last executing test programs: 6.984227911s ago: executing program 0 (id=255): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x10000) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_usbip_server_init(0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 6.454299468s ago: executing program 0 (id=262): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000000000180900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x10000) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_usbip_server_init(0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 5.613415773s ago: executing program 0 (id=273): creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) io_setup(0x2, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file1\x00', 0x0, 0x10}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x5) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffffff", 0x58}], 0x1) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) 4.392033651s ago: executing program 3 (id=283): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x40}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x10000}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.350568244s ago: executing program 3 (id=284): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x5c, 0x0, 0x1}, 0x28) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f00000002c0)=""/126) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4.013208194s ago: executing program 3 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) io_setup(0x3ff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5d, 0x0, 0x0) 3.865316377s ago: executing program 2 (id=287): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) unshare(0x8000000) 3.133724983s ago: executing program 1 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000008c0)={0x6, 0x0, &(0x7f0000000500), &(0x7f0000000600)=[0x1ff]}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 3.05260026s ago: executing program 4 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) unshare(0x2a000600) unshare(0x62040200) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.954294378s ago: executing program 2 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x1, 0x5) r7 = openat(r6, 0x0, 0x0, 0x1) getdents64(r7, 0x0, 0x22) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 2.774201394s ago: executing program 0 (id=291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$int_in(r0, 0x5452, 0x0) socket(0x26, 0x80805, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', 0x8, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0xfffffbce, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1.748490175s ago: executing program 2 (id=292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x43, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.747307935s ago: executing program 1 (id=293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x43, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.670522222s ago: executing program 4 (id=294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 857.265444ms ago: executing program 2 (id=295): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x4}, 0x94) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0x6, "f3663f226195"}, &(0x7f0000000000)=0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x2, 0x10050, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x8}, 0x248, 0x10000, 0x1, 0x1, 0x8, 0xacc0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xd, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x2, 0x1ff, 0x0, 0x3c, 0x5}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000280)=@buf) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 838.630086ms ago: executing program 1 (id=296): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2b, 'cpu'}, {0x2d, 'cpuset'}]}, 0xd) 807.820469ms ago: executing program 2 (id=297): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f0008000300000064000000050000"], 0x78) close(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) close(r1) r4 = getpgid(0x0) timer_create(0x2, 0x0, &(0x7f00000002c0)) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r5, @ANYRESDEC=r5, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESOCT=r6], 0x78) close(r6) close(r3) 781.417161ms ago: executing program 3 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e40)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xe, 0xfff2}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) syz_io_uring_setup(0x6001f8c, &(0x7f0000000580)={0x0, 0xdcef, 0x1000, 0x1}, &(0x7f0000000400), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x58cd, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e3300"], 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r2, 0x6686, 0x2936, 0x28, 0x0, 0x0) 768.658392ms ago: executing program 1 (id=299): setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x1000041, &(0x7f00000007c0), 0x1, 0x76c, &(0x7f0000000f80)="$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") socket$kcm(0x2, 0x3, 0x106) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x48844) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/6, 0x6, 0x40000123, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) io_cancel(0x0, 0x0, 0x0) 687.731769ms ago: executing program 2 (id=300): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='tlb_flush\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xfd, 0x2c3, &(0x7f0000000440)="$eJzs3NFLU2EYx/Ent9yc6RZEUFA91E3dHHT9ATVCIRoU5qS6CI55VmOnTc4ZxiJyN9Ftf4d02V1Q/QPeRDfddyeB0I0X0QnP2dFNp26m29LvB/S8O8/7833VozxH8Kw8ePe8mHeNvFmRgbjKgEhN1kRS66O6E/XjgD8elEY1uTb86/uF+w8f3clksxNTqpOZ6etpVR299OnFq/eXv1SGZz6MfozJcurxymr6x/LZ5XMrf6afFVwtuFoqV9TU2XK5Ys7als4V3KKhes+2TNfSQsm1nLAeqy84P19VszQ3kph3LNdVs1TVolXVSlkrTlXNp2ahpIZh6EhCjrdoG3NyS1NTZmbHshfZ6wPEOt0VDtVQq5OOk6m1LuaWurAnAADQZ3bv/4Nef+f+PzsTHA+4/xfZ3v/79bxdbr//b6cBPnZqTa/26P9xJDhOxkzUf35FGu/p6P8BAAAAAAAAAAAAAAAAAAAAAPgfrHle0vO8ZHgM32IiEheR8HWv94nD0fH331pdf3+jl3vGwWn4x724iP12IbeQC45BPZOXgthiyZgk5bd/PdQF48nb2Ykx9aXks71Yzy8u5CL+wyH8fCjVKn/x9HiQ1+b8SUk0rp+WpJxpvX66ZX5Qrl5pyBuSlK9PpCy2zPnX9Wb+9bjqrbvZLfkhfx4AAAAAAEeBoRu23b/7dX9CXLbXg3wHfx/Ycn8dlfM8oQcAAAAAgK5wqy+Lpm1bzj4GMRH5h7g9eyrYwz7j/TqISPMZifbDxm6KSB9so1uDuIgEZ3Q/8Z8b8bZSXhtzoutXeq+/LB0Mev2bCQAAAMBB22z6Owh9e3OIOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Php93lg4fymUlzcaljYJd6wXKTrnyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQR/4GAAD///fUGeI=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f0000000140)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private=0x8000000, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x4050) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0xc3072, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000a0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0x8000000000000003}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 559.772611ms ago: executing program 4 (id=301): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = inotify_init1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400000a0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) 459.40736ms ago: executing program 3 (id=302): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ca900006800e978c76be5c59107ae6e0a0000000000000004000400"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x40000) connect$qrtr(r3, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) dup3(r5, r2, 0x80000) 458.77576ms ago: executing program 0 (id=303): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e24, 0x80000005, @private0, 0x6c45b294}}}, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400000a0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRESDEC, @ANYRES8=r3, @ANYRES8=r1, @ANYRES16=r2, @ANYRES16=r5, @ANYRESOCT=r5], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6], 0x1}, 0x58) 455.69504ms ago: executing program 4 (id=304): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) fsmount(r0, 0x0, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x6, 0x0, 0x7, 0x441e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x0, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 288.079555ms ago: executing program 1 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=0x0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) cachestat(r3, &(0x7f0000000340)={0x3, 0x1}, &(0x7f0000000380), 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x814) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000626000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x820, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 223.524831ms ago: executing program 4 (id=306): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = inotify_init1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400000a0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) 187.615214ms ago: executing program 3 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x43, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 146.360978ms ago: executing program 0 (id=308): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r3, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 34.514178ms ago: executing program 4 (id=309): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpgid(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c7379735f696d6d757461626c652c74696d65050066667365743d3078303030303030303030303030303136312c73686e64746e616d653d77696e6e742c7379735f696d6d757461626c652c7379735f696d6d757461626c652c757466383d302c757466383d312c00"], 0xfd, 0x2c7, &(0x7f0000000480)="$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") munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') 0s ago: executing program 1 (id=310): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}, [{0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 22.500508][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 22.500523][ T29] audit: type=1400 audit(1767547996.846:57): avc: denied { transition } for pid=3294 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.504430][ T29] audit: type=1400 audit(1767547996.846:58): avc: denied { noatsecure } for pid=3294 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.507220][ T29] audit: type=1400 audit(1767547996.846:59): avc: denied { write } for pid=3294 comm="sh" path="pipe:[1532]" dev="pipefs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.510215][ T29] audit: type=1400 audit(1767547996.846:60): avc: denied { rlimitinh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.512909][ T29] audit: type=1400 audit(1767547996.846:61): avc: denied { siginh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 29.807281][ T29] audit: type=1400 audit(1767548004.146:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.830201][ T29] audit: type=1400 audit(1767548004.176:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.830881][ T3305] cgroup: Unknown subsys name 'net' [ 29.857809][ T29] audit: type=1400 audit(1767548004.196:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.959615][ T3305] cgroup: Unknown subsys name 'cpuset' [ 29.965659][ T3305] cgroup: Unknown subsys name 'rlimit' [ 30.115580][ T29] audit: type=1400 audit(1767548004.456:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.139556][ T29] audit: type=1400 audit(1767548004.456:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.160001][ T29] audit: type=1400 