark_inode_dirty error [ 48.595610][ T5164] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.641: corrupted inode contents [ 48.614163][ T5164] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.641: mark_inode_dirty error [ 48.628218][ T5164] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.641: corrupted inode contents [ 48.644556][ T5164] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 48.656405][ T5164] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.641: corrupted inode contents [ 48.671818][ T5164] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.641: mark_inode_dirty error [ 48.698729][ T5192] loop4: detected capacity change from 0 to 512 [ 48.708081][ T5164] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 48.742042][ T5192] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.751747][ T5164] EXT4-fs (loop5): 1 truncate cleaned up [ 48.752035][ T5192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.773881][ T5164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.789121][ T5164] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.807910][ T5200] pim6reg: entered allmulticast mode [ 48.811945][ T5192] EXT4-fs (loop4): 1 truncate cleaned up [ 48.818475][ T5200] pim6reg: left allmulticast mode [ 48.830753][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.873444][ T3834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.229488][ T5242] __nla_validate_parse: 1 callbacks suppressed [ 49.229503][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 49.435144][ T5214] ================================================================== [ 49.449105][ T5214] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 49.459042][ T5214] [ 49.461631][ T5214] read-write to 0xffff888106fa2fe0 of 8 bytes by interrupt on cpu 0: [ 49.471607][ T5214] __xa_clear_mark+0xf5/0x1e0 [ 49.477101][ T5214] __folio_end_writeback+0x177/0x470 [ 49.482827][ T5214] folio_end_writeback+0x71/0x3d0 [ 49.487950][ T5214] ext4_finish_bio+0x459/0x8c0 [ 49.493141][ T5214] ext4_end_bio+0x298/0x3b0 [ 49.498071][ T5214] bio_endio+0x377/0x410 [ 49.502846][ T5214] blk_update_request+0x336/0x730 [ 49.509360][ T5214] blk_mq_end_request+0x26/0x50 [ 49.514651][ T5214] lo_complete_rq+0x98/0x140 [ 49.520763][ T5214] blk_done_softirq+0x74/0xb0 [ 49.526311][ T5214] handle_softirqs+0xba/0x290 [ 49.531603][ T5214] run_ksoftirqd+0x1c/0x30 [ 49.537560][ T5214] smpboot_thread_fn+0x328/0x530 [ 49.543221][ T5214] kthread+0x486/0x510 [ 49.547635][ T5214] ret_from_fork+0xda/0x150 [ 49.553404][ T5214] ret_from_fork_asm+0x1a/0x30 [ 49.559650][ T5214] [ 49.562447][ T5214] read to 0xffff888106fa2fe0 of 8 bytes by task 5214 on cpu 1: [ 49.571650][ T5214] xas_find_marked+0x218/0x620 [ 49.577601][ T5214] find_get_entry+0x5d/0x380 [ 49.582855][ T5214] filemap_get_folios_tag+0x13b/0x210 [ 49.588938][ T5214] file_write_and_wait_range+0x1ea/0x2c0 [ 49.595364][ T5214] generic_buffers_fsync_noflush+0x45/0x120 [ 49.602218][ T5214] ext4_sync_file+0x1ab/0x690 [ 49.607339][ T5214] vfs_fsync_range+0x10d/0x130 [ 49.612888][ T5214] ext4_buffered_write_iter+0x34f/0x3c0 [ 49.618990][ T5214] ext4_file_write_iter+0xdbf/0xf00 [ 49.624449][ T5214] iter_file_splice_write+0x663/0xa60 [ 49.630424][ T5214] direct_splice_actor+0x153/0x2a0 [ 49.636335][ T5214] splice_direct_to_actor+0x30f/0x680 [ 49.642561][ T5214] do_splice_direct+0xda/0x150 [ 49.648091][ T5214] do_sendfile+0x380/0x650 [ 49.654073][ T5214] __x64_sys_sendfile64+0x105/0x150 [ 49.660890][ T5214] x64_sys_call+0x2bb0/0x2ff0 [ 49.667633][ T5214] do_syscall_64+0xd2/0x200 [ 49.673469][ T5214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.680160][ T5214] [ 49.682661][ T5214] value changed: 0x00000000000000c0 -> 0x0000000000000000 [ 49.690302][ T5214] [ 49.693237][ T5214] Reported by Kernel Concurrency Sanitizer on: [ 49.701081][ T5214] CPU: 1 UID: 0 PID: 5214 Comm: syz.4.643 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.712729][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.725323][ T5214] ================================================================== [ 50.049640][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.