last executing test programs: 27.178647617s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 26.774178845s ago: executing program 4 (id=16): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 26.556506389s ago: executing program 4 (id=24): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/184, 0xb8) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 26.469939621s ago: executing program 4 (id=27): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 26.266110265s ago: executing program 4 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 24.328908172s ago: executing program 4 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000180)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0xa) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 24.328596652s ago: executing program 32 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000180)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0xa) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 20.28307136s ago: executing program 1 (id=179): memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) 20.237967041s ago: executing program 1 (id=183): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.080918753s ago: executing program 1 (id=190): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 19.797544019s ago: executing program 1 (id=197): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000600)='.\x02\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x1, 0x55d, &(0x7f0000000b00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x20111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 19.716370271s ago: executing program 1 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) 19.500310205s ago: executing program 1 (id=206): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 19.474876205s ago: executing program 33 (id=206): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1.365051013s ago: executing program 0 (id=722): pause() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r1, 0x16) 844.852374ms ago: executing program 2 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) 585.002339ms ago: executing program 2 (id=748): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xa55c}, 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 584.829619ms ago: executing program 3 (id=749): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x100000002}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2", 0x2}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 572.268649ms ago: executing program 6 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = creat(0x0, 0x100) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 552.321419ms ago: executing program 0 (id=752): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 546.443529ms ago: executing program 6 (id=753): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="a271f2", 0x3}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 501.029931ms ago: executing program 5 (id=754): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x80000002}) 500.514861ms ago: executing program 5 (id=764): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 492.072221ms ago: executing program 2 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 461.747271ms ago: executing program 5 (id=756): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 293.020944ms ago: executing program 6 (id=757): bpf$MAP_CREATE(0x0, 0x0, 0x48) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x8080) close(r3) 292.855875ms ago: executing program 6 (id=758): r0 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0x390}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 286.368915ms ago: executing program 3 (id=759): unshare(0x2040400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 279.145695ms ago: executing program 5 (id=760): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000880)={[{@nomblk_io_submit}, {@debug}, {@errors_continue}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@jqfmt_vfsv1}, {@acl}, {@jqfmt_vfsv1}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 263.131105ms ago: executing program 6 (id=761): r0 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 143.919167ms ago: executing program 0 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000900)="e6bcd52b", 0x4}], 0x1) 143.703637ms ago: executing program 0 (id=763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) 65.328389ms ago: executing program 6 (id=765): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1260a7a12b052b72, 0x1000, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x1, &(0x7f0000000380)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) 65.107219ms ago: executing program 5 (id=766): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) getcwd(&(0x7f0000001600)=""/209, 0xd1) 64.959289ms ago: executing program 0 (id=767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}}}}}}, 0x0) 64.851979ms ago: executing program 3 (id=768): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) 64.728809ms ago: executing program 3 (id=769): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendfile(r1, r0, 0x0, 0x7fffeffd) 12.02009ms ago: executing program 0 (id=770): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 5 (id=771): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 35.886685][ T29] audit: type=1400 audit(1758927709.079:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.887953][ T3290] cgroup: Unknown subsys name 'net' [ 35.909457][ T29] audit: type=1400 audit(1758927709.079:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.936843][ T29] audit: type=1400 audit(1758927709.109:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.077809][ T3290] cgroup: Unknown subsys name 'cpuset' [ 36.084115][ T3290] cgroup: Unknown subsys name 'rlimit' [ 36.196799][ T29] audit: type=1400 audit(1758927709.389:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.220359][ T29] audit: type=1400 audit(1758927709.399:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.240874][ T29] audit: type=1400 audit(1758927709.399:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.255592][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.261238][ T29] audit: type=1400 audit(1758927709.399:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.279257][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.290146][ T29] audit: type=1400 audit(1758927709.409:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.323808][ T29] audit: type=1400 audit(1758927709.409:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.347278][ T29] audit: type=1400 audit(1758927709.469:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.510710][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 37.564189][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 37.575449][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 37.647724][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.654869][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.662347][ T3301] bridge_slave_0: entered allmulticast mode [ 37.668881][ T3301] bridge_slave_0: entered promiscuous mode [ 37.677651][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 37.698358][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.705415][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.712757][ T3301] bridge_slave_1: entered allmulticast mode [ 37.719429][ T3301] bridge_slave_1: entered promiscuous mode [ 37.730620][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.737847][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.744935][ T3306] bridge_slave_0: entered allmulticast mode [ 37.751370][ T3306] bridge_slave_0: entered promiscuous mode [ 37.762544][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.769711][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.777132][ T3306] bridge_slave_1: entered allmulticast mode [ 37.783636][ T3306] bridge_slave_1: entered promiscuous mode [ 37.836281][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.843447][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.850708][ T3304] bridge_slave_0: entered allmulticast mode [ 37.857219][ T3304] bridge_slave_0: entered promiscuous mode [ 37.864720][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.875102][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.885624][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.897743][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 37.906355][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.913522][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.920652][ T3304] bridge_slave_1: entered allmulticast mode [ 37.927109][ T3304] bridge_slave_1: entered promiscuous mode [ 37.938817][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.992135][ T3306] team0: Port device team_slave_0 added [ 37.998608][ T3301] team0: Port device team_slave_0 added [ 38.004874][ T3306] team0: Port device team_slave_1 added [ 38.016405][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.023489][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.030786][ T3300] bridge_slave_0: entered allmulticast mode [ 38.037126][ T3300] bridge_slave_0: entered promiscuous mode [ 38.046723][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.061085][ T3301] team0: Port device team_slave_1 added [ 38.071613][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.078726][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.085875][ T3300] bridge_slave_1: entered allmulticast mode [ 38.092408][ T3300] bridge_slave_1: entered promiscuous mode [ 38.102985][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.122589][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.129560][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.155477][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.182738][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.189714][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.215657][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.236539][ T3304] team0: Port device team_slave_0 added [ 38.242667][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.249663][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.275634][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.289998][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.304481][ T3304] team0: Port device team_slave_1 added [ 38.310614][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.317601][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.343633][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.358810][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.367925][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.374968][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.382209][ T3309] bridge_slave_0: entered allmulticast mode [ 38.388621][ T3309] bridge_slave_0: entered promiscuous mode [ 38.411021][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.418153][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.425299][ T3309] bridge_slave_1: entered allmulticast mode [ 38.431977][ T3309] bridge_slave_1: entered promiscuous mode [ 38.443488][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.450460][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.476416][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.504025][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.511014][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.536929][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.561681][ T3300] team0: Port device team_slave_0 added [ 38.576150][ T3306] hsr_slave_0: entered promiscuous mode [ 38.582302][ T3306] hsr_slave_1: entered promiscuous mode [ 38.605805][ T3300] team0: Port device team_slave_1 added [ 38.618013][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.628247][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.639603][ T3304] hsr_slave_0: entered promiscuous mode [ 38.645520][ T3304] hsr_slave_1: entered promiscuous mode [ 38.651759][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 38.657507][ T3304] Cannot create hsr debugfs directory [ 38.665111][ T3301] hsr_slave_0: entered promiscuous mode [ 38.671387][ T3301] hsr_slave_1: entered promiscuous mode [ 38.677266][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 38.682992][ T3301] Cannot create hsr debugfs directory [ 38.709594][ T3309] team0: Port device team_slave_0 added [ 38.716043][ T3309] team0: Port device team_slave_1 added [ 38.727174][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.734128][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.760082][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.794239][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.801292][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.827247][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.838760][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.845810][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.871823][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.895872][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.902952][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.929057][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.988029][ T3309] hsr_slave_0: entered promiscuous mode [ 38.994149][ T3309] hsr_slave_1: entered promiscuous mode [ 39.000132][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 39.005891][ T3309] Cannot create hsr debugfs directory [ 39.057434][ T3300] hsr_slave_0: entered promiscuous mode [ 39.063437][ T3300] hsr_slave_1: entered promiscuous mode [ 39.069347][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 39.075087][ T3300] Cannot create hsr debugfs directory [ 