audit(1767548004.456:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.167000][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.180338][ T29] audit: type=1400 audit(1767548004.456:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.209081][ T29] audit: type=1400 audit(1767548004.466:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.233885][ T29] audit: type=1400 audit(1767548004.466:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.236295][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.257122][ T29] audit: type=1400 audit(1767548004.486:71): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.359721][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.426831][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 31.453142][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.488758][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.495928][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.503137][ T3314] bridge_slave_0: entered allmulticast mode [ 31.509552][ T3314] bridge_slave_0: entered promiscuous mode [ 31.529239][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.536331][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.543445][ T3314] bridge_slave_1: entered allmulticast mode [ 31.549642][ T3314] bridge_slave_1: entered promiscuous mode [ 31.594571][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 31.607198][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.614309][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.621502][ T3316] bridge_slave_0: entered allmulticast mode [ 31.627919][ T3316] bridge_slave_0: entered promiscuous mode [ 31.635561][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.648212][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.659398][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.671621][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.678656][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.685799][ T3316] bridge_slave_1: entered allmulticast mode [ 31.692331][ T3316] bridge_slave_1: entered promiscuous mode [ 31.714040][ T3314] team0: Port device team_slave_0 added [ 31.719645][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.726710][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.733987][ T3318] bridge_slave_0: entered allmulticast mode [ 31.740426][ T3318] bridge_slave_0: entered promiscuous mode [ 31.764115][ T3314] team0: Port device team_slave_1 added [ 31.774174][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.781416][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.788656][ T3318] bridge_slave_1: entered allmulticast mode [ 31.795088][ T3318] bridge_slave_1: entered promiscuous mode [ 31.807133][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.830639][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.842128][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.849142][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.875128][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.898875][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.905860][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.931736][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.943558][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.967047][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.980860][ T3316] team0: Port device team_slave_0 added [ 32.000580][ T3316] team0: Port device team_slave_1 added [ 32.006307][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.013392][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.020727][ T3325] bridge_slave_0: entered allmulticast mode [ 32.026982][ T3325] bridge_slave_0: entered promiscuous mode [ 32.042335][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.049404][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.056483][ T3320] bridge_slave_0: entered allmulticast mode [ 32.063000][ T3320] bridge_slave_0: entered promiscuous mode [ 32.074934][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.082085][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.089205][ T3325] bridge_slave_1: entered allmulticast mode [ 32.095635][ T3325] bridge_slave_1: entered promiscuous mode [ 32.107036][ T3318] team0: Port device team_slave_0 added [ 32.112692][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.119748][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.126908][ T3320] bridge_slave_1: entered allmulticast mode [ 32.133386][ T3320] bridge_slave_1: entered promiscuous mode [ 32.150210][ T3314] hsr_slave_0: entered promiscuous mode [ 32.156068][ T3314] hsr_slave_1: entered promiscuous mode [ 32.162707][ T3318] team0: Port device team_slave_1 added [ 32.172817][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.179759][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.205633][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.229910][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.236878][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.262784][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.274604][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.288817][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.300875][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.314633][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.321606][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.347587][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.359396][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.377954][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.384930][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.410834][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.450930][ T3325] team0: Port device team_slave_0 added [ 32.457649][ T3320] team0: Port device team_slave_0 added [ 32.470012][ T3325] team0: Port device team_slave_1 added [ 32.476982][ T3320] team0: Port device team_slave_1 added [ 32.484158][ T3316] hsr_slave_0: entered promiscuous mode [ 32.490101][ T3316] hsr_slave_1: entered promiscuous mode [ 32.495859][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 32.501613][ T3316] Cannot create hsr debugfs directory [ 32.540473][ T3318] hsr_slave_0: entered promiscuous mode [ 32.546337][ T3318] hsr_slave_1: entered promiscuous mode [ 32.552297][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.558004][ T3318] Cannot create hsr debugfs directory [ 32.563814][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.570774][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.596648][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.610020][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.616946][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.642860][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.657936][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.664905][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.690838][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.703853][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.710826][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.736701][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.794348][ T3320] hsr_slave_0: entered promiscuous mode [ 32.800247][ T3320] hsr_slave_1: entered promiscuous mode [ 32.805967][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.811694][ T3320] Cannot create hsr debugfs directory [ 32.842679][ T3325] hsr_slave_0: entered promiscuous mode [ 32.848804][ T3325] hsr_slave_1: entered promiscuous mode [ 32.854576][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 32.860321][ T3325] Cannot create hsr debugfs directory [ 32.967629][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.980698][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.994767][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.008945][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.028724][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.037383][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.053688][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.065800][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.081107][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.091172][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.100464][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.112514][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.141611][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.150348][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.158892][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.167583][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.208991][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.218595][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.227598][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.238481][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.261547][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.290709][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.301294][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.316783][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.331163][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.344357][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.351458][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.367125][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.376302][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.383342][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.392881][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.399962][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.412806][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.419858][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.434311][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.441435][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.456100][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.463228][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.499747][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.539270][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.559554][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.580530][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.600214][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.607271][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.622099][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.629263][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.644123][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.651220][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.664355][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.671519][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.696135][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.715960][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.732235][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.814634][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.867996][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.889092][ T3318] veth0_vlan: entered promiscuous mode [ 33.897121][ T3318] veth1_vlan: entered promiscuous mode [ 33.940223][ T3314] veth0_vlan: entered promiscuous mode [ 33.963484][ T3318] veth0_macvtap: entered promiscuous mode [ 33.970491][ T3316] veth0_vlan: entered promiscuous mode [ 33.976530][ T3314] veth1_vlan: entered promiscuous mode [ 33.984869][ T3318] veth1_macvtap: entered promiscuous mode [ 33.998164][ T3320] veth0_vlan: entered promiscuous mode [ 34.011114][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.018623][ T3316] veth1_vlan: entered promiscuous mode [ 34.031915][ T3320] veth1_vlan: entered promiscuous mode [ 34.038738][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.058906][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.078285][ T3314] veth0_macvtap: entered promiscuous mode [ 34.092536][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.104744][ T3314] veth1_macvtap: entered promiscuous mode [ 34.113692][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.124328][ T3320] veth0_macvtap: entered promiscuous mode [ 34.139641][ T3316] veth0_macvtap: entered promiscuous mode [ 34.146392][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.156594][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.159488][ T3325] veth0_vlan: entered promiscuous mode [ 34.182854][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.191838][ T3320] veth1_macvtap: entered promiscuous mode [ 34.199705][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.210230][ T3316] veth1_macvtap: entered promiscuous mode [ 34.226155][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.236979][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.246572][ T3325] veth1_vlan: entered promiscuous mode [ 34.255323][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.269000][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.280358][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.302660][ T2153] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.306843][ T3325] veth0_macvtap: entered promiscuous mode [ 34.316194][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.324375][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.338620][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.347947][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.357038][ T3325] veth1_macvtap: entered promiscuous mode [ 34.364738][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.380816][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.395344][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.404674][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.413743][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.422619][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.439166][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.446443][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.464981][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.478869][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.523352][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.552705][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.562608][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.615700][ T3503] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.666015][ T3511] loop4: detected capacity change from 0 to 128 [ 34.810140][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 34.810154][ T29] audit: type=1326 audit(1767548009.156:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 34.840460][ T3522] vlan2: entered allmulticast mode [ 34.846304][ T3522] dummy0: entered allmulticast mode [ 34.863052][ T3522] Zero length message leads to an empty skb [ 34.879457][ T29] audit: type=1326 audit(1767548009.156:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 34.902607][ T29] audit: type=1326 audit(1767548009.156:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 34.925704][ T29] audit: type=1326 audit(1767548009.156:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 34.949049][ T29] audit: type=1326 audit(1767548009.156:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 34.972195][ T29] audit: type=1326 audit(1767548009.156:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 34.995246][ T29] audit: type=1326 audit(1767548009.156:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 35.018367][ T29] audit: type=1326 audit(1767548009.156:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 35.041520][ T29] audit: type=1326 audit(1767548009.156:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 35.064588][ T29] audit: type=1326 audit(1767548009.156:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f279a5f2005 code=0x7ffc0000 [ 35.142491][ T3529] loop2: detected capacity change from 0 to 512 [ 35.170534][ T3529] EXT4-fs: dax option not supported [ 35.212508][ T3529] loop2: detected capacity change from 0 to 512 [ 35.213468][ T3531] : renamed from bond0 (while UP) [ 35.236692][ T3529] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.249763][ T3529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.279090][ T3529] EXT4-fs (loop2): 1 truncate cleaned up [ 35.285256][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.333021][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.504596][ T3546] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 35.671465][ C1] hrtimer: interrupt took 28489 ns [ 35.800181][ T3552] loop1: detected capacity change from 0 to 512 [ 35.822913][ T3552] ext4: Unknown parameter 'uid' [ 35.893503][ T3550] loop4: detected capacity change from 0 to 512 [ 35.931169][ T3550] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.008875][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 36.026359][ T3550] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.069208][ T3550] EXT4-fs (loop4): 1 truncate cleaned up [ 36.077326][ T3550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.116909][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.169807][ T3568] loop2: detected capacity change from 0 to 512 [ 36.192886][ T3568] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 36.227267][ T3571] loop4: detected capacity change from 0 to 512 [ 36.241592][ T3568] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.267474][ T3568] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.24: corrupted inode contents [ 36.286128][ T3571] EXT4-fs: Ignoring removed i_version option [ 36.292292][ T3571] EXT4-fs: Ignoring removed bh option [ 36.319421][ T3568] EXT4-fs (loop2): Remounting filesystem read-only [ 36.326105][ T3568] EXT4-fs (loop2): 1 truncate cleaned up [ 36.332039][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.342611][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.353175][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.359307][ T3487] Bluetooth: hci0: command 0x1003 tx timeout [ 36.392295][ T3571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.403948][ T52] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 36.416255][ T3571] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.445214][ T3568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.526291][ T3576] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.576598][ T3576] loop3: detected capacity change from 0 to 1024 [ 36.583440][ T3576] ======================================================= [ 36.583440][ T3576] WARNING: The mand mount option has been deprecated and [ 36.583440][ T3576] and is ignored by this kernel. Remove the mand [ 36.583440][ T3576] option from the mount to silence this warning. [ 36.583440][ T3576] ======================================================= [ 36.888367][ T3571] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.23: iget: bad i_size value: 2533274857506816 [ 37.238581][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.280933][ T3586] bond0: (slave bond_slave_1): Releasing backup interface [ 37.332578][ T3586] netlink: 'syz.2.25': attribute type 4 has an invalid length. [ 37.373660][ T3589] netlink: 92 bytes leftover after parsing attributes in process `syz.2.26'. [ 37.389213][ T3589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'. [ 37.404800][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 37.459273][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.636826][ T3596] unsupported nla_type 52263 [ 37.805561][ T3598] loop0: detected capacity change from 0 to 512 [ 37.815146][ T3598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.900129][ T3598] EXT4-fs (loop0): 1 truncate cleaned up [ 37.906761][ T3598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.149728][ T3609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.158492][ T3609] netlink: 4 bytes leftover after parsing attributes in process `syz0'. [ 38.166959][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.174387][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.182375][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.189890][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.273389][ T3607] atomic_op ffff88811b893d28 conn xmit_atomic 0000000000000000 [ 38.362814][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.521609][ T3616] loop4: detected capacity change from 0 to 2048 [ 38.607932][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.644015][ T3616] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.32: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.677877][ T3616] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.699862][ T3614] syz.0.31 (3614) used greatest stack depth: 10392 bytes left [ 38.704835][ T3616] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.32: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.761254][ T3620] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.32: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.819684][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.008983][ T3634] process 'syz.2.37' launched '/dev/fd/6' with NULL argv: empty string added [ 39.018117][ T3632] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 39.026109][ T3632] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 39.046481][ T3632] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.071205][ T3632] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 39.085764][ T3632] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 39.182816][ T3632] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.36: bg 0: block 40: padding at end of block bitmap is not set [ 39.277039][ T3632] EXT4-fs (loop1): Remounting filesystem read-only [ 39.319147][ T3632] EXT4-fs (loop1): 1 truncate cleaned up [ 39.354505][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.451583][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 39.460422][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 39.560763][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.593599][ T3637] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.33: EA inode hash validation failed [ 39.606264][ T3637] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.33: corrupted inode contents [ 39.618207][ T3637] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.33: mark_inode_dirty error [ 39.631031][ T3637] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.33: corrupted inode contents [ 39.644953][ T3637] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.33: mark_inode_dirty error [ 39.656992][ T3637] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.33: mark inode dirty (error -117) [ 39.669878][ T3637] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 39.678954][ T3637] EXT4-fs (loop0): 1 orphan inode deleted [ 39.685254][ T3637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.698464][ T3637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.796545][ T3638] syz.4.34 (3638) used greatest stack