last executing test programs: 17.338005519s ago: executing program 4 (id=39): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d0009000000060008001500000008000300", @ANYRES8], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 17.292317003s ago: executing program 4 (id=40): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 17.225210068s ago: executing program 4 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 17.128634786s ago: executing program 4 (id=45): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_register(r0, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x46]}, 0x35) 17.057235142s ago: executing program 4 (id=47): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote, 0x1000}}}, 0x84) 16.598281759s ago: executing program 4 (id=57): mknod$loop(0x0, 0x6000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x24, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x0, 0x3, 0x6}, {0x4, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 16.574227191s ago: executing program 32 (id=57): mknod$loop(0x0, 0x6000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x24, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x0, 0x3, 0x6}, {0x4, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 6.148590999s ago: executing program 0 (id=321): mprotect(&(0x7f000032b000/0x1000)=nil, 0x1000, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x9}, 0x18) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x60fffffe) 6.02173899s ago: executing program 0 (id=327): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003bc0)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @local}, 0x14) 5.682950507s ago: executing program 0 (id=330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) 5.632562281s ago: executing program 0 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 5.487859053s ago: executing program 0 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x20) 4.426159559s ago: executing program 0 (id=374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26e8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 4.368787904s ago: executing program 33 (id=374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26e8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.97101462s ago: executing program 2 (id=419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x1, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x0, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.827560721s ago: executing program 2 (id=422): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.685168843s ago: executing program 1 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.644542676s ago: executing program 2 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") 1.437082303s ago: executing program 2 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.161110066s ago: executing program 1 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.155742486s ago: executing program 2 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r2, &(0x7f0000000040), 0x2) close(r2) 1.095939121s ago: executing program 1 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x3d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x2}) 1.064563303s ago: executing program 1 (id=443): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x100, 0x1}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000030803"], 0xc4}, 0x1, 0x0, 0x0, 0x640400c0}, 0x20000050) 1.044091795s ago: executing program 2 (id=444): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 1.037441266s ago: executing program 3 (id=445): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) write(r2, 0x0, 0x0) 873.361109ms ago: executing program 6 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 844.517871ms ago: executing program 3 (id=448): r0 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, 0x0, &(0x7f0000000680)) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x20006, &(0x7f0000002580)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="ae7a380973d2de6e47d19b92bb9f3e0fe0e7edf95ed684052cd454d4e68b0eac3c5d2b67d62855e5468d279b227bb03f63fdd08b1545027e781b0c8f69590f0b69a4f9d51bdd5eacafd0adef8de8c76b362714137cd6bbd58308d28201f324d7ddf88d94d437df45873d7746557fbb949773a5441f44643fff0614a74146fbe54374776d2dd1ff890fbebc75c2daea0064853120ac08d2a590283d0cd542b451d36f823ee78b3aaa662ce889f4feb7a495743ad4831b687a24154b50c9950f0b840813fc8c287053224f1e9a10c397e194fe467b34bcda971d121549301845cd2d07b92e9cd4fae9b8a9950295fcd6c8fa506bfd4c58949b0de6e08015d3f8ff93b4be3113ae1f894bdf6769e21fb89aceba768b390f4ac23eb6f28f51fae1b08dac7ea21991c9bdb7b244d1a8ec45fb94dc7ad68693a75a732d99e8fcbcede87dfe4722a2c3a6929c188fbf47a524e8b9aa3da88fa1533cc2309cbe1b0db27557558b2e1de770371998904b7ba51e782e062ec7cfc74548b11a48f761297594f7e498d98031f61720167b2a188a48a057e84cf87f4de5198f34a90651be6e18b8b164b1a2b719af4ef0323c8f605e324c51698cd936439e61c6db05c24ad3f59a454fc9d7214bc526d5973940da1658f30ab76df9a35d823565d75682844f8ffc028976bcd5f61d98dc48febfd366533f36723a3d2c8c29571a9e909b415dd3c8dbdd2716bcb6731090a2611df2110aa6fdf04bc81702539b9376aa11bce270fbd79e319399d43af0aefcb8220bb93b2afc54e7c351f691858978025498655531de10950789dd0de69cd9fe5b9f73aca3dd8a940ba1ca1c392f51a46f4b01d362f1b3b07b6e0f9b0e5ec3585e591d935c454eea04a2ed9c0c6e6c76d689515bd65a6d04f025ac8bd5d9b56a721268d992c86fad1e82af6e332da6e4842896b24450bd67d6ddfa95ea3d2336ee192aa53fccc5e0885d8c9db72173332fb3383b2bd9e53ec4b87ccbdbd80d31847ede6a6940896e0d3c604acb3a7dd87f3bc05acc6a78e43ff92d6d41f2db99316d84b4152e23357f8f7b8646d5e91e41732439c3c27459c678d6f2563fa3938e53e5f24802af60427e37da895be16cf62cfd9512baf97d73386b25a2b92e866ea89e776f4253d3ed6e30f14d06f72cd168d8e742e32bf1bcbe3bae3b1a8c0dff2a615fa59cdb5dee9c25eaf3c61defd23b8a0760610e9e432b2b15fba19933c328e5d08dd97cedc0c5304e5100ee14523f0aab3fdae8677bce5fa44f503f15621c84e6375030f39897801fb96ec2b22760fae5d8daea1271c5154c87c2ecee8aa8104f5c81f94c082919bcc686fc3f44a18e82facbfae3c7f894a635476ceed84e2c664159a1b40509002ee523cf6e5afa12d54f011909a00354816147649663c8dc17421863f7322412bda2eaf82c58a0853c6679e0c5ed983ec9777812787f9fa6708b2d4f4d900a1637b8324466dd62497f3898cc86828d445eb0209521470d85f1a0c928f321d1bba08a7a10b10bbe389b79f9b90fa9e48bc8ce9604b6ff37bb181db51e681d48e792c9d9aa274f5cfe293a83c4f21aa40f367b96273ae2e345300451add6b6467ec6a9724caaf0a698e1a72c0b1086940021fc4eb910200c7a34a794c2abb9725fe42ec75393adc771b5c548e5387d75a566d67af5a3519a0c9ec3636ef6b43be14e7cd8675c398b7b7341103274ba18c5281a89de5a996134ebc749b5ff85b595a014a2be43772aa902c1af5e91d9b295d5079b8e4280c3d4a59dbeaf388c4f7287af072ce8bef97a2067ff8039d42cb9fdfac621e7458245c5092c5968237936f6ebeaab422cb7dbd14a706c14050dd5f10fc663c9e4bbccb2bfc106d9c2e2d810992df9155d0767515b18ad67ed4e3ffc936514421e8f724dc99d2f389e246ad19eb7b5462a23717edb920ee4e1f33a3ed26d6c397a344f462ceae40771527e98925c031e67df7857ebfece200f216b217fd7f8ba538f1d0824fafff97fb7864e27f47a8a78f8f3bd17d2857e69f4219afebad552be0e271752a1a5d4d5a260992cda823f59dba16c00d102b221df51ddf0150c2a851e5b094cbefdf239eb671728089e319aa30c74c6afb130cde55ae4f154b8215ffc11e153f2a2f6295ad24e44ca4db5a27ba9ac7f88d121fda29cf94a9bf5b691ce48d6a2614c8963eee87f83f7056589d4052090030f2161b7206c3e57d98490581e1d2aec24711d063bba15df34bdc4f6911cb3d9cba6dd16643958fec35cde391eaa6abf0fdf8c000be1e78c926de2a4ccd9c7aa621cd1ddeee14ab03035e6d094fcac2be09feef72af37016d34a9bc4b487def8706695b5b02fb9277e4b2cecd1182014f1eff2cac2f69b908903798c2a9701dd0aa8ddc02055e52cab79c234111172353ba3c75186ea74a9e124aebc38619a1693c078e4d8db2f541464229f0ca6beada8b8f89fa5fb4f3cc0fdd11eff033557cf84873a0d6365e219be3d14d7b409895b6aa22cca88ab45e865e9d1b2d629392b1f6ccec08fe1b1e89f4faf1a6c0fee7e855ddff018d2b1f82f420d418ae7d5d607a12916030862529fc7bdc0cc89450395d7f658340ffd9b51ae395be0cc897dfe24b3db4356a321b581989b2eda631158f6509e134184e78255585a86a9eaf9e30c45fd06a70873d8f02769d5052113859608d4d9ccf5f35dedc1a2df6c183fe6acc3e93ab9d3e0b70568767348e5d233496dc6495cb23ddb52943d2c31ce7cde3d31c6555bb0d2a793ebdaf4343016a9cd48dc1d0c9a72d59d33b3eca4811a1d9601905857e1e35c59fe02644b7f1d0412f77c6a3733737c449bf6f8a48cceb7d963c025d348f6138cef2623fd35514e3b0e883458e06c92b631d1ef878f07c55ec3c7c9428097a67410e80477cf0d00c2cc68ed6964f0417af11c1a3e11a09f65aebde02ededc7d4d9e168e48e5c810f208403f0ba693ec42d332877c3b76d07b31da4a89c71efa4dc01aaed26f7fa758f6011f0da359c4312a441bb6ac840ffa9249e9af373a78509e2ffde8f5735cd1f4c580feac6dfcadf568fad91542743db6741231a57a83b60cdfcccb918a5dece87eff19ee91a4ae9684294d148bb04aada71e47200f1b15713ea8ec40ae08de4912ade1ee1eb54b5fc5a19e974ce786bb2926ce3dd059a632305f1784200915c1f5006f2a2b7f200d85e15cbce5b2bac2263692b57e9f6815b4170c967cc0829b595cb65c4c709fb786270108de2e59bb636d61035a2ec6c7434424c332ce17e5ae3c7324a54662ad72831b0b8f86e49aa798417dc913e08797dac7e7c9983f0aa90d1deedcad9b4da14ce61769504a006ca6212565d1001a883b10d7a519fd45ba868f712d08cbff9644e8fe8eeb761985e3d0f542a8734b9754093532e1efebab1b9ba7667c85922916d2befd1586e8f7cee3504c34ba6dc1f240dcaa1a6a96eb8410ccf629bd12ecab564990ae10c82cd5a33ba4133d4ac55f8d5e6c8200e9c0e9a22ea265746ff8e892e523ba4edc50bab655c60edcb535cac2b11ce2f05b95f61cc19bbd1b49119d77576acccdfefbafd450e131e89781cec62ff02f20800b83e8cf91d134a642e5e68975baf249f0b50d8903df5c7aabbb5817b1ac7635d97008d3d9f7627ab4e7c53fe0c8d0a73e051d5681fe446511be02390fa17e6104dfcbb5f90eafd77f3c67969fa3fc00307c551402689cc1719f823766a55ed235c5868db71b02d2090fca179c04ddc50ffc062617a218b4040e13f5fe51b8de06ef48c137bd9a9065d665aad49790accbdafa7724b41b9c2072fb9acef01dc6270375773c8e08ecf43e2db7ad264b45e0744b2ec744e9d8c0bf1ad5f0e9a512e73a78fc00d53e81657c0c116e661549d26f20dda6f304a36ce1de0542f5af145d4e662352730345af0fdf05255a99646ec79b964551c9fa16dc2e01b457b54bfe159e66f590c76dc0cee352df3bdcc89e53a4f8eba643724e2f269592540305f6d2a32b3e4e3f211b4952a4ff3868a05ca7aed82d802992dacc6ce548f589c5a7ae2f49d5a20bca476e7ae8ecca63a59797944a55622464ef8cd2e357213e555ce6d8a184a21f23e972a76165bf60c14096c9e0bc7ee346172ed3fce6b3e98b018221ac6d7a4f8b372019a37ce2eb6076486c11d41844316b2dbd2f4214a23abae8c8d625c002bce9068965ea