39.167638][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.176330][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.195295][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.206811][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.251908][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.262583][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.279137][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.302597][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.319065][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.329716][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.340492][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.351787][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.361149][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.389594][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.399123][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.409787][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.418537][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.429504][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.436571][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.452555][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.462583][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.469722][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.520324][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.535050][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.550282][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.559757][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.602181][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.624670][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.638480][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.652248][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.664456][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.671573][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.680920][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.688061][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.703630][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.712692][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.719820][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.729686][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.736763][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.766685][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.778912][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.799958][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.815544][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.822630][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.832799][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.840015][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.882026][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.904307][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.911424][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.923405][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.930544][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.966465][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.001127][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.017857][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.075763][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.088623][ T3306] veth0_vlan: entered promiscuous mode [ 40.116412][ T3306] veth1_vlan: entered promiscuous mode [ 40.156853][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.173679][ T3306] veth0_macvtap: entered promiscuous mode [ 40.186705][ T3306] veth1_macvtap: entered promiscuous mode [ 40.221439][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.247891][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.256091][ T3309] veth0_vlan: entered promiscuous mode [ 40.278732][ T3309] veth1_vlan: entered promiscuous mode [ 40.288950][ T310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.303139][ T3301] veth0_vlan: entered promiscuous mode [ 40.318299][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.332722][ T3301] veth1_vlan: entered promiscuous mode [ 40.339806][ T310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353703][ T3309] veth0_macvtap: entered promiscuous mode [ 40.360985][ T3304] veth0_vlan: entered promiscuous mode [ 40.373901][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.376736][ T310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.402710][ T3300] veth0_vlan: entered promiscuous mode [ 40.424020][ T3304] veth1_vlan: entered promiscuous mode [ 40.436500][ T3309] veth1_macvtap: entered promiscuous mode [ 40.445984][ T3301] veth0_macvtap: entered promiscuous mode [ 40.464795][ T3304] veth0_macvtap: entered promiscuous mode [ 40.472848][ T3300] veth1_vlan: entered promiscuous mode [ 40.486242][ T3304] veth1_macvtap: entered promiscuous mode [ 40.494578][ T3301] veth1_macvtap: entered promiscuous mode [ 40.504195][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.523318][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.535692][ T3474] loop3: detected capacity change from 0 to 256 [ 40.538688][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.550564][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.559058][ T3474] ======================================================= [ 40.559058][ T3474] WARNING: The mand mount option has been deprecated and [ 40.559058][ T3474] and is ignored by this kernel. Remove the mand [ 40.559058][ T3474] option from the mount to silence this warning. [ 40.559058][ T3474] ======================================================= [ 40.600404][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.610366][ T3300] veth0_macvtap: entered promiscuous mode [ 40.616915][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.628020][ T3300] veth1_macvtap: entered promiscuous mode [ 40.647158][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.654508][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.663311][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.681835][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.703357][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.710969][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.725554][ T3477] loop0: detected capacity change from 0 to 512 [ 40.725879][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.742830][ T3477] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 40.751006][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.792963][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.849717][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.891385][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.906029][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 40.906045][ T29] audit: type=1400 audit(1758927714.099:108): avc: denied { relabelfrom } for pid=3487 comm="syz.3.10" name="NETLINK" dev="sockfs" ino=4847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.950452][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.991529][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.023573][ T29] audit: type=1400 audit(1758927714.139:109): avc: denied { relabelto } for pid=3487 comm="syz.3.10" name="NETLINK" dev="sockfs" ino=4847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.046295][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.049015][ T29] audit: type=1326 audit(1758927714.179:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.081029][ T29] audit: type=1326 audit(1758927714.179:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.087939][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.104349][ T29] audit: type=1326 audit(1758927714.199:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.136161][ T29] audit: type=1326 audit(1758927714.199:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.159659][ T29] audit: type=1326 audit(1758927714.199:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.160850][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.183099][ T29] audit: type=1326 audit(1758927714.199:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.192473][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.214956][ T29] audit: type=1326 audit(1758927714.199:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.246851][ T29] audit: type=1326 audit(1758927714.199:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03189eeec9 code=0x7ffc0000 [ 41.266650][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345215][ T3511] loop1: detected capacity change from 0 to 512 [ 41.361855][ T3506] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 41.371526][ T3506] vlan2: entered promiscuous mode [ 41.394482][ T3511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.407699][ T3511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.420478][ T3515] macvlan0: entered allmulticast mode [ 41.426199][ T3511] EXT4-fs (loop1): 1 truncate cleaned up [ 41.433939][ T3515] veth1_vlan: entered allmulticast mode [ 41.446685][ T3511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.448476][ T3515] team0: Port device macvlan0 added [ 41.473273][ T3511] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.18: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 41.475941][ T3515] syz.2.21 (3515) used greatest stack depth: 10688 bytes left [ 41.517629][ T3511] EXT4-fs (loop1): Remounting filesystem read-only [ 41.539730][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.549107][ T3527] loop4: detected capacity change from 0 to 128 [ 41.572598][ T145] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 41.599933][ T3532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.612980][ T3532] netlink: 'syz.1.25': attribute type 12 has an invalid length. [ 41.620904][ T3532] netlink: 'syz.1.25': attribute type 29 has an invalid length. [ 41.628578][ T3532] netlink: 148 bytes leftover after parsing attributes in process `syz.1.25'. [ 41.637474][ T3532] netlink: 1 bytes leftover after parsing attributes in process `syz.1.25'. [ 41.653462][ T3536] loop4: detected capacity change from 0 to 512 [ 41.661431][ T3532] Zero length message leads to an empty skb [ 41.673974][ T3536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.693321][ T3536] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.750477][ T3542] loop1: detected capacity change from 0 to 512 [ 41.757019][ T3536] loop4: detected capacity change from 512 to 0 [ 41.765283][ T3536] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.27: reading directory lblock 0 [ 41.779582][ T3536] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 41.779931][ T3542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.789830][ T3536] EXT4-fs (loop4): I/O error while writing superblock [ 41.811811][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.815699][ T3304] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 34: comm syz-executor: unable to read itable block [ 41.824592][ T3542] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.840009][ T3304] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 41.848846][ T3542] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.856006][ T3304] EXT4-fs (loop4): I/O error while writing superblock [ 41.871804][ T3304] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 41.881285][ T3304] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 41.889861][ T3304] EXT4-fs (loop4): I/O error while writing superblock [ 41.896744][ T3304] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 41.908551][ T3304] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 41.917228][ T3304] EXT4-fs (loop4): I/O error while writing superblock [ 41.933334][ T37] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #18: block 35: comm kworker/u8:2: unable to read itable block [ 41.948329][ T37] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 41.956843][ T37] EXT4-fs (loop4): I/O error while writing superblock [ 41.963970][ T37] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 34: comm kworker/u8:2: unable to read itable block [ 41.978098][ T37] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 41.987020][ T37] EXT4-fs (loop4): I/O error while writing superblock [ 41.994693][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.005063][ T3304] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.012329][ T3546] ipvlan2: entered promiscuous mode [ 42.013609][ T3304] EXT4-fs (loop4): I/O error while writing superblock [ 42.021564][ T3546] bridge0: port 3(ipvlan2) entered blocking state [ 42.031978][ T3546] bridge0: port 3(ipvlan2) entered disabled state [ 42.038926][ T3546] ipvlan2: entered allmulticast mode [ 42.040417][ T3537] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 42.044292][ T3546] bridge0: entered allmulticast mode [ 42.058614][ T3546] ipvlan2: left allmulticast mode [ 42.063716][ T3546] bridge0: left allmulticast mode [ 42.193915][ T3554] loop0: detected capacity change from 0 to 512 [ 42.202115][ T3554] EXT4-fs: Ignoring removed bh option [ 42.214156][ T3554] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.222285][ T3554] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 42.236869][ T3554] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.245077][ T3554] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.253037][ T3554] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.34: Failed to acquire dquot type 1 [ 42.266292][ T3554] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.34: Invalid block bitmap block 0 in block_group 0 [ 42.280944][ T3554] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.34: Invalid block bitmap block 0 in block_group 0 [ 42.295784][ T3554] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.34: Invalid block bitmap block 0 in block_group 0 [ 42.310842][ T3554] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.34: Failed to acquire dquot type 1 [ 42.323340][ T3554] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.34: Failed to acquire dquot type 1 [ 42.338724][ T3554] EXT4-fs (loop0): 1 orphan inode deleted [ 42.344748][ T3560] loop1: detected capacity change from 0 to 512 [ 42.347605][ T3554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.365045][ T3560] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.385547][ T3560] EXT4-fs (loop1): 1 truncate cleaned up [ 42.393183][ T3560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.433808][ T3554] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.462595][ T3554] syz.0.34 (3554) used greatest stack depth: 9072 bytes left [ 42.504721][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.563669][ T3573] loop3: detected capacity change from 0 to 2048 [ 42.576510][ T3577] loop2: detected capacity change from 0 to 512 [ 42.599894][ T3577] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 42.611975][ T3577] EXT4-fs (loop2): invalid journal inode [ 42.617853][ T3577] EXT4-fs (loop2): can't get journal size [ 42.627389][ T3573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.664421][ T3577] EXT4-fs (loop2): 1 truncate cleaned up [ 42.672937][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.673929][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.713514][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.776845][ T3645] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 42.779714][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.852889][ T3650] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 42.866811][ T3652] loop3: detected capacity change from 0 to 128 [ 42.881505][ T3651] udevd[3651]: failed to send result of seq 7432 to main daemon: Connection refused [ 42.891706][ T3654] loop1: detected capacity change from 0 to 164 [ 42.905162][ T3652] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.913161][ T3652] FAT-fs (loop3): Filesystem has