depth: 10192 bytes left [ 40.454162][ T3654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 40.966032][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 41.079569][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 41.079586][ T29] audit: type=1400 audit(1767548015.406:580): avc: denied { read } for pid=3658 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.191999][ T29] audit: type=1400 audit(1767548015.456:581): avc: denied { write } for pid=3658 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.211188][ T29] audit: type=1400 audit(1767548015.516:582): avc: denied { write } for pid=3658 comm="syz.0.41" path="socket:[5214]" dev="sockfs" ino=5214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.239057][ T3657] set_capacity_and_notify: 2 callbacks suppressed [ 41.245560][ T3657] loop2: detected capacity change from 0 to 256 [ 41.776315][ T29] audit: type=1326 audit(1767548016.116:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8229ff749 code=0x7ffc0000 [ 41.811204][ T3666] loop4: detected capacity change from 0 to 128 [ 41.910512][ T29] audit: type=1326 audit(1767548016.146:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8229ff749 code=0x7ffc0000 [ 41.933667][ T29] audit: type=1326 audit(1767548016.146:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8229ff749 code=0x7ffc0000 [ 41.956818][ T29] audit: type=1326 audit(1767548016.146:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8229ff749 code=0x7ffc0000 [ 41.980012][ T29] audit: type=1326 audit(1767548016.146:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8229ff749 code=0x7ffc0000 [ 42.003119][ T29] audit: type=1326 audit(1767548016.156:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8229ff749 code=0x7ffc0000 [ 42.026283][ T29] audit: type=1326 audit(1767548016.156:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8229ff749 code=0x7ffc0000 [ 42.112030][ T3666] syz.4.44: attempt to access beyond end of device [ 42.112030][ T3666] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 42.152811][ T3666] syz.4.44: attempt to access beyond end of device [ 42.152811][ T3666] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 42.196443][ T3666] syz.4.44: attempt to access beyond end of device [ 42.196443][ T3666] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 42.251006][ T3666] syz.4.44: attempt to access beyond end of device [ 42.251006][ T3666] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 42.262191][ T3666] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 42.329391][ T3683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 42.407178][ T3683] loop3: detected capacity change from 0 to 128 [ 42.417784][ T3683] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.441021][ T3683] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.494747][ T3690] loop4: detected capacity change from 0 to 128 [ 42.520041][ T3690] netlink: 288 bytes leftover after parsing attributes in process `syz.4.49'. [ 42.555789][ T3676] netlink: 128 bytes leftover after parsing attributes in process `syz.0.46'. [ 42.566292][ T3655] IPVS: starting estimator thread 0... [ 42.604728][ T3690] syz.4.49: attempt to access beyond end of device [ 42.604728][ T3690] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 42.656307][ T3690] syz.4.49: attempt to access beyond end of device [ 42.656307][ T3690] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 42.659324][ T3691] IPVS: using max 2496 ests per chain, 124800 per kthread [ 42.710363][ T3690] syz.4.49: attempt to access beyond end of device [ 42.710363][ T3690] loop4: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 42.723886][ T3690] Buffer I/O error on dev loop4, logical block 75, lost async page write [ 42.752696][ T3698] ref_ctr increment failed for inode: 0x3b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005e540 [ 42.772403][ T3690] syz.4.49: attempt to access beyond end of device [ 42.772403][ T3690] loop4: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 42.785927][ T3690] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 42.795143][ T3690] syz.4.49: attempt to access beyond end of device [ 42.795143][ T3690] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 42.831613][ T3690] syz.4.49: attempt to access beyond end of device [ 42.831613][ T3690] loop4: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 42.845163][ T3690] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 42.854093][ T3690] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 42.868727][ T3690] Buffer I/O error on dev loop4, logical block 115, lost async page write [ 42.880035][ T3690] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 42.897502][ T3690] Buffer I/O error on dev loop4, logical block 119, lost async page write [ 42.909325][ T3690] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 42.934105][ T3690] Buffer I/O error on dev loop4, logical block 123, lost async page write [ 42.942782][ T3690] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 43.049917][ T3703] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 43.077952][ T3707] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.094457][ T3712] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET) [ 43.116651][ T3703] bond1 (unregistering): Released all slaves [ 43.208141][ T3714] IPv6: addrconf: prefix option has invalid lifetime [ 43.242489][ T3716] loop4: detected capacity change from 0 to 2048 [ 43.263301][ T3716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 43.351059][ T2071] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.418580][ T3722] loop1: detected capacity change from 0 to 512 [ 43.491824][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 43.510447][ T3729] loop3: detected capacity change from 0 to 512 [ 43.545537][ T3729] EXT4-fs (loop3): too many log groups per flexible block group [ 43.567000][ T946] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.592830][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 43.606835][ T3734] loop1: detected capacity change from 0 to 136 [ 43.629438][ T3729] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 43.636224][ T3729] EXT4-fs (loop3): mount failed [ 43.641165][ T946] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 43.653463][ T946] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.653463][ T946] [ 43.663106][ T946] EXT4-fs (loop4): Total free blocks count 0 [ 43.669068][ T946] EXT4-fs (loop4): Free/Dirty block details [ 43.674958][ T946] EXT4-fs (loop4): free_blocks=2415919104 [ 43.680738][ T946] EXT4-fs (loop4): dirty_blocks=32 [ 43.685836][ T946] EXT4-fs (loop4): Block reservation details [ 43.691846][ T946] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 43.701637][ T3728] team0: Port device team_slave_0 removed [ 43.712817][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 43.742414][ T3734] rock: directory entry would overflow storage [ 43.748581][ T3734] rock: sig=0x4f50, size=4, remaining=3 [ 43.754239][ T3734] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 43.818979][ T3738] netlink: 'syz.0.64': attribute type 4 has an invalid length. [ 43.933391][ T3747] loop1: detected capacity change from 0 to 256 [ 44.021082][ T3749] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 44.052019][ T3754] loop0: detected capacity change from 0 to 512 [ 44.075166][ T3754] EXT4-fs (loop0): 1 truncate cleaned up [ 44.083794][ T3754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.089932][ T3749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.109530][ T3747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.69'. [ 44.134100][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 44.152904][ T3758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.174167][ T3758] EXT4-fs (loop3): 1 truncate cleaned up [ 44.225178][ T3758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.251192][ T3749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.341712][ T3749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.454079][ T3749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.570791][ T2097] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.601388][ T2097] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.648910][ T2097] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.690941][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.802419][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.809770][ T3776] mmap: syz.1.76 (3776) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.972072][ T3778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 44.982392][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.992488][ T3778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.036454][ T3778] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.78: bg 0: block 88: padding at end of block bitmap is not set [ 45.082249][ T3778] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.78'. [ 45.102528][ T3787] veth2: entered promiscuous mode [ 45.118202][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.137085][ T3786] rock: directory entry would overflow storage [ 45.143282][ T3786] rock: sig=0x4f50, size=4, remaining=3 [ 45.148827][ T3786] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 45.210603][ T3792] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 45.224165][ T3793] IPv6: addrconf: prefix option has invalid lifetime [ 45.241474][ T3792] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.264106][ T3792] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.81: corrupted inode contents [ 45.329881][ T3799] netlink: 'ÿ': attribute type 1 has an invalid length. [ 45.347589][ T3792] EXT4-fs (loop3): Remounting filesystem read-only [ 45.377838][ T3792] EXT4-fs (loop3): 1 truncate cleaned up [ 45.388716][ T2071] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.399372][ T2071] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.410948][ T2071] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.421373][ T3803] lo speed is unknown, defaulting to 1000 [ 45.422257][ T3792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.427111][ T3803] lo speed is unknown, defaulting to 1000 [ 45.445907][ T3803] lo speed is unknown, defaulting to 1000 [ 45.461243][ T3803] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.472623][ T3803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.497962][ T3803] lo speed is unknown, defaulting to 1000 [ 45.513985][ T3803] lo speed is unknown, defaulting to 1000 [ 45.568069][ T3813] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 45.630698][ T3803] lo speed is unknown, defaulting to 1000 [ 45.636950][ T3803] lo speed is unknown, defaulting to 1000 [ 45.643847][ T3803] lo speed is unknown, defaulting to 1000 [ 45.769693][ T3824] lo speed is unknown, defaulting to 1000 [ 46.378702][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.415936][ T3840] set_capacity_and_notify: 6 callbacks suppressed [ 46.415950][ T3840] loop4: detected capacity change from 0 to 512 [ 46.447762][ T29] kauditd_printk_skb: 1004 callbacks suppressed [ 46.447775][ T29] audit: type=1326 audit(1767548020.786:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 46.483204][ T3842] loop3: detected capacity change from 0 to 136 [ 46.501661][ T3840] EXT4-fs (loop4): 1 truncate cleaned up [ 46.521546][ T3842] rock: directory entry would overflow storage [ 46.527711][ T3842] rock: sig=0x4f50, size=4, remaining=3 [ 46.533374][ T3842] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 46.600754][ T3840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.621519][ T3838] loop1: detected capacity change from 0 to 1024 [ 46.650340][ T29] audit: type=1326 audit(1767548020.826:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 46.673687][ T29] audit: type=1326 audit(1767548020.826:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 46.697002][ T29] audit: type=1326 audit(1767548020.826:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 46.720233][ T29] audit: type=1326 audit(1767548020.826:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 46.743570][ T29] audit: type=1326 audit(1767548020.826:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9d223f783 code=0x7ffc0000 [ 46.743601][ T29] audit: type=1326 audit(1767548020.826:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd9d223e1ff code=0x7ffc0000 [ 46.743675][ T29] audit: type=1326 audit(1767548020.826:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd9d223f7d7 code=0x7ffc0000 [ 46.743726][ T29] audit: type=1326 audit(1767548020.826:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9d223df90 code=0x7ffc0000 [ 46.743749][ T29] audit: type=1326 audit(1767548020.826:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9d223f34b code=0x7ffc0000 [ 46.752613][ T3847] lo speed is unknown, defaulting to 1000 [ 46.824854][ T3838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 46.848950][ T3838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.017199][ T3838] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.92: bg 0: block 88: padding at end of block bitmap is not set [ 47.039731][ T3838] __nla_validate_parse: 3 callbacks suppressed [ 47.039750][ T3838] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.92'. [ 47.074493][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.322220][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.342369][ T3871] loop2: detected capacity change from 0 to 1024 [ 47.361125][ T3873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.102'. [ 47.387894][ T3871] EXT4-fs: Ignoring removed bh option [ 47.413273][ T3871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.438679][ T3877] netlink: 120 bytes leftover after parsing attributes in process `syz.0.103'. [ 47.458213][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.516162][ T3883] IPv6: addrconf: prefix option has invalid lifetime [ 47.535333][ T3881] loop2: detected capacity change from 0 to 2048 [ 47.582095][ T3881] loop2: p1 < > p4 [ 47.590067][ T3881] loop2: p4 size 8388608 extends beyond EOD, truncated [ 47.737538][ T3891] lo speed is unknown, defaulting to 1000 [ 47.890555][ T3893] lo speed is unknown, defaulting to 1000 [ 48.277127][ T3900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.286061][ T3900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.307549][ T3900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.316536][ T3900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.471840][ T3900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.480863][ T3900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.109'. [ 48.563631][ T3918] loop0: detected capacity change from 0 to 512 [ 48.610380][ T3918] EXT4-fs (loop0): too many log groups per flexible block group [ 48.668684][ T3918] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 48.683846][ T3927] loop3: detected capacity change from 0 to 1024 [ 48.693388][ T3918] EXT4-fs (loop0): mount failed [ 48.693802][ T3927] EXT4-fs: Ignoring removed orlov option [ 48.721952][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.736869][ T3924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 48.736869][ T3924] program syz.2.116 not setting count and/or reply_len properly [ 48.858313][ T3936] loop0: detected capacity change from 0 to 2048 [ 48.890735][ T3926] loop0: p1 < > p4 [ 48.896244][ T3926] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.935067][ T3936] loop0: p1 < > p4 [ 48.941815][ T3936] loop0: p4 size 8388608 extends beyond EOD, truncated [ 49.041310][ T3939] veth2: entered promiscuous mode [ 49.062015][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.076753][ T3926] udevd[3926]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.094608][ T3941] loop0: detected capacity change from 0 to 512 [ 49.110104][ T3941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.130949][ T3941] EXT4-fs (loop0): too many log groups per flexible block group [ 49.143604][ T3941] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 49.150537][ T3941] EXT4-fs (loop0): mount failed [ 49.212846][ T3951] io-wq is not configured for unbound workers [ 49.227565][ T3953] lo speed is unknown, defaulting to 1000 [ 49.266602][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 49.282385][ T3956] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 49.351406][ T3961] loop4: detected capacity change from 0 to 1024 [ 49.358283][ T3961] EXT4-fs: Ignoring removed orlov option [ 49.413287][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.525511][ T3953] lo speed is unknown, defaulting to 1000 [ 49.553578][ T3966] EXT4-fs (loop2): too many log groups per flexible block group [ 49.564948][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.627283][ T3966] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 49.674830][ T3966] EXT4-fs (loop2): mount failed [ 49.700302][ T3926] loop3: p1 < > p4 [ 49.709375][ T3926] loop3: p4 size 8388608 extends beyond EOD, truncated [ 49.721917][ T3978] veth2: entered promiscuous mode [ 49.733562][ T3975] loop3: p1 < > p4 [ 49.749838][ T3975] loop3: p4 size 8388608 extends beyond EOD, truncated [ 49.866553][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.880288][ T3926] udevd[3926]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.920250][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.931104][ T3926] udevd[3926]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.990412][ T3989] lo speed is unknown, defaulting to 1000 [ 50.220778][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.301061][ T3997] hub 2-0:1.0: USB hub found [ 50.311121][ T3997] hub 2-0:1.0: 8 ports detected [ 50.444445][ T4001] siw: device registration error -23 [ 50.530620][ T4005] lo speed is unknown, defaulting to 1000 [ 50.885361][ T4012] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 50.914997][ T4012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.978872][ T4020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.988495][ T4020] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 51.000321][ T4020] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 51.108294][ T4025] EXT4-fs (loop4): too many log groups per flexible block group [ 51.121997][ T4012] gretap1: entered promiscuous mode [ 51.129763][ T4012] bond1: (slave gretap1): making interface the new active one [ 51.137627][ T4012] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 51.154438][ T4025] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 51.199476][ T4025] EXT4-fs (loop4): mount failed [ 51.237839][ T4032] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 51.306094][ T4028] EXT4-fs: Ignoring removed bh option [ 51.311604][ T4028] EXT4-fs: Ignoring removed nobh option [ 51.368335][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.149: corrupted inode contents [ 51.472525][ T4028] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.149: mark_inode_dirty error [ 51.517664][ T29] kauditd_printk_skb: 894 callbacks suppressed [ 51.517677][ T29] audit: type=1400 audit(1767548025.856:2492): avc: denied { read open } for pid=4051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.554488][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.149: corrupted inode contents [ 51.574328][ T4049] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 51.580919][ T4049] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.588483][ T4049] vhci_hcd vhci_hcd.0: Device attached [ 51.588930][ T29] audit: type=1400 audit(1767548025.896:2493): avc: denied { getattr } for pid=4051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.619247][ T29] audit: type=1400 audit(1767548025.896:2494): avc: denied { getattr } for pid=4051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=507 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.619274][ T4028] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.149: mark_inode_dirty error [ 51.619743][ T4028] Quota error (device loop0): write_blk: dquota write failed [ 51.679258][ T4028] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 51.691423][ T4028] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.149: Failed to acquire dquot type 0 [ 51.694111][ T29] audit: type=1400 audit(1767548025.996:2495): avc: denied { read } for pid=4056 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=507 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.713844][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.149: corrupted inode contents [ 51.724413][ T29] audit: type=1400 audit(1767548025.996:2496): avc: denied { open } for pid=4056 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=507 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.794502][ T4028] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.149: mark_inode_dirty error [ 51.806667][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.149: corrupted inode contents [ 51.828570][ T4062] bridge_slave_0: left allmulticast mode [ 51.834246][ T4062] bridge_slave_0: left promiscuous mode [ 51.839886][ T3594] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 51.840017][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.860182][ T4050] vhci_hcd: connection reset by peer [ 51.870029][ T2097] vhci_hcd vhci_hcd.3: stop threads [ 51.875243][ T2097] vhci_hcd vhci_hcd.3: release socket [ 51.880649][ T2097] vhci_hcd vhci_hcd.3: disconnect device [ 51.891889][ T4066] set_capacity_and_notify: 4 callbacks suppressed [ 51.891902][ T4066] loop4: detected capacity change from 0 to 512 [ 51.892675][ T4064] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 51.898949][ T4066] vfat: Unknown parameter '|hec`' [ 51.919530][ T29] audit: type=1400 audit(1767548026.256:2497): avc: denied { add_name } for pid=4048 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.942174][ T29] audit: type=1400 audit(1767548026.256:2498): avc: denied { create } for pid=4048 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.964712][ T29] audit: type=1400 audit(1767548026.256:2499): avc: denied { write } for pid=4048 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=1924 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.969480][ T4028] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.149: mark_inode_dirty error [ 52.006730][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.149: corrupted inode contents [ 52.020632][ T4028] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 52.021060][ T4062] bridge_slave_1: left allmulticast mode [ 52.029807][ T4028] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.149: corrupted inode contents [ 52.034850][ T4062] bridge_slave_1: left promiscuous mode [ 52.047031][ T4028] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.149: mark_inode_dirty error [ 52.052199][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.063459][ T4028] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 52.087048][ T4062] bond0: (slave bond_slave_0): Releasing backup interface [ 52.096659][ T4028] EXT4-fs (loop0): 1 truncate cleaned up [ 52.108720][ T4062] team0: Port device team_slave_0 removed [ 52.116429][ T4028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.135128][ T4028] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.152786][ T4062] team0: Port device team_slave_1 removed [ 52.170068][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.177440][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.203000][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.210458][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.221747][ T4062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.245837][ T4028] syz.0.149 (4028) used greatest stack depth: 9680 bytes left [ 52.254907][ T4064] batman_adv: batadv0: Adding interface: veth1_vlan [ 52.261526][ T4064] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.324072][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.339524][ T4064] batman_adv: batadv0: Interface activated: veth1_vlan [ 52.385845][ T4094] veth2: entered promiscuous mode [ 52.411594][ T4101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.477701][ T4113] __nla_validate_parse: 3 callbacks suppressed [ 52.477713][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 52.487668][ T4101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.500338][ T4113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 52.565717][ T4105] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 52.572253][ T4105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.579802][ T4105] vhci_hcd vhci_hcd.0: Device attached [ 52.586495][ T4101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.603376][ T4122] vhci_hcd: connection closed [ 52.603606][ T53] vhci_hcd vhci_hcd.1: stop threads [ 52.613569][ T53] vhci_hcd vhci_hcd.1: release socket [ 52.618940][ T53] vhci_hcd vhci_hcd.1: disconnect device [ 52.663757][ T4101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.738686][ T4144] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 52.765310][ T2153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.781295][ T2153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.806404][ T2153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.825724][ T2153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.876806][ T4161] loop3: detected capacity change from 0 to 512 [ 52.887946][ T4161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.903334][ T4163] netlink: 268 bytes leftover after parsing attributes in process `syz.0.169'. [ 52.917505][ T4163] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 52.927962][ T4161] EXT4-fs (loop3): 1 truncate cleaned up [ 52.934132][ T4161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.955235][ T4161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.168'. [ 53.011905][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.055230][ T4171] loop2: detected capacity change from 0 to 512 [ 53.062121][ T4171] EXT4-fs: Ignoring removed nobh option [ 53.071522][ T4171] netlink: 176 bytes leftover after parsing attributes in process `syz.2.172'. [ 53.107402][ T4174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 53.139423][ T4174] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 53.149043][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 53.161747][ T4179] bridge_slave_0: left allmulticast mode [ 53.167418][ T4179] bridge_slave_0: left promiscuous mode [ 53.173139][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.181930][ T4179] bridge_slave_1: left allmulticast mode [ 53.187605][ T4179] bridge_slave_1: left promiscuous mode [ 53.193264][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.203079][ T4181] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 53.210905][ T4181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.176'. [ 53.220335][ T4179] : (slave bond_slave_0): Releasing backup interface [ 53.230509][ T4179] : (slave bond_slave_1): Releasing backup interface [ 53.241907][ T4179] team0: Port device team_slave_0 removed [ 53.251235][ T4179] team0: Port device team_slave_1 removed [ 53.257887][ T4179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.265335][ T4179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.274647][ T4179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.282168][ T4179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.331912][ T4179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.358060][ T2153] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.371088][ T4181] batman_adv: batadv0: Adding interface: veth1_vlan [ 53.377698][ T4181] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.403419][ T4181] batman_adv: batadv0: Interface activated: veth1_vlan [ 53.415563][ T2153] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.425289][ T2153] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.442008][ T2153] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.544432][ T4197] veth2: entered promiscuous mode [ 53.653854][ T4208] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 53.805491][ T4208] team0: Port device dummy0 added [ 53.831478][ T4210] lo speed is unknown, defaulting to 1000 [ 53.924717][ T4208] syz.3.181 (4208) used greatest stack depth: 9160 bytes left [ 54.160791][ T4229] capability: warning: `syz.2.183' uses deprecated v2 capabilities in a way that may be insecure [ 54.396692][ T4236] loop2: detected capacity change from 0 to 1024 [ 54.404127][ T4243] loop4: detected capacity change from 0 to 512 [ 54.410809][ T4243] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 54.420293][ T4236] EXT4-fs: Ignoring removed orlov option [ 54.447685][ T4239] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 54.454261][ T4239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.461846][ T4239] vhci_hcd vhci_hcd.0: Device attached [ 54.470312][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 54.480510][ T4236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.487827][ T4244] vhci_hcd: connection closed [ 54.492855][ T946] vhci_hcd vhci_hcd.1: stop threads [ 54.502936][ T946] vhci_hcd vhci_hcd.1: release socket [ 54.508305][ T946] vhci_hcd vhci_hcd.1: disconnect device [ 54.535828][ T4247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 54.592781][ T4247] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.601456][ T53] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.618724][ T53] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.636341][ T4227] loop3: detected capacity change from 0 to 512 [ 54.659844][ T4227] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.182: EA inode hash validation failed [ 54.672456][ T4227] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.182: corrupted inode contents [ 54.673333][ T53] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.693583][ T53] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.709814][ T4227] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.182: mark_inode_dirty error [ 54.871300][ T4260] IPVS: stopping master sync thread 4259 ... [ 55.067732][ T4227] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.182: corrupted inode contents [ 55.079623][ T4227] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.182: mark_inode_dirty error [ 55.091634][ T4227] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.182: mark inode dirty (error -117) [ 55.104345][ T4227] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 55.113409][ T4227] EXT4-fs (loop3): 1 orphan inode deleted [ 55.119610][ T4227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.133011][ T4227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.153805][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.240614][ T4267] siw: device registration error -23 [ 55.333171][ T4277] bridge0: entered allmulticast mode [ 55.345901][ T4273] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 55.417547][ T4279] loop2: detected capacity change from 0 to 512 [ 55.472397][ T4279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.523941][ T4279] EXT4-fs (loop2): 1 truncate cleaned up [ 55.533490][ T4279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.559326][ T4273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.570675][ T4273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.597283][ T4288] loop3: detected capacity change from 0 to 1024 [ 55.606475][ T4288] EXT4-fs: Ignoring removed orlov option [ 55.635002][ T4288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.671816][ T4273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.683258][ T4273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.849719][ T4273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.861349][ T4273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.919956][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.961383][ T4293] veth4: entered promiscuous mode [ 56.071657][ T4273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.083704][ T4273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 56.126576][ T4320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.152012][ T4320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.290141][ T2153] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.298421][ T2153] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.335317][ T2153] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.343661][ T2153] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.352314][ T2153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.360681][ T2153] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.431373][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.662833][ T4329] SET target dimension over the limit! [ 56.733057][ T2153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 56.741375][ T2153] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 56.756853][ T4332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 56.766723][ T4332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 56.846178][ T29] kauditd_printk_skb: 932 callbacks suppressed [ 56.846190][ T29] audit: type=1326 audit(1767548031.186:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f279a5b65e7 code=0x7ffc0000 [ 56.881307][ T4332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 56.881331][ T29] audit: type=1326 audit(1767548031.216:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f279a55b829 code=0x7ffc0000 [ 56.881356][ T29] audit: type=1326 audit(1767548031.216:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f279a5b65e7 code=0x7ffc0000 [ 56.891274][ T4332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 56.914412][ T29] audit: type=1326 audit(1767548031.216:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f279a55b829 code=0x7ffc0000 [ 56.939511][ T3594] usb 7-1: enqueue for inactive port 0 [ 56.947355][ T29] audit: type=1326 audit(1767548031.216:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 56.999284][ T29] audit: type=1326 audit(1767548031.216:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 57.019768][ T3594] usb 7-1: enqueue for inactive port 0 [ 57.022611][ T29] audit: type=1326 audit(1767548031.216:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 57.051291][ T29] audit: type=1326 audit(1767548031.216:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 