19f08a6c4828da483da991280415d2d0aa6b05cb70e579369344801ca9bda9c167022bf5b82fbba57421d5d56eb13ef35d51c0656d17875a2c852dba3f9fdb1ac8dea7e2409eb2580ce1c537f0ec8a2090f084e97e9392bf0263b5a56c25bfb0c51fe120a151427932da8dcc4e2d4fd4df249db14181465e5f153c5ae1144a4fe13054bfad276a391b0475ebdefb6f87ef93fd967969499548c93b2f5123d7b215f485747cfe117abe398c990d9d6b170c4a6f288066251c8909664ad515489e496a2f0b6a6fdc81e01ccbde418a590ddcf53932496aa2d71ef9972ddc6db3c4b65b28901fd8a3aab1e0604939592944fa44f03f42fd661f84efc36ed2c35cd33f14d2b60ffccb3fc282735c6b3def0a49ec2550f3d6e0f64b10b2a0f21cb2d7ad6f7b02d297fd1b4f48488e309ebbfa7a45091a3d7967783f0487ab3b1886d6830a1d9a60e53c3c75c9a69fb5da6ecb388f05aa58b8db4161f9d60365a799b06bd5d1f834ad5bd6a9db2474bf4115a855d8071b999d5118b7b43f0ad95f9bb6e929f70dd21f283a6202821d38e75740fff58da226d079de3d60b384cbe420c9205401c4310faf9a5f42df175e53d82e6761f29a12e2f3a1422bfa5b7c607ca6f4d5e9c2cc7952cc60fb5895706aa79da24f6102af95ad2bc101381431e68991757c51e1e021972301b1d36499c2b5a94e7c03d6c068ae46b67c27cfc32146f3a89fdb87d48d52c943e8de5041b61a7e119571b98fb1816e5fe56be603cca3af6b0b2cbb19d3935ed99127e173ef0266c03871fd247e04776bda7f68a8d31b9ee5dabc51874f4e7fbd716fb5696b5b9b78bdc40663360afc3e32b2ad291bc587bbc3fb4ed3320118eaf221db193877431c71a041deaee3ef1a29f7cd3269037dab81cdbf4b5543c5398d89aebc1752f908aa8e6524597955bf8fbcc2bd13011f1ea6d8ce41d92986c00298a4705504b1baa53d8058c4cfb2fe14e74b3c1e049e4d488194ec555c267cd0f84888cb345ccb91862b4413d7b1e29c5639aababa89cef60e0e2919cfc82f36ed170fa06e78257312ca4b29b7dfec3ce124877175ca9dd3f17fd4d2e36c7f4315356c2e38523d18c85ceefaa9dcd2aa32b465895464e841a0db286c81008a2ac4ad705cd97fa4a53d7525bbabb15771bf044e27b4b9c1e8c990d6c829b658cc23b9c2d11815e2d619ff4fed6ed36f81df4278c53e9baf4b74d4032f76cc7fb18e1deb19250e73e013ee25b3294c289d9214f7cb0f25b3977472d9dcca333763b8286ced637ec2b49b0b39b2ce82cac139c5c743edd6042545ef4b6095ef1e662f729c2cde3aae245130861c1a8a809606fd4b090570868c9e722db49b788d2289a78d52c6597655641b313d6d14dabcdad16523821e85c39e584a6c4d39b4a2b7b2bb4ed120f993435030200464ba8f2001faba7e5c9934dfa3f80d29e3bab8fc306a8fcd273844dafac41622cc543f78609fdd2b906e0462c87425987a9e9295e9d52c2827da94d540c609d82b40a31e0d27f6b34a434f71d697f463c33ff594f9ee4ffcf5871d97bcdfac632ad559c704d0"], 0x1, 0xa36, &(0x7f0000001b40)="$eJzs3ctvXFcZAPDvjp9xq5C2oYSobW5SpXVb44xtmsjqgjr22JniB9iO1AhQUzUOimJR1ILUViyChFhRUSGEBGxQl6wqlQXdoOxghVixQIL+B6hiFZDQoHvvjF+Zh+34EdrfbzS5j/Odx33MPZnxzD3B/7NarZY/d7l8+bcH2VjuPxenPn7/g3ez5w9vRW90xfPJ7yP6IyKN6P5vfq70TE4tLsx1KOhmxNWIuB2RRERfFNMWjmxauhrJT+PB9eXbkfw6TjTJ1r/DjaOjGp9ph33+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAfWlyqlweSWK2On/55bS1fAjwNumN4j7KR/1OPtpYRW+TapOIJHtGf39jqO8Tx9eTH83+OROPFUuPFSN/98c7Dzx67IVHukuN/G0adCDefPudm6+urq68sb6qp2Omvv1t06707i7bTGW+urRQnZuYqaTVpYV0/Pz58rlL00vpdDUqS1eWlitz6eRiZWJ5YTEdnHwmHRkfH0srw1cWLs/PTA3PVhorL3xptFw+n740/LXKxOLSwvy5l4aXJi9VZ2er8zN5TJacxVzITsSvVpfT5crEXJpev7G6MtapkVnQSNOUJO2KDUGjnUoaLY+OjoyMjo6cf378+QvlcvddK8pbxF0Rh3/Scnh+ty/XcNilUr3/j9moxnxcjpcjbfqYjKlYjIWYa5Fe1+j/z56rtK13Y//f6OVPrCefjLz/f6JYeqJV/9+iLZ0ftVpR8m7zNx5vxtvxTtyMV2M1VmMl3rjnEvtiS8v+feSey8wf6S62tqdTnpmoxHxUYykWohpzMZGvSetr0hiP83E+yvFKXIrpWIo0pqMas1GJpbgSS7EclfyMmozFqMRELMdCLEYagzEZz0QaIzEe4zEWaVRiOK7EQlyO+ZiJqZjIS7keN/L9PtamjWtBI9sJGm2zN/a4/6/dj/8TZL/t6fUb7kWt3v83e49eBNQac4OTB9YqAAAAYC998U9x9PjDf/x7RE88nn8uP12drZQPu1kAAADAHsq/rvdYNunJ5h6PxPt/AAAA+LRJ8t/YJRExEKeKueKXUF3hQwAAAAD4lMj//v9ENhnI5k5FsnYnlKuH3TYAAABgb6zdYz9a3WO34134k6HG7X/Ta8X0Wj2ifp/fgenqbGV4cmH2hZF4Kr/LQP5Lg7tK64pIevKfHzwbp4uo0wPFdGBzif1Z1MjwCyPxbJypb8jgk9nkycEmkaNF5NNF5NNtIseyyO3pvqf9DgCH6Uyb/ni7/f+zMVREDJ3s7s16xpNNetby9ntWAGB/dR5jp2NE8uX19/899WI39f8Px/VTxVcKhuO1eD1W41oM5b82yL9xsKnUb75X/8xg7WsI5Rjq8GlAI/YvF0ox1OLzgN7YWu5oDHX4RKCIjW9FjO3/gQCAA3SmRT+8k/5/KIaK4YOGTuYfim95/782tNCKnxQCwH1hbQT7fZw57G0EADbTSwMAAAAAAAAAAAAAAAAAAAAAAAAAAMDe29O7/ffvMvs/6uP67e8wBHfNHKnvg92X87OIOLg2J1ldfXtXYGkPyqlFxEEdr4ObiWMRu96rTU/j3og4/O3aycxhXpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KP0RXc3WlyL6IqIcEecOvlW7l0TSNv3WgbXkoP356y0SvrJxIbkTd+KtOHowbQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+OxIivv/l6KYPlCsiu5SxNmIuBoR3zjsNu6lO4fdgD1yZJf5Ntz/PzvmUUuiuzjskfRMTi0uzOXjJ/Rl6R+//8G72XND9r7t1pMHlrYMLlGvYWvsbx5szD2U5xqYWnnz5vde/246dTFK0RsXl6dnp+ZmFl9cz/Jo8mFEGsWzodHeH5z9w3tNtvzDbEub21rvdL5zpu6u9wvNcrevt50bqyujWU3LlZeXv/+dG29tSHo4Tkc8ORgxuLmmb2fPFjWdjp52tSWfJD9OjsYv4mp+/LO9kdSS7BB9Lt/+I9dvrK4Mv/b66rUWbToWpyLiWj5qyHbbdKr1gBz5WVfqyWot50HZP8ebldd+TI+mJY602IaH8lNmoL4NvdvahrRDAzbs91Kz9KJFYy1a9Eg81eRI1/oiWrfoqfZHurnkk+RvyaX4a/xow/gfpez4n43Wr87NReSRG86UlpGlIjLf8tGNCa9sjfznL7fV+qbD1LBTP9n04i1tuP7Xj9UeXY9qSdvr0YYad/a62FLjlrOizesi75GOb8lRv/q0ylNv5/EiqkU7Px/PRXSfbHdVvKu3fq7TJa2R/8Xmybt9/f8qGYx/xS3j/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPe/JKKr2fpSMTnWWE4jajsotq9VQmkg2VH79tqttX8+FUo7zZDciTvxVhzdn+YAAAAAAAAAcNAuTn38/gfvZs/87/Fdd2q1+t/304juiDiW/PxITC0uzHUoqCfiakTczub7WwX9p1bYvDbLFw+uL9/Olk40LeDYdrcLAGjtfwEAAP//jh5uqA==") 783.549166ms ago: executing program 6 (id=450): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 731.26738ms ago: executing program 3 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 730.72253ms ago: executing program 3 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) 686.391144ms ago: executing program 6 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 619.553979ms ago: executing program 3 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}}, 0x8000) 557.532994ms ago: executing program 3 (id=457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) write$P9_RLERROR(r2, &(0x7f0000000100)={0x16, 0x7, 0x2, {0xd, 'bond_slave_0\x00'}}, 0x16) 523.378938ms ago: executing program 6 (id=458): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 503.079439ms ago: executing program 5 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) unshare(0x20000400) 441.178074ms ago: executing program 5 (id=460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r3 = syz_io_uring_setup(0x495, &(0x7f0000000040)={0x0, 0x10079ae, 0x1000, 0x3, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x74d1, 0x2448, 0x43, 0x0, 0x0) 415.299896ms ago: executing program 6 (id=461): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 332.996613ms ago: executing program 5 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) 204.882013ms ago: executing program 5 (id=463): r0 = socket(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 137.124019ms ago: executing program 1 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000400)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 107.604991ms ago: executing program 5 (id=465): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) 81.394394ms ago: executing program 1 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 5 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 26.377633][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 26.377651][ T29] audit: type=1400 audit(1754028885.164:57): avc: denied { transition } for pid=3219 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.406410][ T29] audit: type=1400 audit(1754028885.164:58): avc: denied { noatsecure } for pid=3219 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.427038][ T29] audit: type=1400 audit(1754028885.164:59): avc: denied { write } for pid=3219 comm="sh" path="pipe:[2102]" dev="pipefs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 26.449285][ T29] audit: type=1400 audit(1754028885.164:60): avc: denied { rlimitinh } for pid=3219 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.468581][ T29] audit: type=1400 audit(1754028885.164:61): avc: denied { siginh } for pid=3219 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 35.581252][ T29] audit: type=1400 audit(1754028894.364:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.582618][ T3289] cgroup: Unknown subsys name 'net' [ 35.606437][ T29] audit: type=1400 audit(1754028894.364:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.639645][ T29] audit: type=1400 audit(1754028894.414:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.793859][ T3289] cgroup: Unknown subsys name 'cpuset' [ 35.801488][ T3289] cgroup: Unknown subsys name 'rlimit' [ 35.913975][ T29] audit: type=1400 audit(1754028894.704:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.938839][ T29] audit: type=1400 audit(1754028894.704:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.960016][ T29] audit: type=1400 audit(1754028894.704:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.983314][ T29] audit: type=1400 audit(1754028894.704:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.993347][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.004014][ T29] audit: type=1400 audit(1754028894.704:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.041383][ T29] audit: type=1400 audit(1754028894.704:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.070539][ T29] audit: type=1400 audit(1754028894.804:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.107267][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.569995][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 37.602320][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 37.611347][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 37.664895][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 37.694084][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 37.761973][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.769628][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.777512][ T3307] bridge_slave_0: entered allmulticast mode [ 37.784522][ T3307] bridge_slave_0: entered promiscuous mode [ 37.800729][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.808574][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.816654][ T3300] bridge_slave_0: entered allmulticast mode [ 37.824634][ T3300] bridge_slave_0: entered promiscuous mode [ 37.838108][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.846570][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.853885][ T3305] bridge_slave_0: