last executing test programs: 14.07806146s ago: executing program 0 (id=182): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000001f00)='\t', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40400c1) socket$packet(0x11, 0x3, 0x300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, r1, 0xb7a58000) 13.492973913s ago: executing program 0 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000020000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 13.422429723s ago: executing program 0 (id=190): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 13.399571813s ago: executing program 0 (id=192): open(&(0x7f0000000080)='./bus\x00', 0x9e740a2418a12c4, 0x30) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) rt_sigpending(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {@dax_inode}, {@sysvgroups}, {@norecovery}, {@grpjquota}, {@orlov}, {@nogrpid}, {@init_itable}, {@acl}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x110080, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009efc999cb8e4f0cdce9c9a4fdad84c2e3960c1300048a048c368365ef94e332b02d40bed954c83f0a26e0ee1db78b31a4167b44e556d0a2f087280c307b00ce1f180023d16f055d895a2e0b10451824c36da45d2870bd20fdeb3269a503e6455df2e12db00000000000000000000000000000000d55e"], 0x0, 0x234, &(0x7f00000009c0)="$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") getpgrp(0xffffffffffffffff) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 13.162315375s ago: executing program 0 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 12.898190657s ago: executing program 0 (id=199): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000100)={'b', ' *:* ', 'm\x00'}, 0x8) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x41}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='\b\x00\x00\x00 \x00', @ANYBLOB, @ANYRES64=0x0], 0x20) read$rfkill(r3, &(0x7f0000000180), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) pwrite64(r3, &(0x7f0000000080), 0x0, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x0, 0x10000000}, 0xb) 12.898028507s ago: executing program 32 (id=199): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000100)={'b', ' *:* ', 'm\x00'}, 0x8) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x41}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='\b\x00\x00\x00 \x00', @ANYBLOB, @ANYRES64=0x0], 0x20) read$rfkill(r3, &(0x7f0000000180), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) pwrite64(r3, &(0x7f0000000080), 0x0, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x0, 0x10000000}, 0xb) 4.363410475s ago: executing program 3 (id=322): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)}], 0x1) unshare(0x68060200) socket(0x6, 0x1, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x4e1f, 0x0, 'ovf\x00'}, 0x2c) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0) 4.101584876s ago: executing program 3 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000201100007006000000002000020d3"]) mbind(&(0x7f0000634000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400101, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 3.118235483s ago: executing program 3 (id=336): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mlock(&(0x7f00003e8000/0x1000)=nil, 0x1000) mremap(&(0x7f000084a000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00000a9000/0x1000)=nil) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) open(0x0, 0x0, 0x0) munmap(&(0x7f00000e2000/0x4000)=nil, 0x4000) mremap(&(0x7f00009c3000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000d19000/0x4000)=nil) mremap(&(0x7f0000480000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000027b000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00002, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) 1.921615439s ago: executing program 3 (id=347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r2, &(0x7f0000000200), 0x53) semop(r2, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.603088101s ago: executing program 4 (id=355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202053250000000000202020731af9ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000000) accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 1.559779681s ago: executing program 4 (id=356): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000300)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) lseek(r0, 0x400, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) mq_unlink(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000900)=""/4096, 0x1000) 1.495090851s ago: executing program 3 (id=359): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x7, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000002c0)=""/59, 0x3b}], 0x2}}], 0x1, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 1.416672722s ago: executing program 4 (id=360): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 1.379877472s ago: executing program 4 (id=362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x4000042) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x304}, "1bb59684423031d5", "b518ec45e428570213debdfea23df4fe", "bafe5ad9", "ab31d35bed3ad4c4"}, 0x28) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 1.248622433s ago: executing program 1 (id=365): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_clone(0xa089400, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 1.196496423s ago: executing program 1 (id=367): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket(0x2a, 0x2, 0xffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000008000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 868.727775ms ago: executing program 5 (id=375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) sigaltstack(&(0x7f0000000600)={0x0, 0x80000002}, 0x0) 850.824255ms ago: executing program 5 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 820.808305ms ago: executing program 5 (id=378): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) sendmsg$inet(r3, 0x0, 0x0) syz_io_uring_setup(0x4c39, &(0x7f00000001c0)={0x0, 0xb84d, 0x400, 0x3, 0x25b, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) 804.537396ms ago: executing program 4 (id=380): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) utimes(0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 743.848136ms ago: executing program 4 (id=382): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000380)='./file0\x00', 0x0) 705.666246ms ago: executing program 5 (id=383): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x22000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 642.862567ms ago: executing program 3 (id=385): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 591.239627ms ago: executing program 5 (id=386): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 581.950347ms ago: executing program 2 (id=387): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x2, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x29}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 518.524567ms ago: executing program 2 (id=388): syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000780)='./file0\x00', 0x1, &(0x7f0000000000)={[{@mb_optimize_scan}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x743, &(0x7f0000000f40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001080}, 0x0) 476.468518ms ago: executing program 5 (id=389): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 377.182548ms ago: executing program 2 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x6}, 0x18) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, '\x00', "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) close(r0) 336.223568ms ago: executing program 1 (id=391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa27e342ee94715ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) io_uring_setup(0x7f, 0x0) sendto$inet6(r2, &(0x7f0000000040)="0b11", 0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 303.033388ms ago: executing program 2 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000200)={'gretap0\x00', @ifru_hwaddr}}) r1 = epoll_create1(0x0) getpgrp(0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003200)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$netlink(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000280)={0x10, 0x1a, 0x4, 0x70bd2c, 0x25dfdbff}, 0x10}, {0x0}, {0x0}, {&(0x7f0000000040)={0x10, 0x39, 0x400, 0x70bd25, 0x25dfdbfd}, 0x10}, {&(0x7f0000001c00)={0x10, 0x12, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x5, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}], 0x60, 0x42044}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x98002005}) 203.922209ms ago: executing program 2 (id=393): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r0}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0x2) 193.244159ms ago: executing program 1 (id=394): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 70.08347ms ago: executing program 1 (id=395): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 21.86657ms ago: executing program 2 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000007000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4822, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60be09671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d1d978def609e3cf79b38157136ff2edb3c6d44b93123d7f47bcadcdd6a256d7ac6487f2ff6cd7cab99f43d4dbcec170d0eacdc0bf0fb111c2e04847b9a6290001bcccc365377d6d2b6f2a9e9631b2a9462d1ade4c090000004ee42be89a95bd2d1f820e35d0e9a520922bb9d330385896e392240608000000c357c2de0674171756777f69b3d17f9d4a7636f04d902b338f177b8b783ddadbd86d7e4290f82e66fb8ad88745c5ea71695074b5fab0234fadd2e4ebfe06b281921713426057e025efd088a5f74fdeae25f80a365be9403125d1800f323002c1d5d99ab9c8483a3bef16487d051e165240af588cf5ceb4e96209965bdf621e1cea7f8a314024936de2bfb082c7e05187c1fe06b3a4fe5bf3380c3bf8c8f7835d4767c6fd999e2e94397157ff8bf43228463d645660ddcb93d79736a96214b722b7367d5a3c9ab4f6591afd1dae942ae01f96f16263bc9c86ac6d86b894d6e69828c3f1dba1ae979f7257424bbc9071e6d279bbe5568c9598811ec2d6112cb4a6730c48992ccea9e15c3b5f26a218d135a4f7f12dacb38d6c9d9711af33405f886dccfb3a84f7fb"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0xfffffff2, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1}}], 0x2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=397): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 