57.074727][ T29] audit: type=1326 audit(1767548031.216:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 57.098040][ T29] audit: type=1326 audit(1767548031.216:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 57.151162][ T4332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 57.161066][ T4332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 57.170816][ T3594] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 57.178371][ T4347] loop3: detected capacity change from 0 to 128 [ 57.187366][ T4326] loop4: detected capacity change from 0 to 512 [ 57.200033][ T4326] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.205: EA inode hash validation failed [ 57.213037][ T4326] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.205: corrupted inode contents [ 57.225421][ T4326] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.205: mark_inode_dirty error [ 57.240118][ T4332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 57.249995][ T4332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 57.261149][ T4326] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.205: corrupted inode contents [ 57.274314][ T4326] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.205: mark_inode_dirty error [ 57.286966][ T4326] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.205: mark inode dirty (error -117) [ 57.300065][ T4326] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 57.311384][ T4326] EXT4-fs (loop4): 1 orphan inode deleted [ 57.315336][ T4347] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 57.317531][ T4326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.324970][ T4347] FAT-fs (loop3): Filesystem has been set read-only [ 57.339006][ T4326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.343634][ T4347] bio_check_eod: 17 callbacks suppressed [ 57.343646][ T4347] syz.3.209: attempt to access beyond end of device [ 57.343646][ T4347] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 57.371808][ T4347] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 57.379700][ T4347] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 57.387652][ T4347] syz.3.209: attempt to access beyond end of device [ 57.387652][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.401803][ T4347] syz.3.209: attempt to access beyond end of device [ 57.401803][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.415595][ T4347] syz.3.209: attempt to access beyond end of device [ 57.415595][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.429563][ T4347] syz.3.209: attempt to access beyond end of device [ 57.429563][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.443323][ T4347] syz.3.209: attempt to access beyond end of device [ 57.443323][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.457426][ T4347] syz.3.209: attempt to access beyond end of device [ 57.457426][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.471173][ T4347] syz.3.209: attempt to access beyond end of device [ 57.471173][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.485159][ T4347] syz.3.209: attempt to access beyond end of device [ 57.485159][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.498869][ T4347] syz.3.209: attempt to access beyond end of device [ 57.498869][ T4347] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.545653][ T4355] loop4: detected capacity change from 0 to 128 [ 57.593784][ T4357] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 58.051147][ T4365] loop1: detected capacity change from 0 to 512 [ 58.062062][ T4365] vfat: Unknown parameter '|hec`' [ 58.198902][ T4374] loop1: detected capacity change from 0 to 512 [ 58.221528][ T4374] EXT4-fs (loop1): too many log groups per flexible block group [ 58.236938][ T4374] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 58.244339][ T4374] EXT4-fs (loop1): mount failed [ 58.321055][ T4378] __nla_validate_parse: 1 callbacks suppressed [ 58.321071][ T4378] netlink: 44 bytes leftover after parsing attributes in process `syz.1.218'. [ 59.662062][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 59.670984][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.678351][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.686314][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.693740][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.812002][ T4411] loop4: detected capacity change from 0 to 512 [ 59.833162][ T4411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.857333][ T4411] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.883698][ T4416] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 59.906401][ T4416] loop3: detected capacity change from 0 to 512 [ 59.933606][ T4416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.948931][ T4416] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.231: inode has both inline data and extents flags [ 59.977347][ T4416] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.231: couldn't read orphan inode 15 (err -117) [ 59.991016][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.019561][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.101022][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.208975][ T4429] loop0: detected capacity change from 0 to 4096 [ 60.221455][ T4429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.575711][ T4435] netlink: 44 bytes leftover after parsing attributes in process `syz.1.236'. [ 60.739573][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.860753][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 60.869076][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 60.905312][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 60.913642][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 60.943424][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 60.951767][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 60.961548][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 60.969888][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 60.988195][ T4443] : renamed from vlan0 (while UP) [ 61.034362][ T4447] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 61.042144][ T4447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.237'. [ 61.103347][ T4453] netem: change failed [ 61.246218][ T4460] loop4: detected capacity change from 0 to 2048 [ 61.314016][ T3926] Alternate GPT is invalid, using primary GPT. [ 61.320343][ T3926] loop4: p2 p3 p7 [ 61.344784][ T4464] loop1: detected capacity change from 0 to 512 [ 61.370618][ T4464] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.238: EA inode hash validation failed [ 61.407937][ T4464] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.238: corrupted inode contents [ 61.420387][ T4464] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.238: mark_inode_dirty error [ 61.432343][ T4464] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.238: corrupted inode contents [ 61.444530][ T4464] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.238: mark_inode_dirty error [ 61.457396][ T4464] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.238: mark inode dirty (error -117) [ 61.470311][ T4464] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 61.479825][ T4464] EXT4-fs (loop1): 1 orphan inode deleted [ 61.486041][ T4464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.504051][ T4464] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.572423][ T4460] Alternate GPT is invalid, using primary GPT. [ 61.578809][ T4460] loop4: p2 p3 p7 [ 61.672370][ T4473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 61.683752][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 61.694915][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 61.706013][ T3926] udevd[3926]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 61.799474][ T4478] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.837579][ T4478] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.849912][ T29] kauditd_printk_skb: 3002 callbacks suppressed [ 61.849975][ T29] audit: type=1326 audit(1767548036.196:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9d2272005 code=0x7ffc0000 [ 61.900891][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 61.903083][ T29] audit: type=1400 audit(1767548036.196:6445): avc: denied { write } for pid=4475 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.929751][ T29] audit: type=1326 audit(1767548036.196:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 61.929776][ T29] audit: type=1326 audit(1767548036.206:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 61.929811][ T29] audit: type=1326 audit(1767548036.226:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 61.929833][ T29] audit: type=1326 audit(1767548036.236:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9d2272005 code=0x7ffc0000 [ 61.929854][ T29] audit: type=1326 audit(1767548036.236:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd9d223f749 code=0x7ffc0000 [ 61.929873][ T29] audit: type=1326 audit(1767548036.236:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9d2272005 code=0x7ffc0000 [ 61.929970][ T29] audit: type=1326 audit(1767548036.236:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9d2272005 code=0x7ffc0000 [ 61.930050][ T29] audit: type=1326 audit(1767548036.236:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9d2272005 code=0x7ffc0000 [ 61.962529][ T4482] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.964859][ T4482] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.037274][ T4478] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.236456][ T4478] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.286871][ T4308] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.298518][ T4308] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.310296][ T4298] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.322681][ T4298] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.543402][ T4496] set_capacity_and_notify: 1 callbacks suppressed [ 62.543415][ T4496] loop2: detected capacity change from 0 to 2048 [ 62.597168][ T4496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 62.715705][ T4504] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 62.722275][ T4504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.729989][ T4504] vhci_hcd vhci_hcd.0: Device attached [ 62.760219][ T4505] vhci_hcd: connection closed [ 62.760331][ T4301] vhci_hcd vhci_hcd.0: stop threads [ 62.770244][ T4301] vhci_hcd vhci_hcd.0: release socket [ 62.775616][ T4301] vhci_hcd vhci_hcd.0: disconnect device [ 62.881906][ T4301] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.892633][ T4301] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.908003][ T4301] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 62.920376][ T4301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.920376][ T4301] [ 62.930035][ T4301] EXT4-fs (loop2): Total free blocks count 0 [ 62.936009][ T4301] EXT4-fs (loop2): Free/Dirty block details [ 62.941940][ T4301] EXT4-fs (loop2): free_blocks=2415919104 [ 62.947705][ T4301] EXT4-fs (loop2): dirty_blocks=32 [ 62.952893][ T4301] EXT4-fs (loop2): Block reservation details [ 62.958867][ T4301] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 62.984153][ T4513] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 63.002467][ T4513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.028044][ T4513] macvlan2: entered promiscuous mode [ 63.033405][ T4513] macvlan2: entered allmulticast mode [ 63.062059][ T4513] bond1: entered promiscuous mode [ 63.068664][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 63.078519][ T4513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.138946][ T4513] bond1: left promiscuous mode [ 63.213326][ T4522] loop4: detected capacity change from 0 to 2048 [ 63.241050][ T4522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.417872][ T4532] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 63.424474][ T4532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.432058][ T4532] vhci_hcd vhci_hcd.0: Device attached [ 63.448160][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.489668][ T4536] netlink: 'syz.4.263': attribute type 12 has an invalid length. [ 63.497420][ T4536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.263'. [ 63.593624][ T4533] vhci_hcd: connection closed [ 63.593960][ T4301] vhci_hcd vhci_hcd.0: stop threads [ 63.603912][ T4301] vhci_hcd vhci_hcd.0: release socket [ 63.609457][ T4301] vhci_hcd vhci_hcd.0: disconnect device [ 63.614130][ T4538] syz.4.264 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.629543][ T4118] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 63.657302][ T4541] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.687306][ T4543] loop3: detected capacity change from 0 to 512 [ 63.705980][ T4545] loop4: detected capacity change from 0 to 1024 [ 63.720879][ T4545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 63.738808][ T4550] loop3: detected capacity change from 0 to 512 [ 63.745440][ T4545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 63.761507][ T4550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.268: bg 0: block 248: padding at end of block bitmap is not set [ 63.802059][ T4550] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.268: Failed to acquire dquot type 1 [ 63.815909][ T4550] EXT4-fs (loop3): 1 truncate cleaned up [ 63.823914][ T4550] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.840400][ T4550] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.268: deleted inode referenced: 12 [ 63.891219][ T4545] loop4: detected capacity change from 0 to 1024 [ 63.901355][ T4545] EXT4-fs: inline encryption not supported [ 63.907184][ T4545] EXT4-fs: Ignoring removed orlov option [ 63.917981][ T4545] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.930362][ T4545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84cc018, mo2=0002] [ 63.938649][ T4545] System zones: 0-1, 3-12 [ 63.938800][ T4550] syz.3.268 (4550) used greatest stack depth: 9088 bytes left [ 64.004145][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 64.034688][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 64.051502][ T4562] loop2: detected capacity change from 0 to 128 [ 64.063517][ T4562] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.096258][ T4562] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.113338][ T4564] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 64.122084][ T4315] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 64.130811][ T4315] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 64.139490][ T4315] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 64.147983][ T4315] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 64.158898][ T4298] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.196472][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 64.274864][ T4574] team0: Port device dummy0 removed [ 64.292081][ T4577] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.275'. [ 64.300907][ T4574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.357517][ T4574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.275'. [ 64.383237][ T4574] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 64.391034][ T4574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.275'. [ 64.402545][ T4574] batman_adv: batadv0: Adding interface: veth1 [ 64.409058][ T4574] batman_adv: batadv0: Interface activated: veth1 [ 64.409767][ T4581] loop4: detected capacity change from 0 to 512 [ 64.428974][ T4581] EXT4-fs (loop4): can't read group descriptor 0 [ 64.952985][ T4304] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.402787][ T4704] loop3: detected capacity change from 0 to 2048 [ 65.420912][ T4704] EXT4-fs mount: 4 callbacks suppressed [ 65.421003][ T4704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 65.556291][ T4727] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.571675][ T4727] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1824 with error 28 [ 65.584185][ T4727] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.584185][ T4727] [ 65.593882][ T4727] EXT4-fs (loop3): Total free blocks count 0 [ 65.599965][ T4727] EXT4-fs (loop3): Free/Dirty block details [ 65.606009][ T4727] EXT4-fs (loop3): free_blocks=2415919104 [ 65.611823][ T4727] EXT4-fs (loop3): dirty_blocks=1840 [ 65.617177][ T4727] EXT4-fs (loop3): Block reservation details [ 65.623207][ T4727] EXT4-fs (loop3): i_reserved_data_blocks=115 [ 65.703105][ T4304] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 65.850944][ T4754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.286'. [ 66.505439][ T3487] Bluetooth: hci0: command 0x1003 tx timeout [ 66.511794][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.646583][ T4765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 66.834302][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 66.934639][ T4767] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 66.943500][ T4302] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.956886][ T4302] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.974592][ T29] kauditd_printk_skb: 2755 callbacks suppressed [ 66.974604][ T29] audit: type=1400 audit(1767548041.316:9207): avc: denied { create } for pid=4773 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.819249][ T4308] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.956592][ T29] audit: type=1400 audit(1767548041.826:9208): avc: denied { mount } for pid=4768 comm="syz.2.290" name="/" dev="rpc_pipefs" ino=9237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 68.075753][ T29] audit: type=1400 audit(1767548042.416:9209): avc: denied { bind } for pid=4787 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.095254][ T4308] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.215555][ T29] audit: type=1326 audit(1767548042.456:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 68.238917][ T29] audit: type=1326 audit(1767548042.456:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 68.262358][ T29] audit: type=1326 audit(1767548042.456:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 68.285763][ T29] audit: type=1326 audit(1767548042.456:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 68.309149][ T29] audit: type=1326 audit(1767548042.456:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 68.332473][ T29] audit: type=1326 audit(1767548042.456:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 68.355782][ T29] audit: type=1326 audit(1767548042.456:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279a5bf749 code=0x7ffc0000 [ 68.796232][ T4780] No such timeout policy "syz1" [ 69.027391][ T4806] loop1: detected capacity change from 0 to 2048 [ 69.055934][ T4806] EXT4-fs error (device loop1): __ext4_iget:5426: inode #2: block 127754: comm syz.1.299: invalid block [ 69.093186][ T4806] EXT4-fs (loop1): get root inode failed [ 69.098851][ T4806] EXT4-fs (loop1): mount failed [ 69.130172][ T4806] netlink: 'syz.1.299': attribute type 39 has an invalid length. [ 69.370628][ T4815] random: crng reseeded on system resumption [ 69.407969][ T4820] loop4: detected capacity change from 0 to 128 [ 69.605802][ T4831] __nla_validate_parse: 1 callbacks suppressed [ 69.605817][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 69.631662][ T4808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 69.640966][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 69.649851][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 69.671361][ T4808] loop2: detected capacity change from 0 to 128 [ 69.682806][ T4808] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.702646][ T4831] loop0: detected capacity change from 0 to 128 [ 69.709696][ T4831] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.732485][ T4831] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.749724][ T4808] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.912854][ T4834] ================================================================== [ 69.920963][ T4834] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 69.928881][ T4834] [ 69.931202][ T4834] write to 0xffff8881004ace14 of 4 bytes by task 4831 on cpu 0: [ 69.938826][ T4834] xas_set_mark+0x12b/0x140 [ 69.943331][ T4834] __folio_start_writeback+0x155/0x340 [ 69.948793][ T4834] mpage_writepages+0xd18/0x1250 [ 69.953722][ T4834] fat_writepages+0x24/0x30 [ 69.958213][ T4834] do_writepages+0x1c6/0x310 [ 69.962797][ T4834] file_write_and_wait_range+0x156/0x2c0 [ 69.968412][ T4834] __generic_file_fsync+0x46/0x160 [ 69.973513][ T4834] fat_file_fsync+0x49/0x100 [ 69.978088][ T4834] vfs_fsync_range+0x10d/0x130 [ 69.982834][ T4834] generic_file_write_iter+0x1b8/0x2f0 [ 69.988294][ T4834] iter_file_splice_write+0x66b/0xa20 [ 69.993667][ T4834] direct_splice_actor+0x156/0x2a0 [ 69.998769][ T4834] splice_direct_to_actor+0x312/0x680 [ 70.004129][ T4834] do_splice_direct+0xda/0x150 [ 70.008876][ T4834] do_sendfile+0x380/0x650 [ 70.013280][ T4834] __x64_sys_sendfile64+0x105/0x150 [ 70.018464][ T4834] x64_sys_call+0x2db1/0x3000 [ 70.023137][ T4834] do_syscall_64+0xca/0x2b0 [ 70.027642][ T4834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.033524][ T4834] [ 70.035834][ T4834] read to 0xffff8881004ace14 of 4 bytes by task 4834 on cpu 1: [ 70.043366][ T4834] __writeback_single_inode+0x201/0x7c0 [ 70.048914][ T4834] writeback_single_inode+0x16d/0x3f0 [ 70.054285][ T4834] sync_inode_metadata+0x5b/0x90 [ 70.059214][ T4834] __generic_file_fsync+0x109/0x160 [ 70.064401][ T4834] fat_file_fsync+0x49/0x100 [ 70.068978][ T4834] vfs_fsync_range+0x10d/0x130 [ 70.073727][ T4834] generic_file_write_iter+0x1b8/0x2f0 [ 70.079174][ T4834] iter_file_splice_write+0x66b/0xa20 [ 70.084530][ T4834] direct_splice_actor+0x156/0x2a0 [ 70.089621][ T4834] splice_direct_to_actor+0x312/0x680 [ 70.094975][ T4834] do_splice_direct+0xda/0x150 [ 70.099722][ T4834] do_sendfile+0x380/0x650 [ 70.104123][ T4834] __x64_sys_sendfile64+0x105/0x150 [ 70.109305][ T4834] x64_sys_call+0x2db1/0x3000 [ 70.113970][ T4834] do_syscall_64+0xca/0x2b0 [ 70.118464][ T4834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.124341][ T4834] [ 70.126645][ T4834] value changed: 0x0a000021 -> 0x04000021 [ 70.132338][ T4834] [ 70.134641][ T4834] Reported by Kernel Concurrency Sanitizer on: [ 70.140779][ T4834] CPU: 1 UID: 0 PID: 4834 Comm: syz.0.308 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.150391][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.160429][ T4834] ================================================================== [ 70.277829][ T4836] loop4: detected capacity change from 0 to 128 [ 70.340146][ T4302] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.543918][ T4302] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)