entered allmulticast mode [ 37.861734][ T3305] bridge_slave_0: entered promiscuous mode [ 37.869922][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.878588][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.886555][ T3307] bridge_slave_1: entered allmulticast mode [ 37.893841][ T3307] bridge_slave_1: entered promiscuous mode [ 37.911439][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.919331][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.927580][ T3300] bridge_slave_1: entered allmulticast mode [ 37.934379][ T3300] bridge_slave_1: entered promiscuous mode [ 37.941278][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.949317][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.957136][ T3305] bridge_slave_1: entered allmulticast mode [ 37.964625][ T3305] bridge_slave_1: entered promiscuous mode [ 38.004734][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.014060][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.021932][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.031050][ T3308] bridge_slave_0: entered allmulticast mode [ 38.038129][ T3308] bridge_slave_0: entered promiscuous mode [ 38.054533][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.070826][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.081878][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.091448][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.099217][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.107489][ T3308] bridge_slave_1: entered allmulticast mode [ 38.114307][ T3308] bridge_slave_1: entered promiscuous mode [ 38.127411][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.149177][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.170313][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.178526][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.185845][ T3299] bridge_slave_0: entered allmulticast mode [ 38.193072][ T3299] bridge_slave_0: entered promiscuous mode [ 38.225380][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.233576][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.242689][ T3299] bridge_slave_1: entered allmulticast mode [ 38.250762][ T3299] bridge_slave_1: entered promiscuous mode [ 38.264007][ T3307] team0: Port device team_slave_0 added [ 38.282825][ T3305] team0: Port device team_slave_0 added [ 38.290093][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.300378][ T3305] team0: Port device team_slave_1 added [ 38.312466][ T3300] team0: Port device team_slave_0 added [ 38.320330][ T3307] team0: Port device team_slave_1 added [ 38.333431][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.344313][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.360287][ T3300] team0: Port device team_slave_1 added [ 38.374064][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.383242][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.412666][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.425389][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.447361][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.454407][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.482792][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.495834][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.503534][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.530158][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.546994][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.554276][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.582297][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.607618][ T3308] team0: Port device team_slave_0 added [ 38.629693][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.636822][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.664574][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.678740][ T3299] team0: Port device team_slave_0 added [ 38.685690][ T3308] team0: Port device team_slave_1 added [ 38.699622][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.706729][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.733082][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.747715][ T3299] team0: Port device team_slave_1 added [ 38.787444][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.794771][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.821328][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.843207][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.850899][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.878284][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.889797][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.897117][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.923976][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.940242][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.947356][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.975164][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.992329][ T3307] hsr_slave_0: entered promiscuous mode [ 39.000190][ T3307] hsr_slave_1: entered promiscuous mode [ 39.026461][ T3300] hsr_slave_0: entered promiscuous mode [ 39.033183][ T3300] hsr_slave_1: entered promiscuous mode [ 39.039411][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 39.045301][ T3300] Cannot create hsr debugfs directory [ 39.056937][ T3305] hsr_slave_0: entered promiscuous mode [ 39.063293][ T3305] hsr_slave_1: entered promiscuous mode [ 39.069295][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 39.075326][ T3305] Cannot create hsr debugfs directory [ 39.142018][ T3308] hsr_slave_0: entered promiscuous mode [ 39.149337][ T3308] hsr_slave_1: entered promiscuous mode [ 39.156671][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 39.162442][ T3308] Cannot create hsr debugfs directory [ 39.178921][ T3299] hsr_slave_0: entered promiscuous mode [ 39.186138][ T3299] hsr_slave_1: entered promiscuous mode [ 39.192348][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 39.198326][ T3299] Cannot create hsr debugfs directory [ 39.382677][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.405744][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.417947][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.436527][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.467582][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.488301][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.498364][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.517764][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.538644][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.555619][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.565373][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.577472][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.620148][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.629892][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.639835][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.650134][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.679193][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.704541][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.717784][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.731606][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.745168][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.757095][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.768906][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.776297][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.792205][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.801516][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.811881][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.819123][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.827983][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.835190][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.864468][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.873509][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.924738][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.962187][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.985273][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.992687][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.002469][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.009787][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.029941][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.061647][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.078892][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.088847][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.109324][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.131983][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.139264][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.148759][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.155906][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.178430][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.186301][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.199230][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.207019][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.227259][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.237022][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.286532][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.319853][ T3307] veth0_vlan: entered promiscuous mode [ 40.329371][ T3307] veth1_vlan: entered promiscuous mode [ 40.387993][ T3307] veth0_macvtap: entered promiscuous mode [ 40.409852][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.445888][ T3307] veth1_macvtap: entered promiscuous mode [ 40.465583][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.485780][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.508917][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.519517][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.538858][ T152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.566636][ T152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.596032][ T3300] veth0_vlan: entered promiscuous mode [ 40.608475][ T3327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.620196][ T3300] veth1_vlan: entered promiscuous mode [ 40.640610][ T3327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.653406][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.653422][ T29] audit: type=1400 audit(1754028899.424:81): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.qnXuAJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.660887][ T3305] veth0_vlan: entered promiscuous mode [ 40.688803][ T29] audit: type=1400 audit(1754028899.424:82): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.699093][ T3305] veth1_vlan: entered promiscuous mode [ 40.717539][ T29] audit: type=1400 audit(1754028899.424:83): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.qnXuAJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.751823][ T29] audit: type=1400 audit(1754028899.424:84): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.767057][ T3300] veth0_macvtap: entered promiscuous mode [ 40.775927][ T29] audit: type=1400 audit(1754028899.424:85): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.qnXuAJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.812575][ T29] audit: type=1400 audit(1754028899.424:86): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.qnXuAJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.827167][ T3305] veth0_macvtap: entered promiscuous mode [ 40.846232][ T29] audit: type=1400 audit(1754028899.424:87): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.878356][ T29] audit: type=1400 audit(1754028899.664:88): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.891758][ T3300] veth1_macvtap: entered promiscuous mode [ 40.901907][ T29] audit: type=1400 audit(1754028899.664:89): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=4037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.948746][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.956814][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.976423][ T3305] veth1_macvtap: entered promiscuous mode [ 40.999602][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.011966][ T29] audit: type=1400 audit(1754028899.784:90): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.016761][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.069912][ T3308] veth0_vlan: entered promiscuous mode [ 41.080357][ T3308] veth1_vlan: entered promiscuous mode [ 41.100835][ T3299] veth0_vlan: entered promiscuous mode [ 41.109262][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.124186][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.136893][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.154146][ T3299] veth1_vlan: entered promiscuous mode [ 41.167466][ T3308] veth0_macvtap: entered promiscuous mode [ 41.181000][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.199446][ T3308] veth1_macvtap: entered promiscuous mode [ 41.213755][ T3299] veth0_macvtap: entered promiscuous mode [ 41.242412][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.261587][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.276434][ T3299] veth1_macvtap: entered promiscuous mode [ 41.288700][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.301286][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.321758][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.371450][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.382518][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.401764][ T3491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 41.419855][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.429725][ T152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.466619][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.485062][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.521468][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.523344][ T3498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 41.573787][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.604578][ T152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.621648][ T3503] netlink: 'syz.4.13': attribute type 10 has an invalid length. [ 41.649788][ T3503] team0: Port device dummy0 added [ 41.656058][ T3507] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 41.678361][ T152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.697872][ T3512] netlink: 'syz.4.13': attribute type 10 has an invalid length. [ 41.716515][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.757819][ T3512] team0: Port device dummy0 removed [ 41.774394][ T3512] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.795888][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.824846][ T3503] syz.4.13 (3503) used greatest stack depth: 10704 bytes left [ 41.840804][ T3519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 41.853800][ T3520] syz.2.18 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.988408][ T3531] netlink: 332 bytes leftover after parsing attributes in process `syz.3.23'. [ 42.110908][ T3548] bridge0: port 3(batadv1) entered blocking state [ 42.118220][ T3548] bridge0: port 3(batadv1) entered disabled state [ 42.126629][ T3548] batadv1: entered allmulticast mode [ 42.133386][ T3548] batadv1: entered promiscuous mode [ 42.315165][ C1] hrtimer: interrupt took 25029 ns [ 42.614419][ T152] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 42.624004][ T152] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 42.691504][ T3606] loop4: detected capacity change from 0 to 128 [ 43.163729][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.485424][ T3661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.544454][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.596218][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.662242][ T3672] netlink: 'syz.0.64': attribute type 12 has an invalid length. [ 43.718596][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.921361][ T3678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 44.040331][ T31] batadv1: left allmulticast mode [ 44.045598][ T31] batadv1: left promiscuous mode [ 44.051510][ T31] bridge0: port 3(batadv1) entered disabled state [ 44.072489][ T31] bridge_slave_1: left allmulticast mode [ 44.078897][ T31] bridge_slave_1: left promiscuous mode [ 44.085154][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.096039][ T31] bridge_slave_0: left allmulticast mode [ 44.104229][ T31] bridge_slave_0: left promiscuous mode [ 44.111029][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.272080][ T3709] loop1: detected capacity change from 0 to 1024 [ 44.280392][ T3709] ======================================================= [ 44.280392][ T3709] WARNING: The mand mount option has been deprecated and [ 44.280392][ T3709] and is ignored by this kernel. Remove the mand [ 44.280392][ T3709] option from the mount to silence this warning. [ 44.280392][ T3709] ======================================================= [ 44.440004][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.474437][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.486976][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.500637][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 44.511880][ T31] bond0 (unregistering): Released all slaves [ 44.537301][ T3709] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.554372][ T3652] chnl_net:caif_netlink_parms(): no params data found [ 44.592896][ T31] hsr_slave_0: left promiscuous mode [ 44.606156][ T31] hsr_slave_1: left promiscuous mode [ 44.638250][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.645810][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.664007][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.672001][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.686831][ T3709] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.73: lblock 1 mapped to illegal pblock 1 (length 15) [ 44.769998][ T3753] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.73: lblock 3 mapped to illegal pblock 3 (length 13) [ 44.893830][ T31] veth1_macvtap: left promiscuous mode [ 44.903107][ T31] veth0_macvtap: left promiscuous mode [ 44.904770][ T3759] process 'syz.2.79' launched '/dev/fd/3' with NULL argv: empty string added [ 44.908863][ T31] veth1_vlan: left promiscuous mode [ 44.929645][ T31] veth0_vlan: left promiscuous mode [ 44.976960][ T3753] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 44.990938][ T3753] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.990938][ T3753] [ 45.164103][ T31] team0 (unregistering): Port device team_slave_1 removed [ 45.178759][ T51] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 2) [ 45.222501][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117 [ 45.235201][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.235201][ T51] [ 45.266469][ T31] team0 (unregistering): Port device team_slave_0 removed [ 45.288395][ T3723] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.318912][ T3723] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 812 with error 28 [ 45.331967][ T3723] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.331967][ T3723] [ 45.342026][ T3723] EXT4-fs (loop1): Total free blocks count 0 [ 45.348464][ T3723] EXT4-fs (loop1): Free/Dirty block details [ 45.354516][ T3723] EXT4-fs (loop1): free_blocks=4293918720 [ 45.454024][ T3813] netlink: 'syz.0.94': attribute type 17 has an invalid length. [ 45.482591][ T3822] loop2: detected capacity change from 0 to 1024 [ 45.506795][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.527316][ T3809] pim6reg1: entered promiscuous mode [ 45.533187][ T3809] pim6reg1: entered allmulticast mode [ 45.550207][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.558616][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.568452][ T3652] bridge_slave_0: entered allmulticast mode [ 45.577891][ T3652] bridge_slave_0: entered promiscuous mode [ 45.591628][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.598952][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.612944][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.655285][ T3831] syz.3.100 uses obsolete (PF_INET,SOCK_PACKET) [ 45.659435][ T3652] bridge_slave_1: entered allmulticast mode [ 45.683770][ T3652] bridge_slave_1: entered promiscuous mode [ 45.726252][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 45.726273][ T29] audit: type=1400 audit(1754028904.504:208): avc: denied { ioctl } for pid=3832 comm="syz.2.99" path="socket:[5567]" dev="sockfs" ino=5567 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.757639][ T29] audit: type=1400 audit(1754028904.504:209): avc: denied { prog_load } for pid=3830 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.776815][ T29] audit: type=1400 audit(1754028904.514:210): avc: denied { bpf } for pid=3830 comm="syz.3.100" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.798235][ T29] audit: type=1400 audit(1754028904.514:211): avc: denied { perfmon } for pid=3830 comm="syz.3.100" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.836642][ T3839] loop1: detected capacity change from 0 to 512 [ 45.836706][ T29] audit: type=1400 audit(1754028904.614:212): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.868259][ T29] audit: type=1400 audit(1754028904.614:213): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.894367][ T29] audit: type=1400 audit(1754028904.614:214): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.928725][ T3839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.939466][ T29] audit: type=1400 audit(1754028904.634:215): avc: denied { mounton } for pid=3838 comm="syz.1.102" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.969827][ T3839] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.974263][ T3652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.981008][ T29] audit: type=1400 audit(1754028904.764:216): avc: denied { mount } for pid=3838 comm="syz.1.102" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.007229][ T3652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.015893][ T29] audit: type=1400 audit(1754028904.784:217): avc: denied { map_create } for pid=3843 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.102860][ T3652] team0: Port device team_slave_0 added [ 46.110359][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.123826][ T3652] team0: Port device team_slave_1 added [ 46.208341][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.215863][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.244763][ T3652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.345339][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.352988][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.381868][ T3652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.440662][ T3652] hsr_slave_0: entered promiscuous mode [ 46.447038][ T3652] hsr_slave_1: entered promiscuous mode [ 46.463021][ T3652] debugfs: 'hsr0' already exists in 'hsr' [ 46.468991][ T3652] Cannot create hsr debugfs directory [ 46.636202][ T3652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.647733][ T3866] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 46.655469][ T3866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.111'. [ 46.682897][ T3652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.717500][ T3652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.767081][ T3652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.898748][ T3652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.934032][ T3652] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.947014][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.954841][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.964799][ T3885] capability: warning: `syz.3.117' uses deprecated v2 capabilities in a way that may be insecure [ 46.976715][ T3652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.987739][ T3652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.004571][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.012065][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.126317][ T3652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.447329][ T3652] veth0_vlan: entered promiscuous mode [ 47.454736][ T3933] loop2: detected capacity change from 0 to 512 [ 47.467549][ T3652] veth1_vlan: entered promiscuous mode [ 47.468787][ T3933] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 47.526585][ T3652] veth0_macvtap: entered promiscuous mode [ 47.545422][ T3652] veth1_macvtap: entered promiscuous mode [ 47.569130][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.587995][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.601922][ T3729] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.621374][ T3729] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.640885][ T3729] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.656176][ T3729] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.725288][ T3947] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 47.734546][ T3947] netlink: 'syz.1.136': attribute type 4 has an invalid length. [ 47.742577][ T3947] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.136'. [ 47.754333][ T3947] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 47.762677][ T3947] netlink: 'syz.1.136': attribute type 4 has an invalid length. [ 47.770912][ T3947] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.136'. [ 47.937226][ T3966] syzkaller1: entered promiscuous mode [ 47.943345][ T3966] syzkaller1: entered allmulticast mode [ 48.066377][ T3978] sctp: [Deprecated]: syz.0.148 (pid 3978) Use of int in max_burst socket option deprecated. [ 48.066377][ T3978] Use struct sctp_assoc_value instead [ 48.124094][ T3980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.149'. [ 48.327917][ T3995] sd 0:0:1:0: device reset [ 48.351304][ T3997] Zero length message leads to an empty skb [ 48.409989][ T4003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 48.462803][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.162'. [ 48.493964][ T4011] loop3: detected capacity change from 0 to 2048 [ 48.515838][ T4011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.539834][ T4011] EXT4-fs (loop3): shut down requested (0) [ 48.559627][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.602157][ T4020] wg2: entered promiscuous mode [ 48.607580][ T4020] wg2: entered allmulticast mode [ 48.801544][ T4028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.840510][ T4030] mmap: syz.3.170 (4030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.047596][ T4051] syzkaller1: entered promiscuous mode [ 49.053263][ T4051] syzkaller1: entered allmulticast mode [ 49.153678][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 49.421838][ T4086] loop3: detected capacity change from 0 to 512 [ 49.440187][ T4086] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.194: bg 0: block 288: padding at end of block bitmap is not set [ 49.461333][ T4086] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.472652][ T4086] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.194: attempt to clear invalid blocks 1024 len 1 [ 49.488891][ T4086] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.194: invalid indirect mapped block 1819239214 (level 0) [ 49.504295][ T4086] EXT4-fs (loop3): 1 truncate cleaned up [ 49.510830][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.543627][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.574292][ T4095] loop5: detected capacity change from 0 to 128 [ 49.636837][ T4095] syz.5.199: attempt to access beyond end of device [ 49.636837][ T4095] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.038834][ T4127] loop0: detected capacity change from 0 to 1024 [ 50.050063][ T4128] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.134881][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.176801][ T4127] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.216484][ T4127] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.213: lblock 1 mapped to illegal pblock 1 (length 15) [ 50.254855][ T4127] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.213: lblock 3 mapped to illegal pblock 3 (length 13) [ 50.319108][ T4151] loop3: detected capacity change from 0 to 512 [ 50.326558][ T4127] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 50.339053][ T4151] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 50.339442][ T4127] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.339442][ T4127] [ 50.518789][ T4167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4167 comm=syz.5.228 [ 50.560593][ T4170] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 50.572581][ T4165] IPVS: stopping master sync thread 4170 ... [ 50.582291][ T4169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 50.854133][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 50.854149][ T29] audit: type=1400 audit(1754028909.644:379): avc: denied { write } for pid=4184 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.961090][ T4192] loop2: detected capacity change from 0 to 128 [ 51.034562][ T29] audit: type=1400 audit(1754028909.814:380): avc: denied { execute_no_trans } for pid=4194 comm="syz.5.239" path="/24/file1" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.053762][ T4192] syz.2.238: attempt to access beyond end of device [ 51.053762][ T4192] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 51.147875][ T51] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 2) [ 51.178359][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117 [ 51.191204][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.191204][ T51] [ 51.227976][ T3763] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 51.262313][ T4209] loop2: detected capacity change from 0 to 1024 [ 51.272111][ T3763] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 2048 with error 28 [ 51.284766][ T3763] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.284766][ T3763] [ 51.294891][ T3763] EXT4-fs (loop0): Total free blocks count 0 [ 51.301110][ T3763] EXT4-fs (loop0): Free/Dirty block details [ 51.307123][ T3763] EXT4-fs (loop0): free_blocks=4293918720 [ 51.318837][ T4209] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.330715][ T4209] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.342136][ T4214] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 51.362132][ T4209] JBD2: no valid journal superblock found [ 51.368433][ T4209] EXT4-fs (loop2): Could not load journal inode [ 51.387529][ T4220] netlink: 'syz.5.245': attribute type 1 has an invalid length. [ 51.403479][ T4220] 8021q: VLANs not supported on ipvlan1 [ 51.483693][ T4230] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.493744][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 51.576905][ T4237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 51.586305][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.593865][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.624333][ T29] audit: type=1326 audit(1754028910.404:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.648441][ T29] audit: type=1326 audit(1754028910.404:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.671917][ T29] audit: type=1326 audit(1754028910.404:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.696047][ T29] audit: type=1326 audit(1754028910.404:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.720333][ T29] audit: type=1326 audit(1754028910.404:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.746130][ T29] audit: type=1326 audit(1754028910.404:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.770324][ T29] audit: type=1326 audit(1754028910.404:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.795282][ T29] audit: type=1326 audit(1754028910.404:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7947eb69 code=0x7ffc0000 [ 51.856534][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.864241][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.082650][ T4300] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 52.085691][ T4305] loop3: detected capacity change from 0 to 512 [ 52.131146][ T4305] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.258: attempt to clear invalid blocks 1 len 1 [ 52.168310][ T4305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.258: bg 0: block 343: padding at end of block bitmap is not set [ 52.212231][ T4305] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 52.232109][ T4305] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.258: invalid indirect mapped block 1819239214 (level 0) [ 52.252923][ T4305] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.258: invalid indirect mapped block 1819239214 (level 1) [ 52.258972][ T4319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 52.290779][ T4305] EXT4-fs (loop3): 1 truncate cleaned up [ 52.310931][ T4322] netlink: 96 bytes leftover after parsing attributes in process `syz.0.266'. [ 52.320894][ T4305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.353289][ T4323] IPVS: stopping master sync thread 4326 ... [ 52.359765][ T4326] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 52.386982][ T4328] loop0: detected capacity change from 0 to 2048 [ 52.400464][ T4328] ext4: Unknown parameter 'uid' [ 52.463360][ T4334] syzkaller1: entered promiscuous mode [ 52.469110][ T4334] syzkaller1: entered allmulticast mode [ 52.570783][ T4347] loop5: detected capacity change from 0 to 512 [ 52.588326][ T4346] loop2: detected capacity change from 0 to 2048 [ 52.614159][ T4347] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.627380][ T4347] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.642216][ T4347] EXT4-fs (loop5): 1 truncate cleaned up [ 52.649478][ T4347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.652371][ T3871] loop2: p3 < > p4 < > [ 52.666447][ T3871] loop2: partition table partially beyond EOD, truncated [ 52.676400][ T3871] loop2: p3 start 4284289 is beyond EOD, truncated [ 52.693961][ T4346] loop2: p3 < > p4 < > [ 52.698298][ T4346] loop2: partition table partially beyond EOD, truncated [ 52.707490][ T4346] loop2: p3 start 4284289 is beyond EOD, truncated [ 52.715156][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.750298][ T2989] loop2: p3 < > p4 < > [ 52.754767][ T2989] loop2: partition table partially beyond EOD, truncated [ 52.773183][ T2989] loop2: p3 start 4284289 is beyond EOD, truncated [ 52.829941][ T4364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'. [ 52.854796][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.283'. [ 52.868885][ T3871] udevd[3871]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 52.888023][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.283'. [ 52.923503][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.040599][ T4383] pim6reg: entered allmulticast mode [ 53.072093][ T4383] pim6reg: left allmulticast mode [ 53.107146][ T4395] netlink: 96 bytes leftover after parsing attributes in process `syz.0.299'. [ 53.140383][ T4398] loop3: detected capacity change from 0 to 1024 [ 53.154016][ T4396] syzkaller1: entered promiscuous mode [ 53.159633][ T4396] syzkaller1: entered allmulticast mode [ 53.202064][ T4398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.240721][ T4398] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 53.323568][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.678194][ T4434] loop1: detected capacity change from 0 to 8192 [ 53.721786][ T4438] loop3: detected capacity change from 0 to 8192 [ 53.779832][ T3871] loop3: p1 p2 p3 p4 [ 53.784389][ T3871] loop3: p1 start 4294508288 is beyond EOD, truncated [ 53.784844][ T4452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.326'. [ 53.791286][ T3871] loop3: p2 start 2936012800 is beyond EOD, truncated [ 53.807150][ T3871] loop3: p3 start 1912602624 is beyond EOD, truncated [ 53.814292][ T3871] loop3: p4 size 656640 extends beyond EOD, truncated [ 53.842212][ T4438] loop3: p1 p2 p3 p4 [ 53.852485][ T4438] loop3: p1 start 4294508288 is beyond EOD, truncated [ 53.859683][ T4438] loop3: p2 start 2936012800 is beyond EOD, truncated [ 53.866902][ T4438] loop3: p3 start 1912602624 is beyond EOD, truncated [ 53.873975][ T4438] loop3: p4 size 656640 extends beyond EOD, truncated [ 53.891537][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 54.077313][ T3871] udevd[3871]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.099014][ T3871] udevd[3871]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.348340][ T4475] bridge0: port 3(batadv1) entered blocking state [ 54.355955][ T4475] bridge0: port 3(batadv1) entered disabled state [ 54.364358][ T4475] batadv1: entered allmulticast mode [ 54.370402][ T4475] batadv1: entered promiscuous mode [ 54.396027][ T4481] sctp: [Deprecated]: syz.3.337 (pid 4481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.396027][ T4481] Use struct sctp_sack_info instead [ 54.425228][ T4480] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4480 comm=syz.2.338 [ 54.438152][ T4480] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4480 comm=syz.2.338 [ 54.504653][ T4488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.340'. [ 54.515527][ T4488] hsr_slave_0: left promiscuous mode [ 54.524885][ T4488] hsr_slave_1: left promiscuous mode [ 54.821928][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 54.854388][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 54.864163][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 55.089438][ T4534] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 33554432, id = 0 [ 55.164840][ T4543] netlink: 'syz.1.367': attribute type 1 has an invalid length. [ 55.198229][ T4547] tipc: Started in network mode [ 55.203369][ T4547] tipc: Node identity ac14140f, cluster identity 4711 [ 55.211901][ T4547] tipc: New replicast peer: 255.255.255.255 [ 55.218462][ T4547] tipc: Enabled bearer , priority 10 [ 55.232930][ T4543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.251841][ T4550] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.269095][ T4543] bond1: (slave veth0_to_bond): making interface the new active one [ 55.279118][ T4543] veth0_to_bond: entered promiscuous mode [ 55.289942][ T4543] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 55.317374][ T4553] loop5: detected capacity change from 0 to 1024 [ 55.327001][ T4553] EXT4-fs: Ignoring removed orlov option [ 55.338875][ T4543] syz.1.367 (4543) used greatest stack depth: 10040 bytes left [ 55.350573][ T4553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.378380][ T3763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.409080][ T4561] loop1: detected capacity change from 0 to 128 [ 55.438373][ T3763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.495240][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.545668][ T3763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.634496][ T3763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.748490][ T3763] bridge_slave_1: left allmulticast mode [ 55.754713][ T3763] bridge_slave_1: left promiscuous mode [ 55.760652][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.771696][ T3763] bridge_slave_0: left allmulticast mode [ 55.777875][ T3763] bridge_slave_0: left promiscuous mode [ 55.783834][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.895478][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.906061][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.916530][ T3763] bond0 (unregistering): Released all slaves [ 55.964628][ T4611] loop1: detected capacity change from 0 to 512 [ 55.971525][ T3763] hsr_slave_0: left promiscuous mode [ 55.981224][ T3763] hsr_slave_1: left promiscuous mode [ 55.989977][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.997659][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.007423][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.015286][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.033622][ T4611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.048503][ T4611] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.063548][ T3763] veth1_macvtap: left promiscuous mode [ 56.069725][ T3763] veth0_macvtap: left promiscuous mode [ 56.075588][ T3763] veth1_vlan: left promiscuous mode [ 56.081113][ T3763] veth0_vlan: left promiscuous mode [ 56.106263][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 56.106351][ T29] audit: type=1400 audit(1754028914.894:482): avc: denied { remove_name } for pid=4610 comm="syz.1.382" name="file1" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.150752][ T29] audit: type=1400 audit(1754028914.894:483): avc: denied { rename } for pid=4610 comm="syz.1.382" name="file1" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.187834][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.286610][ T4622] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 56.298136][ T10] IPVS: starting estimator thread 0... [ 56.306729][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 56.325517][ T29] audit: type=1326 audit(1754028915.114:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.2.388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0931eb69 code=0x0 [ 56.348821][ T3376] tipc: Node number set to 2886997007 [ 56.358535][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 56.412895][ T4626] IPVS: using max 1728 ests per chain, 86400 per kthread [ 56.455130][ T4563] chnl_net:caif_netlink_parms(): no params data found [ 56.503538][ T4639] vlan0: entered allmulticast mode [ 56.508842][ T4639] syz_tun: entered allmulticast mode [ 56.558975][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.566625][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.584967][ T29] audit: type=1326 audit(1754028915.374:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a087eb69 code=0x7ffc0000 [ 56.608684][ T29] audit: type=1326 audit(1754028915.374:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a087eb69 code=0x7ffc0000 [ 56.612998][ T4563] bridge_slave_0: entered allmulticast mode [ 56.639380][ T4563] bridge_slave_0: entered promiscuous mode [ 56.639732][ T29] audit: type=1326 audit(1754028915.424:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84a087eb69 code=0x7ffc0000 [ 56.647130][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.669863][ T29] audit: type=1326 audit(1754028915.424:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a087eb69 code=0x7ffc0000 [ 56.677344][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.700627][ T29] audit: type=1326 audit(1754028915.424:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a087eb69 code=0x7ffc0000 [ 56.731457][ T29] audit: type=1326 audit(1754028915.424:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84a087eb69 code=0x7ffc0000 [ 56.736949][ T4563] bridge_slave_1: entered allmulticast mode [ 56.755546][ T29] audit: type=1326 audit(1754028915.424:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a087eb69 code=0x7ffc0000 [ 56.766429][ T4563] bridge_slave_1: entered promiscuous mode [ 56.844383][ T4563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.855444][ T3389] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.870395][ T3389] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.882962][ T4563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.896636][ T4650] loop5: detected capacity change from 0 to 1024 [ 56.908283][ T4650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.930681][ T4650] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.963193][ T4650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.978844][ T4563] team0: Port device team_slave_0 added [ 56.986583][ T4563] team0: Port device team_slave_1 added [ 57.022958][ T3763] ------------[ cut here ]------------ [ 57.028759][ T3763] WARNING: CPU: 0 PID: 3763 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 57.038976][ T3763] Modules linked in: [ 57.043031][ T3763] CPU: 0 UID: 0 PID: 3763 Comm: kworker/u8:51 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 57.055662][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.066372][ T3763] Workqueue: netns cleanup_net [ 57.071548][ T3763] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 57.077424][ T3763] Code: 48 8d bb 30 0e 00 00 e8 22 e8 bd fc 48 8b bb 30 0e 00 00 e8 d6 62 ca fc 5b 41 5e 41 5f 5d e9 0b 7e b3 00 cc e8 d5 46 a3 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 c7 46 a3 fc 90 0f 0b 90 4c 89 f7 e8 eb [ 57.097258][ T3763] RSP: 0018:ffffc90000f23c60 EFLAGS: 00010293 [ 57.103407][ T3763] RAX: ffffffff84b4841b RBX: ffff88810a630000 RCX: ffff88811952e300 [ 57.111501][ T3763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a630e00 [ 57.119746][ T3763] RBP: ffffffff86c8a120 R08: 0001ffff86847f7f R09: 0000000000000000 [ 57.129181][ T3763] R10: ffffc90000f23be8 R11: 0001c90000f23be8 R12: ffffffff86c8a140 [ 57.137691][ T3763] R13: ffff88810a630028 R14: ffff88810a630e00 R15: ffff88810a630000 [ 57.146422][ T3763] FS: 0000000000000000(0000) GS:ffff8882aee4c000(0000) knlGS:0000000000000000 [ 57.155934][ T3763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.163099][ T3763] CR2: 0000001b30111ff8 CR3: 000000011977a000 CR4: 00000000003506f0 [ 57.172340][ T3763] Call Trace: [ 57.176052][ T3763] [ 57.179610][ T3763] xfrm_net_exit+0x2d/0x60 [ 57.184486][ T3763] ops_undo_list+0x27b/0x410 [ 57.189589][ T3763] cleanup_net+0x2de/0x4d0 [ 57.194507][ T3763] process_scheduled_works+0x4cb/0x9d0 [ 57.200890][ T3763] worker_thread+0x582/0x770 [ 57.207463][ T3763] kthread+0x486/0x510 [ 57.212915][ T3763] ? finish_task_switch+0xad/0x2b0 [ 57.219079][ T3763] ? __pfx_worker_thread+0x10/0x10 [ 57.225585][ T3763] ? __pfx_kthread+0x10/0x10 [ 57.233276][ T3763] ret_from_fork+0xdd/0x150 [ 57.238338][ T3763] ? __pfx_kthread+0x10/0x10 [ 57.243640][ T3763] ret_from_fork_asm+0x1a/0x30 [ 57.248816][ T3763] [ 57.252413][ T3763] ---[ end trace 0000000000000000 ]--- [ 57.271035][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.281328][ T4668] Driver unsupported XDP return value 0 on prog (id 315) dev N/A, expect packet loss! [ 57.300784][ T4670] loop1: detected capacity change from 0 to 512 [ 57.310286][ T4563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.317476][ T4563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.343668][ T4563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.354671][ T4670] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 57.365323][ T4563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.372419][ T4563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.386601][ T4670] EXT4-fs (loop1): failed to open journal device unknown-block(8,3) -6 [ 57.398758][ T4563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.515130][ T4563] hsr_slave_0: entered promiscuous mode [ 57.521384][ T4563] hsr_slave_1: entered promiscuous mode [ 57.538031][ T4563] debugfs: 'hsr0' already exists in 'hsr' [ 57.543883][ T4563] Cannot create hsr debugfs directory [ 57.550659][ T4678] netlink: 'syz.5.409': attribute type 1 has an invalid length. [ 57.558441][ T4678] __nla_validate_parse: 5 callbacks suppressed [ 57.558459][ T4678] netlink: 198116 bytes leftover after parsing attributes in process `syz.5.409'. [ 57.731254][ T4563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.758804][ T4563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.787118][ T4563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.822593][ T4563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.870332][ T4708] batadv_slave_1: entered promiscuous mode [ 57.909632][ T4563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.919491][ T4708] batadv_slave_1: left promiscuous mode [ 57.933065][ T4563] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.945743][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.952891][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.991430][ T3782] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.998583][ T3782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.060931][ T4713] loop5: detected capacity change from 0 to 512 [ 58.083381][ T4713] journal_path: Non-blockdev passed as './bus' [ 58.089622][ T4713] EXT4-fs: error: could not find journal device path [ 58.194161][ T4728] loop2: detected capacity change from 0 to 2048 [ 58.218096][ T4563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.259371][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.430'. [ 58.268997][ T4728] EXT4-fs: Ignoring removed nobh option [ 58.276814][ T4734] netlink: 32 bytes leftover after parsing attributes in process `syz.5.430'. [ 58.300359][ T4728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.317396][ T4735] vlan0: entered allmulticast mode [ 58.357111][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.438021][ T4748] loop3: detected capacity change from 0 to 764 [ 58.452289][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 58.474415][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.481854][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.497311][ T4748] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 58.521069][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.528696][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.651639][ T4563] veth0_vlan: entered promiscuous mode [ 58.667687][ T4563] veth1_vlan: entered promiscuous mode [ 58.725461][ T4563] veth0_macvtap: entered promiscuous mode [ 58.786144][ T4563] veth1_macvtap: entered promiscuous mode [ 58.825211][ T4563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.837109][ T4563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.848816][ T3727] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866058][ T4786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4786 comm=syz.1.443 [ 58.885149][ T3727] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.907508][ T3727] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.934292][ T3727] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.999724][ T4795] loop3: detected capacity change from 0 to 1764 [ 59.397871][ T4820] veth0: entered promiscuous mode [ 59.416088][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.461'. [ 59.483392][ T4824] loop5: detected capacity change from 0 to 128 [ 59.498283][ T4824] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.528897][ T4824] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.602964][ T3652] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.741854][ T4779] ================================================================== [ 59.750632][ T4779] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 59.757899][ T4779] [ 59.760455][ T4779] read-write to 0xffff8881035602ac of 4 bytes by task 4785 on cpu 0: [ 59.768752][ T4779] fifo_open+0x86/0x5d0 [ 59.773171][ T4779] do_dentry_open+0x649/0xa20 [ 59.778084][ T4779] vfs_open+0x37/0x1e0 [ 59.782315][ T4779] path_openat+0x1c5e/0x2170 [ 59.787258][ T4779] do_filp_open+0x109/0x230 [ 59.792073][ T4779] do_sys_openat2+0xa6/0x110 [ 59.796817][ T4779] __x64_sys_open+0xe6/0x110 [ 59.801720][ T4779] x64_sys_call+0x1457/0x2ff0 [ 59.806515][ T4779] do_syscall_64+0xd2/0x200 [ 59.811064][ T4779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.817073][ T4779] [ 59.819425][ T4779] read to 0xffff8881035602ac of 4 bytes by task 4779 on cpu 1: [ 59.827072][ T4779] wait_for_partner+0xb5/0x1c0 [ 59.832150][ T4779] fifo_open+0x462/0x5d0 [ 59.836434][ T4779] do_dentry_open+0x649/0xa20 [ 59.841335][ T4779] vfs_open+0x37/0x1e0 [ 59.845700][ T4779] path_openat+0x1c5e/0x2170 [ 59.850417][ T4779] do_filp_open+0x109/0x230 [ 59.855731][ T4779] do_sys_openat2+0xa6/0x110 [ 59.860632][ T4779] __x64_sys_openat+0xf2/0x120 [ 59.865627][ T4779] x64_sys_call+0x2e9c/0x2ff0 [ 59.870334][ T4779] do_syscall_64+0xd2/0x200 [ 59.875229][ T4779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.881345][ T4779] [ 59.884079][ T4779] value changed: 0x00000001 -> 0x00000002 [ 59.890178][ T4779] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 59.892536][ T4779] Reported by Kernel Concurrency Sanitizer on: [ 59.898975][ T4779] CPU: 1 UID: 0 PID: 4779 Comm: syz.2.444 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 59.913249][ T4779] Tainted: [W]=WARN [ 59.917075][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.927244][ T4779] ================================================================== [ 60.186931][ T3763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.245745][ T3763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.307202][ T3763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.375675][ T3763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.449182][ T3763] bridge_slave_1: left allmulticast mode [ 60.454959][ T3763] bridge_slave_1: left promiscuous mode [ 60.460666][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.469362][ T3763] bridge_slave_0: left allmulticast mode [ 60.475367][ T3763] bridge_slave_0: left promiscuous mode [ 60.481042][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.555191][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.566209][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.576665][ T3763] bond0 (unregistering): Released all slaves [ 60.587053][ T3763] bond1 (unregistering): (slave veth3): Releasing active interface [ 60.597746][ T3763] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 60.608213][ T3763] bond1 (unregistering): Released all slaves [ 60.650647][ T3763] veth1_macvtap: left promiscuous mode [ 60.656679][ T3763] veth0_macvtap: left promiscuous mode [ 60.662566][ T3763] veth1_vlan: left promiscuous mode [ 60.668299][ T3763] veth0_vlan: left promiscuous mode [ 60.734175][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 60.744853][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 61.137078][ T3763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.186399][ T3763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.236206][ T3763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.285530][ T3763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.343621][ T3763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.385998][ T3763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.455377][ T3763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.526130][ T3763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.592619][ T3763] batadv1: left allmulticast mode [ 61.598116][ T3763] batadv1: left promiscuous mode [ 61.603812][ T3763] bridge0: port 3(batadv1) entered disabled state [ 61.611190][ T3763] bridge_slave_1: left allmulticast mode [ 61.616912][ T3763] bridge_slave_1: left promiscuous mode [ 61.622840][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.633221][ T3763] bridge_slave_0: left allmulticast mode [ 61.638905][ T3763] bridge_slave_0: left promiscuous mode [ 61.644785][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.654094][ T3763] bridge_slave_1: left allmulticast mode [ 61.660138][ T3763] bridge_slave_1: left promiscuous mode [ 61.666612][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.674943][ T3763] bridge_slave_0: left promiscuous mode [ 61.681095][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.794748][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.805143][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.814886][ T3763] bond0 (unregistering): Released all slaves [ 61.895660][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.905856][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.916200][ T3763] bond0 (unregistering): Released all slaves [ 61.988861][ T3763] hsr_slave_0: left promiscuous mode [ 61.995774][ T3763] hsr_slave_1: left promiscuous mode [ 62.005270][ T3763] hsr_slave_0: left promiscuous mode [ 62.013761][ T3763] hsr_slave_1: left promiscuous mode [ 62.019773][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.029743][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.038426][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.045906][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.053196][ T3727] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 62.063555][ T3763] veth1_macvtap: left promiscuous mode [ 62.069252][ T3763] veth0_macvtap: left promiscuous mode [ 62.074939][ T3763] veth1_vlan: left promiscuous mode [ 62.080538][ T3763] veth0_vlan: left promiscuous mode [ 62.086540][ T3763] veth1_macvtap: left promiscuous mode [ 62.092131][ T3763] veth0_macvtap: left promiscuous mode [ 62.181853][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 62.192514][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 62.239463][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 62.249720][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 62.727022][ T3763] IPVS: stop unused estimator thread 0... [ 62.805951][ T3763] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.875658][ T3763] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.926041][ T3763] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.996575][ T3763] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.061347][ T3763] bridge_slave_1: left allmulticast mode [ 63.067083][ T3763] bridge_slave_1: left promiscuous mode [ 63.073310][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.081378][ T3763] bridge_slave_0: left allmulticast mode [ 63.087148][ T3763] bridge_slave_0: left promiscuous mode [ 63.092919][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.164850][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.175900][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.185640][ T3763] bond0 (unregistering): Released all slaves [ 63.236981][ T3763] hsr_slave_0: left promiscuous mode [ 63.242900][ T3763] hsr_slave_1: left promiscuous mode [ 63.248779][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.256235][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.263899][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.271309][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.281396][ T3763] veth1_macvtap: left promiscuous mode [ 63.287094][ T3763] veth0_macvtap: left promiscuous mode [ 63.292680][ T3763] veth1_vlan: left promiscuous mode [ 63.298070][ T3763] veth0_vlan: left promiscuous mode [ 63.358337][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 63.370492][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 63.696142][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.745456][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.805648][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.865300][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.920623][ T31] bridge_slave_1: left allmulticast mode [ 63.926519][ T31] bridge_slave_1: left promiscuous mode [ 63.932265][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.940182][ T31] bridge_slave_0: left allmulticast mode [ 63.945953][ T31] bridge_slave_0: left promiscuous mode [ 63.951684][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.034932][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.045957][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.056003][ T31] bond0 (unregistering): Released all slaves [ 64.103871][ T31] tipc: Disabling bearer [ 64.109125][ T31] tipc: Left network mode [ 64.114662][ T31] IPVS: stopping master sync thread 4534 ... [ 64.122327][ T31] hsr_slave_0: left promiscuous mode [ 64.128548][ T31] hsr_slave_1: left promiscuous mode [ 64.134333][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.141881][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.149576][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.156989][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.167054][ T31] veth1_macvtap: left promiscuous mode [ 64.172727][ T31] veth0_macvtap: left promiscuous mode [ 64.178300][ T31] veth1_vlan: left promiscuous mode [ 64.183647][ T31] veth0_vlan: left promiscuous mode [ 64.251457][ T31] team0 (unregistering): Port device team_slave_1 removed [ 64.264018][ T31] team0 (unregistering): Port device team_slave_0 removed