21.104796][ T29] audit: type=1400 audit(1731858646.407:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 26.886527][ T29] audit: type=1400 audit(1731858652.177:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.887740][ T3304] cgroup: Unknown subsys name 'net' [ 26.909560][ T29] audit: type=1400 audit(1731858652.177:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.936933][ T29] audit: type=1400 audit(1731858652.207:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.109737][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.115986][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.223145][ T29] audit: type=1400 audit(1731858652.517:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.247792][ T29] audit: type=1400 audit(1731858652.517:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.266821][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.268266][ T29] audit: type=1400 audit(1731858652.517:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.297191][ T29] audit: type=1400 audit(1731858652.517:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.317694][ T29] audit: type=1400 audit(1731858652.527:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.342678][ T29] audit: type=1400 audit(1731858652.527:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.350169][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.365972][ T29] audit: type=1400 audit(1731858652.577:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.486596][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.523460][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.539730][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.572669][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.579813][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.586928][ T3317] bridge_slave_0: entered allmulticast mode [ 28.593401][ T3317] bridge_slave_0: entered promiscuous mode [ 28.603958][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.611278][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.618611][ T3317] bridge_slave_1: entered allmulticast mode [ 28.624877][ T3317] bridge_slave_1: entered promiscuous mode [ 28.642644][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.673648][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.701038][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.740826][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.747978][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.755122][ T3314] bridge_slave_0: entered allmulticast mode [ 28.761507][ T3314] bridge_slave_0: entered promiscuous mode [ 28.772278][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.779399][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.786521][ T3315] bridge_slave_0: entered allmulticast mode [ 28.792890][ T3315] bridge_slave_0: entered promiscuous mode [ 28.804141][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.811729][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.819090][ T3314] bridge_slave_1: entered allmulticast mode [ 28.825571][ T3314] bridge_slave_1: entered promiscuous mode [ 28.836202][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.847693][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.854859][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.862211][ T3315] bridge_slave_1: entered allmulticast mode [ 28.868665][ T3315] bridge_slave_1: entered promiscuous mode [ 28.880195][ T3317] team0: Port device team_slave_0 added [ 28.902487][ T3317] team0: Port device team_slave_1 added [ 28.914666][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.924744][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.934957][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.961073][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.981836][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.988934][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.996007][ T3319] bridge_slave_0: entered allmulticast mode [ 29.003322][ T3319] bridge_slave_0: entered promiscuous mode [ 29.009851][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.016814][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.042822][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.059067][ T3315] team0: Port device team_slave_0 added [ 29.079183][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.086338][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.093681][ T3319] bridge_slave_1: entered allmulticast mode [ 29.100117][ T3319] bridge_slave_1: entered promiscuous mode [ 29.111375][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.118349][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.144292][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.160457][ T3315] team0: Port device team_slave_1 added [ 29.166674][ T3314] team0: Port device team_slave_0 added [ 29.189769][ T3314] team0: Port device team_slave_1 added [ 29.204707][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.211831][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.219021][ T3321] bridge_slave_0: entered allmulticast mode [ 29.225444][ T3321] bridge_slave_0: entered promiscuous mode [ 29.232836][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.244064][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.257746][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.264744][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.290811][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.301777][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.308886][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.316028][ T3321] bridge_slave_1: entered allmulticast mode [ 29.322490][ T3321] bridge_slave_1: entered promiscuous mode [ 29.342403][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.349403][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.375423][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.386522][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.393499][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.419605][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.446385][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.453381][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.479371][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.497750][ T3317] hsr_slave_0: entered promiscuous mode [ 29.503790][ T3317] hsr_slave_1: entered promiscuous mode [ 29.510449][ T3319] team0: Port device team_slave_0 added [ 29.525479][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.540145][ T3319] team0: Port device team_slave_1 added [ 29.552051][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.572462][ T3315] hsr_slave_0: entered promiscuous mode [ 29.578426][ T3315] hsr_slave_1: entered promiscuous mode [ 29.584467][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.592075][ T3315] Cannot create hsr debugfs directory [ 29.618067][ T3321] team0: Port device team_slave_0 added [ 29.633766][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.641292][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.667369][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.678801][ T3321] team0: Port device team_slave_1 added [ 29.684740][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.691817][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.717791][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.735184][ T3314] hsr_slave_0: entered promiscuous mode [ 29.741251][ T3314] hsr_slave_1: entered promiscuous mode [ 29.747108][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.754680][ T3314] Cannot create hsr debugfs directory [ 29.789311][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.796295][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.822267][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.835672][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.842685][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.868700][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.881920][ T3319] hsr_slave_0: entered promiscuous mode [ 29.887932][ T3319] hsr_slave_1: entered promiscuous mode [ 29.894490][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.902483][ T3319] Cannot create hsr debugfs directory [ 29.946281][ T3321] hsr_slave_0: entered promiscuous mode [ 29.952251][ T3321] hsr_slave_1: entered promiscuous mode [ 29.958045][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.965698][ T3321] Cannot create hsr debugfs directory [ 30.114269][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.125468][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.134077][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.146761][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.166590][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.175953][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.186383][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.196794][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.222211][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.234814][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.243870][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.252703][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.299615][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.325459][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.334199][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.343083][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.354069][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.361255][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.370206][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.378737][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.387441][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.399442][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.431850][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.441141][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.448222][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.458402][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.472288][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.479414][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.501368][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.508565][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.518130][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.525199][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.564162][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.583989][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.600409][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.610890][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.633034][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.640204][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.662078][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.671479][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.678549][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.708583][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.719517][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.740949][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.754771][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.761864][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.772574][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.779743][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.791484][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.800806][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.813244][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.820416][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.836769][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.843869][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.867726][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.880057][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.915140][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.021820][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.051620][ T3317] veth0_vlan: entered promiscuous mode [ 31.073409][ T3314] veth0_vlan: entered promiscuous mode [ 31.081985][ T3317] veth1_vlan: entered promiscuous mode [ 31.091238][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.102344][ T3314] veth1_vlan: entered promiscuous mode [ 31.145737][ T3314] veth0_macvtap: entered promiscuous mode [ 31.159036][ T3317] veth0_macvtap: entered promiscuous mode [ 31.165810][ T3314] veth1_macvtap: entered promiscuous mode [ 31.181695][ T3317] veth1_macvtap: entered promiscuous mode [ 31.213322][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.239421][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.254878][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.263612][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.272516][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.281246][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.296561][ T3319] veth0_vlan: entered promiscuous mode [ 31.311409][ T3315] veth0_vlan: entered promiscuous mode [ 31.322034][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.332599][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.343209][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.355909][ T3321] veth0_vlan: entered promiscuous mode [ 31.364972][ T3319] veth1_vlan: entered promiscuous mode [ 31.372336][ T3315] veth1_vlan: entered promiscuous mode [ 31.379870][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.389778][ T3315] veth0_macvtap: entered promiscuous mode [ 31.402112][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.412697][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.423320][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.432138][ T3321] veth1_vlan: entered promiscuous mode [ 31.447308][ T3315] veth1_macvtap: entered promiscuous mode [ 31.459923][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.468699][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.477498][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.486289][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.511338][ T3319] veth0_macvtap: entered promiscuous mode [ 31.519533][ T3321] veth0_macvtap: entered promiscuous mode [ 31.528159][ T3319] veth1_macvtap: entered promiscuous mode [ 31.535068][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.545539][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.555366][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.565792][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.576483][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.586440][ T3321] veth1_macvtap: entered promiscuous mode [ 31.610421][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.621010][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.630883][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.641364][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.653542][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.664985][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.675542][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.685422][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.695938][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.705796][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.716361][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.717704][ T3459] loop0: detected capacity change from 0 to 512 [ 31.727460][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.741972][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.752532][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.762389][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.772929][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.773969][ T3459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.782742][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.801819][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.812813][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.829023][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.837820][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.838917][ T3459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.846558][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.859315][ T3459] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.867600][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.891980][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.900769][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.909675][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.918409][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.930545][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.941015][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.950842][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.961285][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.971123][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.981681][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.991589][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.002272][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.012875][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.036809][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 32.036821][ T29] audit: type=1400 audit(1731858657.327:159): avc: denied { read } for pid=3464 comm="syz.1.2" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 32.073497][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.076729][ T29] audit: type=1400 audit(1731858657.327:160): avc: denied { open } for pid=3464 comm="syz.1.2" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 32.083943][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.083956][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.107527][ T29] audit: type=1326 audit(1731858657.327:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.117350][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.127768][ T29] audit: type=1326 audit(1731858657.327:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.150802][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.160602][ T29] audit: type=1326 audit(1731858657.337:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.160631][ T29] audit: type=1326 audit(1731858657.337:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.160655][ T29] audit: type=1326 audit(1731858657.337:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.183668][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.183684][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.194091][ T29] audit: type=1326 audit(1731858657.337:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.217097][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.218055][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.240901][ T29] audit: type=1326 audit(1731858657.337:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.347875][ T29] audit: type=1326 audit(1731858657.577:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3464 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25f32e719 code=0x7ffc0000 [ 32.385451][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.394232][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.403162][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.412157][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.555425][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.595815][ T3477] syzkaller0: entered promiscuous mode [ 32.601548][ T3477] syzkaller0: entered allmulticast mode [ 32.619599][ T3482] loop0: detected capacity change from 0 to 512 [ 32.646962][ T3482] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.9: casefold flag without casefold feature [ 32.662093][ T3482] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.9: couldn't read orphan inode 15 (err -117) [ 32.684196][ T3482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.754230][ T3488] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11'. [ 32.764417][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.764709][ T3488] netlink: 408 bytes leftover after parsing attributes in process `syz.2.11'. [ 32.889389][ T3505] syzkaller0: entered promiscuous mode [ 32.894902][ T3505] syzkaller0: entered allmulticast mode [ 33.819906][ C0] hrtimer: interrupt took 47305 ns [ 34.007696][ T3556] loop0: detected capacity change from 0 to 164 [ 34.031636][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 34.046968][ T3558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.066563][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 34.167421][ T3562] loop0: detected capacity change from 0 to 512 [ 34.205185][ T3562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.218585][ T3562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.291315][ T3562] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.305688][ T3562] EXT4-fs (loop0): 1 truncate cleaned up [ 34.314234][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.401754][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.473545][ T3568] 9pnet_fd: Insufficient options for proto=fd [ 34.539809][ T3570] tipc: Started in network mode [ 34.544791][ T3570] tipc: Node identity 48c4, cluster identity 4711 [ 34.551321][ T3570] tipc: Node number set to 18628 [ 34.614516][ T3572] Zero length message leads to an empty skb [ 34.814491][ T3586] loop1: detected capacity change from 0 to 128 [ 34.826266][ T3586] ======================================================= [ 34.826266][ T3586] WARNING: The mand mount option has been deprecated and [ 34.826266][ T3586] and is ignored by this kernel. Remove the mand [ 34.826266][ T3586] option from the mount to silence this warning. [ 34.826266][ T3586] ======================================================= [ 34.874809][ T3590] loop4: detected capacity change from 0 to 512 [ 34.915135][ T3586] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.948813][ T3590] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 34.975424][ T3586] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.049665][ T3590] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #15: comm syz.4.50: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 35.071508][ T3590] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.50: couldn't read orphan inode 15 (err -117) [ 35.090704][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.118730][ T3590] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.160528][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.288055][ T3610] loop0: detected capacity change from 0 to 1024 [ 35.314884][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.356331][ T3616] process 'syz.3.58' launched '/dev/fd/6' with NULL argv: empty string added [ 35.369063][ T3610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.385761][ T3617] loop1: detected capacity change from 0 to 1024 [ 35.425910][ T3621] netlink: 'syz.3.59': attribute type 29 has an invalid length. [ 35.451051][ T3617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.487697][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.491101][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 35.554736][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.578700][ T3620] syz.2.60 (3620) used greatest stack depth: 10640 bytes left [ 35.616457][ T3636] loop2: detected capacity change from 0 to 512 [ 35.689824][ T3648] geneve0: entered allmulticast mode [ 35.710274][ T3643] can0: slcan on ttyS3. [ 35.754764][ T3639] loop1: detected capacity change from 0 to 8192 [ 35.761957][ T3642] can0 (unregistered): slcan off ttyS3. [ 35.787541][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 35.811864][ T3639] loop1: p1[EZD] p2 p4 [ 35.816212][ T3639] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 35.944691][ T3639] loop1: p2 start 65535 is beyond EOD, truncated [ 35.951124][ T3639] loop1: p4 size 65536 extends beyond EOD, truncated [ 36.008423][ T3646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.084362][ T3646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.326143][ T3665] tipc: Started in network mode [ 36.331280][ T3665] tipc: Node identity ac1414aa, cluster identity 4711 [ 36.348749][ T3665] tipc: New replicast peer: 100.1.1.1 [ 36.354248][ T3665] tipc: Enabled bearer , priority 10 [ 36.406974][ T3668] loop4: detected capacity change from 0 to 512 [ 36.422959][ T3668] EXT4-fs: quotafile must be on filesystem root [ 36.466160][ T3668] loop4: detected capacity change from 0 to 512 [ 36.478437][ T3668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.500771][ T3668] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 36.516369][ T3668] EXT4-fs (loop4): 1 truncate cleaned up [ 36.523203][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.537468][ T3668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.820568][ T3693] : renamed from vlan1 (while UP) [ 36.838248][ T3693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.894281][ T3693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.944575][ T3693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.994371][ T3693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.044834][ T3693] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.059968][ T3693] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.066610][ T3700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 37.072361][ T3693] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.077039][ T3700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 37.088663][ T3693] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.094090][ T3700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 37.112059][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 37.112076][ T29] audit: type=1400 audit(1731858662.397:412): avc: denied { setopt } for pid=3697 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.137836][ T29] audit: type=1400 audit(1731858662.407:413): avc: denied { map } for pid=3697 comm="syz.0.84" path="socket:[4976]" dev="sockfs" ino=4976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.153621][ T3700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 37.160772][ T29] audit: type=1400 audit(1731858662.407:414): avc: denied { read write } for pid=3697 comm="syz.0.84" path="socket:[4976]" dev="sockfs" ino=4976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.207475][ T3704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'. [ 37.268934][ T3711] netlink: 'syz.1.90': attribute type 4 has an invalid length. [ 37.284462][ T3711] netlink: 'syz.1.90': attribute type 4 has an invalid length. [ 37.356876][ T3711] syz.1.90 (3711) used greatest stack depth: 10448 bytes left [ 37.414991][ T3722] loop1: detected capacity change from 0 to 512 [ 37.422810][ T3722] EXT4-fs: Ignoring removed oldalloc option [ 37.433661][ T3722] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.95: bad orphan inode 4294967295 [ 37.447217][ T3722] EXT4-fs (loop1): Remounting filesystem read-only [ 37.455126][ T3722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.467327][ T3722] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 37.479289][ T3722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.496269][ T8] tipc: Node number set to 2886997162 [ 37.521299][ T3729] loop3: detected capacity change from 0 to 256 [ 37.531001][ T29] audit: type=1326 audit(1731858662.827:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6e0e719 code=0x7ffc0000 [ 37.563923][ T29] audit: type=1326 audit(1731858662.857:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6e0e719 code=0x7ffc0000 [ 37.574350][ T3722] loop1: detected capacity change from 0 to 512 [ 37.587331][ T29] audit: type=1326 audit(1731858662.857:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd5e6e0e719 code=0x7ffc0000 [ 37.616558][ T29] audit: type=1326 audit(1731858662.857:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6e0e719 code=0x7ffc0000 [ 37.624957][ T3729] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 37.639838][ T29] audit: type=1326 audit(1731858662.857:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6e0e719 code=0x7ffc0000 [ 37.648297][ T3729] FAT-fs (loop3): Filesystem has been set read-only [ 37.671703][ T29] audit: type=1326 audit(1731858662.857:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd5e6e0e719 code=0x7ffc0000 [ 37.701606][ T29] audit: type=1326 audit(1731858662.857:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e6e0e719 code=0x7ffc0000 [ 37.742144][ T3722] EXT4-fs (loop1): too many log groups per flexible block group [ 37.749948][ T3722] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 37.756789][ T3722] EXT4-fs (loop1): mount failed [ 37.775531][ T3736] netlink: 256 bytes leftover after parsing attributes in process `syz.3.100'. [ 37.784999][ T3736] unsupported nlmsg_type 40 [ 37.862777][ T3741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.888643][ T3746] loop0: detected capacity change from 0 to 512 [ 37.903047][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.905951][ T3741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.916168][ T3746] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.943153][ T3746] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.105: Failed to acquire dquot type 0 [ 37.962422][ T3741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.974928][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 38.022622][ T3751] syzkaller0: entered promiscuous mode [ 38.028245][ T3751] syzkaller0: entered allmulticast mode [ 38.040358][ T3741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.095931][ T3741] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.108598][ T3741] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.119723][ T3741] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.131096][ T3741] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.170992][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 38.223181][ T3758] loop0: detected capacity change from 0 to 1024 [ 38.239656][ T3758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.267801][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.289707][ T3762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.110'. [ 38.315641][ T3764] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 38.330514][ T3764] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 38.373557][ T3768] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET) [ 38.394772][ T3766] syzkaller0: entered promiscuous mode [ 38.400661][ T3766] syzkaller0: entered allmulticast mode [ 38.493390][ T3772] loop7: detected capacity change from 0 to 7 [ 38.501745][ T3774] syz.2.116[3774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.501904][ T3774] syz.2.116[3774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.505860][ T3772] Buffer I/O error on dev loop7, logical block 0, async page read [ 38.514980][ T3774] syz.2.116[3774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.533068][ T3772] Buffer I/O error on dev loop7, logical block 0, async page read [ 38.549392][ T3774] loop2: detected capacity change from 0 to 256 [ 38.552398][ T3772] loop7: unable to read partition table [ 38.563565][ T3774] vfat: Unknown parameter 'rdir' [ 38.564946][ T3772] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 38.564946][ T3772] ) failed (rc=-5) [ 38.590622][ T3774] Invalid ELF header magic: != ELF [ 38.657860][ T3778] syzkaller0: entered promiscuous mode [ 38.663438][ T3778] syzkaller0: entered allmulticast mode [ 38.761218][ T3789] mmap: syz.0.123 (3789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.829781][ T3797] loop0: detected capacity change from 0 to 512 [ 38.837639][ T3797] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.126: attempt to clear invalid blocks 1 len 1 [ 38.853246][ T3797] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.126: bg 0: block 343: padding at end of block bitmap is not set [ 38.870262][ T3797] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 38.879210][ T3797] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.126: invalid indirect mapped block 1819239214 (level 0) [ 38.894518][ T3797] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.126: invalid indirect mapped block 1819239214 (level 1) [ 38.910973][ T3797] EXT4-fs (loop0): 1 truncate cleaned up [ 38.917044][ T3797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.954380][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.183637][ T3815] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.194777][ T3815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.266384][ T3818] loop4: detected capacity change from 0 to 1024 [ 39.273406][ T3818] EXT4-fs: Ignoring removed oldalloc option [ 39.282197][ T3818] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 39.313877][ T3818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.648847][ T3824] Falling back ldisc for ttyS3. [ 40.027430][ T3834] loop0: detected capacity change from 0 to 1024 [ 40.404366][ T3834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 40.413056][ T3834] System zones: 0-1, 3-12 [ 40.418347][ T3834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.684859][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.882920][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.926961][ T3865] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 41.109891][ T3882] loop0: detected capacity change from 0 to 512 [ 41.122305][ T3875] loop1: detected capacity change from 0 to 8192 [ 41.158553][ T3882] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.145: bad orphan inode 17 [ 41.178708][ T3882] ext4_test_bit(bit=16, block=4) = 1 [ 41.184036][ T3882] is_bad_inode(inode)=0 [ 41.188204][ T3882] NEXT_ORPHAN(inode)=0 [ 41.192366][ T3882] max_ino=32 [ 41.195579][ T3882] i_nlink=1 [ 41.199558][ T3882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.258564][ T3886] loop2: detected capacity change from 0 to 512 [ 41.271882][ T3886] EXT4-fs: test_dummy_encryption option not supported [ 41.299891][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.401297][ T3903] loop1: detected capacity change from 0 to 8192 [ 41.792487][ T3877] syz.4.140 (3877) used greatest stack depth: 9864 bytes left [ 41.925815][ T3915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 42.138804][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 42.138820][ T29] audit: type=1400 audit(1731858667.437:551): avc: denied { create } for pid=3932 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.164884][ T29] audit: type=1400 audit(1731858667.437:552): avc: denied { connect } for pid=3932 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.202510][ T29] audit: type=1400 audit(1731858667.487:553): avc: denied { create } for pid=3934 comm="syz.0.163" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.223211][ T29] audit: type=1400 audit(1731858667.487:554): avc: denied { write } for pid=3934 comm="syz.0.163" name="file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.245483][ T29] audit: type=1400 audit(1731858667.487:555): avc: denied { open } for pid=3934 comm="syz.0.163" path="/58/file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.267959][ T29] audit: type=1400 audit(1731858667.487:556): avc: denied { ioctl } for pid=3934 comm="syz.0.163" path="/58/file0" dev="tmpfs" ino=324 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.331821][ T29] audit: type=1400 audit(1731858667.627:557): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.362895][ T29] audit: type=1400 audit(1731858667.657:558): avc: denied { ioctl } for pid=3937 comm="syz.0.164" path="socket:[5619]" dev="sockfs" ino=5619 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.405251][ T29] audit: type=1400 audit(1731858667.697:559): avc: denied { read write } for pid=3939 comm="syz.0.165" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.429143][ T29] audit: type=1400 audit(1731858667.697:560): avc: denied { open } for pid=3939 comm="syz.0.165" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.463130][ T3940] bridge: RTM_NEWNEIGH with invalid ether address [ 42.670081][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.680513][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.758080][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.765144][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.776039][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.783196][ T3949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.838637][ T3948] lo speed is unknown, defaulting to 1000 [ 42.848274][ T3948] lo speed is unknown, defaulting to 1000 [ 42.849898][ T3954] loop4: detected capacity change from 0 to 1024 [ 42.856172][ T3948] lo speed is unknown, defaulting to 1000 [ 42.868520][ T3948] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 42.880905][ T3948] lo speed is unknown, defaulting to 1000 [ 42.887201][ T3948] lo speed is unknown, defaulting to 1000 [ 42.887561][ T3954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.893468][ T3948] lo speed is unknown, defaulting to 1000 [ 42.911962][ T3948] lo speed is unknown, defaulting to 1000 [ 42.918100][ T3948] lo speed is unknown, defaulting to 1000 [ 42.978170][ T3961] EXT4-fs (loop4): shut down requested (0) [ 43.015828][ T3963] loop3: detected capacity change from 0 to 256 [ 43.047810][ T3963] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.058608][ T3965] loop0: detected capacity change from 0 to 512 [ 43.075614][ T3965] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.084873][ T3965] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 43.118795][ T3965] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 43.119195][ T3966] lo speed is unknown, defaulting to 1000 [ 43.133604][ T3967] loop1: detected capacity change from 0 to 2048 [ 43.141295][ T3965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 43.162993][ T3965] System zones: 0-2, 18-18, 34-34 [ 43.188742][ T3965] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.240183][ T3965] EXT4-fs (loop0): 1 truncate cleaned up [ 43.249986][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.280416][ T3967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.293623][ T3965] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 43.348988][ T36] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.377328][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.413026][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 43.425550][ T36] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.425550][ T36] [ 43.435269][ T36] EXT4-fs (loop4): Total free blocks count 0 [ 43.441271][ T36] EXT4-fs (loop4): Free/Dirty block details [ 43.447166][ T36] EXT4-fs (loop4): free_blocks=68451041280 [ 43.453065][ T36] EXT4-fs (loop4): dirty_blocks=16384 [ 43.458428][ T36] EXT4-fs (loop4): Block reservation details [ 43.464476][ T36] EXT4-fs (loop4): i_reserved_data_blocks=1024 [ 43.480288][ T3978] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.172: bg 0: block 234: padding at end of block bitmap is not set [ 43.555934][ T3978] EXT4-fs (loop1): Remounting filesystem read-only [ 43.740042][ T3986] syzkaller0: entered promiscuous mode [ 43.745557][ T3986] syzkaller0: entered allmulticast mode [ 43.757288][ T3991] loop4: detected capacity change from 0 to 512 [ 43.764064][ T3991] EXT4-fs: Ignoring removed bh option [ 43.773883][ T3991] EXT4-fs: inline encryption not supported [ 43.784362][ T3991] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.180: corrupted in-inode xattr: invalid ea_ino [ 43.804346][ T3991] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.180: couldn't read orphan inode 15 (err -117) [ 43.847753][ T3978] syz.1.172 (3978) used greatest stack depth: 9176 bytes left [ 43.883900][ T3991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.884784][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.949724][ T3991] lo speed is unknown, defaulting to 1000 [ 44.021484][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.078192][ T4006] loop4: detected capacity change from 0 to 128 [ 44.095881][ T4004] loop1: detected capacity change from 0 to 512 [ 44.103303][ T4004] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.157088][ T4006] syz.4.186: attempt to access beyond end of device [ 44.157088][ T4006] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 44.174544][ T4004] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 44.183860][ T4004] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 44.191972][ T4004] System zones: 0-2, 18-18, 34-34 [ 44.197217][ T4006] syz.4.186: attempt to access beyond end of device [ 44.197217][ T4006] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 44.207277][ T4004] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.185: bad orphan inode 15 [ 44.212475][ T4006] syz.4.186: attempt to access beyond end of device [ 44.212475][ T4006] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 44.222029][ T4004] ext4_test_bit(bit=14, block=18) = 1 [ 44.239363][ T4004] is_bad_inode(inode)=0 [ 44.242849][ T4006] syz.4.186: attempt to access beyond end of device [ 44.242849][ T4006] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 44.243623][ T4004] NEXT_ORPHAN(inode)=2264924160 [ 44.243632][ T4004] max_ino=32 [ 44.263095][ T4006] syz.4.186: attempt to access beyond end of device [ 44.263095][ T4006] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 44.264699][ T4004] i_nlink=0 [ 44.266498][ T4004] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.278703][ T4006] syz.4.186: attempt to access beyond end of device [ 44.278703][ T4006] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 44.282369][ T4004] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #15: comm syz.1.185: corrupted inode contents [ 44.328210][ T4004] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #15: comm syz.1.185: mark_inode_dirty error [ 44.363425][ T4004] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #15: comm syz.1.185: corrupted inode contents [ 44.364511][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 44.380889][ T4004] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #15: comm syz.1.185: mark_inode_dirty error [ 44.382812][ T1034] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 44.394671][ T4004] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #15: comm syz.1.185: mark inode dirty (error -117) [ 44.406544][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.423468][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.425373][ T4018] loop0: detected capacity change from 0 to 1024 [ 44.430910][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.438897][ T4018] EXT4-fs: dax option not supported [ 44.444700][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.452393][ T4004] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 44.457199][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.457220][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.457238][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.457256][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.477501][ T4018] loop0: detected capacity change from 0 to 128 [ 44.483445][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.493686][ T4004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.498253][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.511017][ T4018] loop8: detected capacity change from 0 to 128 [ 44.512095][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.537983][ T4004] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.185: bg 0: block 80: padding at end of block bitmap is not set [ 44.545260][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.545284][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.545304][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.545325][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.589292][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.596902][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.604501][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.612117][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.619569][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.626978][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.635529][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.638362][ T1034] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.664337][ T4021] syz.1.194 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.813716][ T3418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.863590][ T3418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.919193][ T3418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.954209][ T4046] pim6reg1: entered promiscuous mode [ 44.959565][ T4046] pim6reg1: entered allmulticast mode [ 44.962649][ T4049] loop1: detected capacity change from 0 to 2048 [ 44.999296][ T3418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.019442][ T4049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.022626][ T4035] lo speed is unknown, defaulting to 1000 [ 45.124975][ T3317] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.153454][ T3418] bridge_slave_1: left allmulticast mode [ 45.159249][ T3418] bridge_slave_1: left promiscuous mode [ 45.165007][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.184321][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.230114][ T3418] bridge_slave_0: left allmulticast mode [ 45.235835][ T3418] bridge_slave_0: left promiscuous mode [ 45.241559][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.274558][ T4083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.305371][ T4083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.421421][ T4060] loop2: detected capacity change from 0 to 32768 [ 45.455748][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.473755][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.485778][ T3418] bond0 (unregistering): Released all slaves [ 45.528214][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 45.552136][ T3418] tipc: Left network mode [ 45.589682][ T4127] loop2: detected capacity change from 0 to 512 [ 45.623473][ T3418] hsr_slave_0: left promiscuous mode [ 45.635434][ T3418] hsr_slave_1: left promiscuous mode [ 45.639302][ T4135] loop4: detected capacity change from 0 to 512 [ 45.651798][ T4135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.653216][ T4127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.674361][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.681951][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.689561][ T4127] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.689995][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.707412][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.717309][ T4135] EXT4-fs (loop4): 1 truncate cleaned up [ 45.728116][ T3418] veth1_vlan: left promiscuous mode [ 45.735745][ T3418] veth0_vlan: left promiscuous mode [ 45.740973][ T4135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.013737][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 46.025181][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.049308][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.173014][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 46.188592][ T4219] loop2: detected capacity change from 0 to 512 [ 46.272776][ T4219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.363199][ T4219] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.387714][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.394884][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.421629][ T4035] bridge_slave_0: entered allmulticast mode [ 46.434959][ T4035] bridge_slave_0: entered promiscuous mode [ 46.483606][ T1034] lo speed is unknown, defaulting to 1000 [ 46.520787][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.527921][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.551435][ T4035] bridge_slave_1: entered allmulticast mode [ 46.558975][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.563203][ T4035] bridge_slave_1: entered promiscuous mode [ 46.604760][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.626611][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.637096][ T4247] loop3: detected capacity change from 0 to 1024 [ 46.672622][ T4035] team0: Port device team_slave_0 added [ 46.682427][ T4035] team0: Port device team_slave_1 added [ 46.731171][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.738229][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.764328][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.803033][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.810090][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.836032][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.874817][ T4263] loop3: detected capacity change from 0 to 2048 [ 46.891361][ T4263] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.915989][ T4263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.944009][ T4035] hsr_slave_0: entered promiscuous mode [ 46.956183][ T4035] hsr_slave_1: entered promiscuous mode [ 46.967415][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.975033][ T4035] Cannot create hsr debugfs directory [ 47.153302][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 47.153314][ T29] audit: type=1400 audit(1731858672.447:764): avc: denied { create } for pid=4035 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.192555][ T4035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.203296][ T4035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.213554][ T29] audit: type=1400 audit(1731858672.487:765): avc: denied { write } for pid=4035 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.234188][ T29] audit: type=1400 audit(1731858672.487:766): avc: denied { read } for pid=4035 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.260670][ T4035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.270192][ T4035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.314188][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.338000][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.370265][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.377393][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.391389][ T4295] loop4: detected capacity change from 0 to 512 [ 47.410451][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.417596][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.425758][ T4295] /dev/loop4: Can't open blockdev [ 47.456775][ T4035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.467240][ T4035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.547977][ T4263] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.217: bg 0: block 234: padding at end of block bitmap is not set [ 47.574749][ T4263] EXT4-fs (loop3): Remounting filesystem read-only [ 47.621263][ T4303] pim6reg1: entered promiscuous mode [ 47.626646][ T4303] pim6reg1: entered allmulticast mode [ 47.645631][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.802943][ T4325] syz.1.225[4325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.803044][ T4325] syz.1.225[4325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.838741][ T4325] syz.1.225[4325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.846549][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.914528][ T4035] veth0_vlan: entered promiscuous mode [ 47.936116][ T4035] veth1_vlan: entered promiscuous mode [ 47.953921][ T4340] Driver unsupported XDP return value 0 on prog (id 200) dev N/A, expect packet loss! [ 47.972378][ T29] audit: type=1400 audit(1731858673.256:767): avc: denied { execute } for pid=4339 comm="syz.2.228" path="/40/hugetlb.1GB.usage_in_bytes" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.033661][ T4035] veth0_macvtap: entered promiscuous mode [ 48.047331][ T4035] veth1_macvtap: entered promiscuous mode [ 48.063006][ T29] audit: type=1400 audit(1731858673.336:768): avc: denied { setopt } for pid=4343 comm="syz.3.224" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.110724][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.121293][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.131206][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.141644][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.151515][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.160057][ T29] audit: type=1400 audit(1731858673.366:769): avc: denied { name_bind } for pid=4353 comm="syz.1.229" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.161950][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.183432][ T29] audit: type=1400 audit(1731858673.366:770): avc: denied { node_bind } for pid=4353 comm="syz.1.229" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.193221][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.225498][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.259864][ T4358] loop2: detected capacity change from 0 to 128 [ 48.271481][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.331069][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.341772][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.351641][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.362097][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.371985][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.382458][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.392298][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.402792][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.416769][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.427204][ T4035] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.436067][ T4035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.444793][ T4035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.453557][ T4035] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.454922][ T29] audit: type=1400 audit(1731858673.746:771): avc: denied { map } for pid=4363 comm="syz.1.232" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.486411][ T29] audit: type=1400 audit(1731858673.746:772): avc: denied { execute } for pid=4363 comm="syz.1.232" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.513659][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.527374][ T29] audit: type=1400 audit(1731858673.826:773): avc: denied { ioctl } for pid=4363 comm="syz.1.232" path="socket:[7151]" dev="sockfs" ino=7151 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.683680][ T4358] syz.2.230: attempt to access beyond end of device [ 48.683680][ T4358] loop2: rw=34817, sector=106, nr_sectors = 703 limit=128 [ 48.737021][ T4382] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.799133][ T4202] kworker/u8:12: attempt to access beyond end of device [ 48.799133][ T4202] loop2: rw=1, sector=809, nr_sectors = 232 limit=128 [ 48.900551][ T4395] pim6reg1: entered promiscuous mode [ 48.907385][ T4395] pim6reg1: entered allmulticast mode [ 49.033721][ T4403] team0: Port device team_slave_0 removed [ 49.059127][ T4403] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 49.201511][ T4413] loop1: detected capacity change from 0 to 8192 [ 49.219056][ T4425] serio: Serial port pts0 [ 50.441220][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.448754][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.457620][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.465069][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.723122][ T4480] syzkaller0: entered promiscuous mode [ 50.728768][ T4480] syzkaller0: entered allmulticast mode [ 50.818088][ T4483] bond_slave_0: entered promiscuous mode [ 50.823797][ T4483] bond_slave_1: entered promiscuous mode [ 50.829846][ T4483] vlan2: entered promiscuous mode [ 50.834914][ T4483] bond0: entered promiscuous mode [ 50.841976][ T4483] bond0: left promiscuous mode [ 50.846970][ T4483] bond_slave_0: left promiscuous mode [ 50.852388][ T4483] bond_slave_1: left promiscuous mode [ 50.929820][ T4485] 9pnet_fd: p9_fd_create_tcp (4485): problem connecting socket to 127.0.0.1 [ 51.051433][ T4491] loop2: detected capacity change from 0 to 2048 [ 51.089739][ T4491] Alternate GPT is invalid, using primary GPT. [ 51.096096][ T4491] loop2: p1 p2 p3 [ 51.130501][ T4496] loop2: detected capacity change from 0 to 512 [ 51.137993][ T4496] EXT4-fs (loop2): bad s_min_extra_isize: 65528 [ 51.152868][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.153797][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 51.163351][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.229847][ T4501] pim6reg1: entered promiscuous mode [ 51.235194][ T4501] pim6reg1: entered allmulticast mode [ 51.428788][ T4523] loop2: detected capacity change from 0 to 128 [ 51.451890][ T4523] +}[@: attempt to access beyond end of device [ 51.451890][ T4523] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 51.536887][ T136] kworker/u8:4: attempt to access beyond end of device [ 51.536887][ T136] loop2: rw=1, sector=145, nr_sectors = 33 limit=128 [ 51.929534][ T4576] can0: slcan on pts0. [ 51.968594][ T4576] can0 (unregistered): slcan off pts0. [ 52.171375][ T4587] netlink: 5 bytes leftover after parsing attributes in process `syz.1.290'. [ 52.181642][ T4587] 0XD: renamed from gretap0 (while UP) [ 52.190705][ T4587] 0XD: entered allmulticast mode [ 52.196573][ T4587] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 52.239685][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 52.239698][ T29] audit: type=1400 audit(1731858677.536:925): avc: denied { append } for pid=4588 comm="syz.1.291" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.327338][ T29] audit: type=1400 audit(1731858677.566:926): avc: denied { getopt } for pid=4579 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.442728][ T4596] pim6reg1: entered promiscuous mode [ 52.448189][ T4596] pim6reg1: entered allmulticast mode [ 52.533614][ T29] audit: type=1400 audit(1731858677.816:927): avc: denied { map } for pid=4597 comm="syz.1.295" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.557758][ T29] audit: type=1400 audit(1731858677.826:928): avc: denied { read write } for pid=4597 comm="syz.1.295" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.660905][ T29] audit: type=1326 audit(1731858677.956:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2821e719 code=0x7ffc0000 [ 52.707550][ T29] audit: type=1326 audit(1731858677.956:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e2821e719 code=0x7ffc0000 [ 52.731195][ T29] audit: type=1326 audit(1731858677.956:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2821e719 code=0x7ffc0000 [ 52.754569][ T29] audit: type=1326 audit(1731858677.956:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f1e2821e719 code=0x7ffc0000 [ 52.777885][ T29] audit: type=1326 audit(1731858677.956:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2821e719 code=0x7ffc0000 [ 52.791322][ T4609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.801384][ T29] audit: type=1326 audit(1731858677.956:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2821e719 code=0x7ffc0000 [ 52.910104][ T4617] loop3: detected capacity change from 0 to 256 [ 52.944281][ T4617] FAT-fs (loop3): Directory bread(block 64) failed [ 52.951051][ T4617] FAT-fs (loop3): Directory bread(block 65) failed [ 52.958672][ T4617] FAT-fs (loop3): Directory bread(block 66) failed [ 52.972993][ T4617] FAT-fs (loop3): Directory bread(block 67) failed [ 52.979625][ T4617] FAT-fs (loop3): Directory bread(block 68) failed [ 52.986162][ T4617] FAT-fs (loop3): Directory bread(block 69) failed [ 52.992753][ T4617] FAT-fs (loop3): Directory bread(block 70) failed [ 52.999761][ T4617] FAT-fs (loop3): Directory bread(block 71) failed [ 53.006305][ T4617] FAT-fs (loop3): Directory bread(block 72) failed [ 53.013119][ T4617] FAT-fs (loop3): Directory bread(block 73) failed [ 53.053214][ T4626] loop1: detected capacity change from 0 to 128 [ 53.067932][ T4617] syz.3.304: attempt to access beyond end of device [ 53.067932][ T4617] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 53.152604][ T4626] syz.1.307: attempt to access beyond end of device [ 53.152604][ T4626] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 53.401809][ T4648] syzkaller0: entered promiscuous mode [ 53.407534][ T4648] syzkaller0: entered allmulticast mode [ 53.474200][ T8] IPVS: starting estimator thread 0... [ 53.479972][ T4661] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 53.583538][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.321'. [ 53.608767][ T4666] IPVS: using max 1968 ests per chain, 98400 per kthread [ 53.674563][ T4671] loop1: detected capacity change from 0 to 128 [ 54.078045][ T4682] loop4: detected capacity change from 0 to 8192 [ 54.088422][ T4682] vfat: Unknown parameter '000000000000000000080xffffffffffffffff' [ 54.247303][ T4710] netlink: 'syz.5.330': attribute type 10 has an invalid length. [ 54.256065][ T4710] geneve1: entered promiscuous mode [ 54.268928][ T4710] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 54.303889][ T4718] vlan1: entered promiscuous mode [ 54.317637][ T4717] vlan1: left promiscuous mode [ 54.377110][ T4728] loop1: detected capacity change from 0 to 128 [ 54.608309][ T4761] loop1: detected capacity change from 0 to 512 [ 54.616547][ T4761] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 54.650620][ T4761] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.335: iget: bad i_size value: -67835469387268086 [ 54.679854][ T4761] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.335: couldn't read orphan inode 15 (err -117) [ 54.737713][ T4761] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.793269][ T4761] ext2 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.834456][ T4761] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 54.868245][ T3317] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 55.105556][ T4826] pim6reg1: entered promiscuous mode [ 55.111009][ T4826] pim6reg1: entered allmulticast mode [ 55.200956][ T4838] loop2: detected capacity change from 0 to 512 [ 55.227145][ T4838] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.249859][ T4838] ext4 filesystem being mounted at /67/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.299373][ T4838] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.2.341: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 55.359928][ T4838] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 55.380299][ T4838] EXT4-fs warning (device loop2): ext4_rename_delete:3733: inode #2: comm syz.2.341: Deleting old file: nlink 4, error=-117 [ 55.488988][ T3319] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 55.572782][ T4853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4853 comm=syz.2.343 [ 55.588503][ T4853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 55.597278][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 55.855802][ T4865] loop5: detected capacity change from 0 to 512 [ 55.868869][ T4865] ext4: Unknown parameter 'nouser_xattr' [ 55.927206][ T4870] loop4: detected capacity change from 0 to 512 [ 55.950835][ T4870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.978555][ T4870] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.022982][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.070175][ T4880] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 56.090822][ T4878] loop5: detected capacity change from 0 to 2048 [ 56.103970][ T4880] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 56.133401][ T4878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.223495][ T4891] loop4: detected capacity change from 0 to 512 [ 56.236754][ T4891] EXT4-fs: Ignoring removed nobh option [ 56.242468][ T4891] EXT4-fs: Ignoring removed nobh option [ 56.266313][ T4891] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 56.275629][ T4891] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.356: invalid indirect mapped block 2683928664 (level 1) [ 56.280339][ T4897] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 56.290749][ T4891] EXT4-fs (loop4): 1 truncate cleaned up [ 56.305510][ T4891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.334848][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.376711][ T4904] syz.4.362[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.376796][ T4904] syz.4.362[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.388418][ T4904] syz.4.362[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.397121][ T4906] loop1: detected capacity change from 0 to 512 [ 56.427244][ T4906] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.435198][ T4906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 56.443605][ T4906] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.451227][ T4906] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 56.461794][ T4906] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 56.472473][ T4906] EXT4-fs (loop1): 1 truncate cleaned up [ 56.478574][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.507277][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.567545][ T4922] loop1: detected capacity change from 0 to 512 [ 56.574300][ T4922] EXT4-fs: inline encryption not supported [ 56.591830][ T4922] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 56.603578][ T4922] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 56.613905][ T4922] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.367: Corrupt directory, running e2fsck is recommended [ 56.622777][ T4925] loop7: detected capacity change from 0 to 7 [ 56.631586][ T4922] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 56.633122][ T4925] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.642308][ T4922] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.367: corrupted in-inode xattr: invalid ea_ino [ 56.648799][ T4925] Buffer I/O error on dev loop7, logical block 0, async page read [ 56.648820][ T4925] loop7: unable to read partition table [ 56.663831][ T4922] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.367: couldn't read orphan inode 15 (err -117) [ 56.670150][ T4925] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 56.670150][ T4925] ) failed (rc=-5) [ 56.676313][ T4922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.730677][ T4927] syz.2.369[4927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.730726][ T4927] syz.2.369[4927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.742259][ T4927] syz.2.369[4927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.807461][ T4035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.025110][ T4956] loop2: detected capacity change from 0 to 1024 [ 57.032378][ T4956] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.041267][ T4956] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.053894][ T4956] JBD2: no valid journal superblock found [ 57.059733][ T4956] EXT4-fs (loop2): Could not load journal inode [ 57.112244][ T4962] netlink: 145 bytes leftover after parsing attributes in process `syz.2.384'. [ 57.134944][ T4962] netlink: 145 bytes leftover after parsing attributes in process `syz.2.384'. [ 57.204615][ T4967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.386'. [ 57.213666][ T4967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.386'. [ 57.222583][ T4967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.386'. [ 57.235320][ T4967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.386'. [ 57.288393][ T4976] loop5: detected capacity change from 0 to 1024 [ 57.296694][ T4974] loop2: detected capacity change from 0 to 2048 [ 57.304580][ T4974] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.311206][ T4974] EXT4-fs: Ignoring removed i_version option [ 57.320235][ T4974] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 57.329540][ T4976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.332667][ T4974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.373031][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.415814][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.475357][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 57.475372][ T29] audit: type=1400 audit(1731858682.766:1123): avc: denied { ioctl } for pid=4984 comm="syz.2.392" path="socket:[8828]" dev="sockfs" ino=8828 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.601955][ T4987] loop2: detected capacity change from 0 to 2048 [ 57.643505][ T4987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.657885][ T29] audit: type=1400 audit(1731858682.946:1124): avc: denied { read } for pid=4986 comm="syz.2.393" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 57.698074][ T4994] bridge0: port 3(syz_tun) entered blocking state [ 57.704638][ T4994] bridge0: port 3(syz_tun) entered disabled state [ 57.711925][ T4994] syz_tun: entered allmulticast mode [ 57.717793][ T4994] syz_tun: entered promiscuous mode [ 57.723388][ T4994] bridge0: port 3(syz_tun) entered blocking state [ 57.729953][ T4994] bridge0: port 3(syz_tun) entered forwarding state [ 57.740426][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.826050][ T4981] ================================================================== [ 57.834173][ T4981] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 57.841923][ T4981] [ 57.844259][ T4981] write to 0xffff88811cf254a4 of 4 bytes by task 4976 on cpu 0: [ 57.851891][ T4981] xas_set_mark+0x131/0x150 [ 57.856413][ T4981] tag_pages_for_writeback+0xa5/0x2a0 [ 57.861803][ T4981] ext4_do_writepages+0x694/0x2130 [ 57.866930][ T4981] ext4_writepages+0x159/0x2e0 [ 57.871711][ T4981] do_writepages+0x1d8/0x480 [ 57.876331][ T4981] filemap_fdatawrite_wbc+0xdb/0x100 [ 57.881642][ T4981] file_write_and_wait_range+0xc4/0x250 [ 57.887282][ T4981] generic_buffers_fsync_noflush+0x46/0x120 [ 57.893214][ T4981] ext4_sync_file+0x1ff/0x6c0 [ 57.897922][ T4981] vfs_fsync_range+0x116/0x130 [ 57.902728][ T4981] ext4_buffered_write_iter+0x326/0x370 [ 57.908490][ T4981] ext4_file_write_iter+0x293/0xe10 [ 57.913735][ T4981] iter_file_splice_write+0x5f1/0x980 [ 57.919141][ T4981] direct_splice_actor+0x160/0x2c0 [ 57.924277][ T4981] splice_direct_to_actor+0x302/0x670 [ 57.929680][ T4981] do_splice_direct+0xd7/0x150 [ 57.934477][ T4981] do_sendfile+0x39b/0x970 [ 57.938930][ T4981] __x64_sys_sendfile64+0x110/0x150 [ 57.944159][ T4981] x64_sys_call+0xed5/0x2d60 [ 57.948815][ T4981] do_syscall_64+0xc9/0x1c0 [ 57.953350][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.959285][ T4981] [ 57.961641][ T4981] read to 0xffff88811cf254a4 of 4 bytes by task 4981 on cpu 1: [ 57.969221][ T4981] filemap_fdatawrite_wbc+0x5c/0x100 [ 57.974537][ T4981] file_write_and_wait_range+0xc4/0x250 [ 57.980104][ T4981] generic_buffers_fsync_noflush+0x46/0x120 [ 57.986023][ T4981] ext4_sync_file+0x1ff/0x6c0 [ 57.990718][ T4981] vfs_fsync_range+0x116/0x130 [ 57.995498][ T4981] ext4_buffered_write_iter+0x326/0x370 [ 58.001075][ T4981] ext4_file_write_iter+0x293/0xe10 [ 58.006320][ T4981] iter_file_splice_write+0x5f1/0x980 [ 58.011753][ T4981] direct_splice_actor+0x160/0x2c0 [ 58.016908][ T4981] splice_direct_to_actor+0x302/0x670 [ 58.022309][ T4981] do_splice_direct+0xd7/0x150 [ 58.027100][ T4981] do_sendfile+0x39b/0x970 [ 58.031531][ T4981] __x64_sys_sendfile64+0x110/0x150 [ 58.036749][ T4981] x64_sys_call+0xed5/0x2d60 [ 58.041383][ T4981] do_syscall_64+0xc9/0x1c0 [ 58.045912][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.051844][ T4981] [ 58.054175][ T4981] value changed: 0x02000021 -> 0x04000021 [ 58.059894][ T4981] [ 58.062219][ T4981] Reported by Kernel Concurrency Sanitizer on: [ 58.068388][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.5.389 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 58.078986][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 58.089045][ T4981] ================================================================== [ 58.181170][ T4035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.