been set read-only [ 42.922444][ T3654] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 42.937585][ T3652] syz.3.50: attempt to access beyond end of device [ 42.937585][ T3652] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 42.960325][ T3652] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.968282][ T3652] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.990642][ T3658] syz.3.50: attempt to access beyond end of device [ 42.990642][ T3658] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 43.003896][ T3658] Buffer I/O error on dev loop3, logical block 2065, async page read [ 43.030306][ T3658] syz.3.50: attempt to access beyond end of device [ 43.030306][ T3658] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 43.043417][ T3658] Buffer I/O error on dev loop3, logical block 2066, async page read [ 43.055803][ T3658] syz.3.50: attempt to access beyond end of device [ 43.055803][ T3658] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 43.070155][ T3658] syz.3.50: attempt to access beyond end of device [ 43.070155][ T3658] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 43.086628][ T3658] syz.3.50: attempt to access beyond end of device [ 43.086628][ T3658] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 43.105139][ T3658] syz.3.50: attempt to access beyond end of device [ 43.105139][ T3658] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 43.109339][ T3665] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 43.120813][ T3658] syz.3.50: attempt to access beyond end of device [ 43.120813][ T3658] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 43.142050][ T3658] syz.3.50: attempt to access beyond end of device [ 43.142050][ T3658] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 43.155815][ T3652] syz.3.50: attempt to access beyond end of device [ 43.155815][ T3652] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 43.186767][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 43.223518][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.314158][ T3665] bridge_slave_1 (unregistering): left allmulticast mode [ 43.321316][ T3665] bridge_slave_1 (unregistering): left promiscuous mode [ 43.328502][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.720295][ T3612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.842023][ T3700] loop0: detected capacity change from 0 to 128 [ 43.853811][ T3700] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 43.868239][ T3700] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.876401][ T3701] loop3: detected capacity change from 0 to 512 [ 43.899680][ T3701] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 43.909844][ T3701] EXT4-fs (loop3): invalid journal inode [ 43.915519][ T3701] EXT4-fs (loop3): can't get journal size [ 43.921863][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.927652][ T3701] EXT4-fs (loop3): 1 truncate cleaned up [ 43.941183][ T3701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.986931][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.019788][ T3695] chnl_net:caif_netlink_parms(): no params data found [ 44.036764][ T3719] loop0: detected capacity change from 0 to 512 [ 44.062148][ T3719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.084045][ T3719] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.118325][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.135644][ T3612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.169083][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.176204][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.194942][ T3695] bridge_slave_0: entered allmulticast mode [ 44.202490][ T3695] bridge_slave_0: entered promiscuous mode [ 44.211316][ T3736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 44.221313][ T3612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.233654][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.240832][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.248118][ T3695] bridge_slave_1: entered allmulticast mode [ 44.254542][ T3695] bridge_slave_1: entered promiscuous mode [ 44.283138][ T3695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.300730][ T3612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.315442][ T3695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.328115][ T3745] sd 0:0:1:0: device reset [ 44.359107][ T3695] team0: Port device team_slave_0 added [ 44.378294][ T3695] team0: Port device team_slave_1 added [ 44.393299][ T3752] loop2: detected capacity change from 0 to 1024 [ 44.406884][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.413944][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.440025][ T3695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.451128][ T3752] EXT4-fs: Ignoring removed bh option [ 44.456649][ T3752] EXT4-fs: inline encryption not supported [ 44.463154][ T3612] bridge_slave_1: left allmulticast mode [ 44.468892][ T3612] bridge_slave_1: left promiscuous mode [ 44.474538][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.482546][ T3612] bridge_slave_0: left allmulticast mode [ 44.488240][ T3612] bridge_slave_0: left promiscuous mode [ 44.493933][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.501633][ T3752] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.513244][ T3752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 44.521905][ T3760] loop3: detected capacity change from 0 to 2048 [ 44.528726][ T3755] loop0: detected capacity change from 0 to 1024 [ 44.535513][ T3755] EXT4-fs: Ignoring removed nobh option [ 44.548028][ T3752] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.85: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.567932][ T3760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.588943][ T3752] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.85: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.589636][ T3755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.618016][ T3752] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.85: Failed to acquire dquot type 0 [ 44.638331][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.647835][ T3752] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 44.659055][ T3755] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 44.672975][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.673975][ T3769] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 44.690316][ T3752] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.85: mark_inode_dirty error [ 44.704914][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.716300][ T3612] bond0 (unregistering): Released all slaves [ 44.717460][ T3752] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 44.734703][ T3752] EXT4-fs (loop2): 1 orphan inode deleted [ 44.750329][ T3752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.751428][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.762870][ T3632] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.770048][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.785599][ T3632] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:57: Failed to release dquot type 0 [ 44.810211][ T3695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.839933][ T3774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'. [ 44.841430][ T3752] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.899851][ T3695] hsr_slave_0: entered promiscuous mode [ 44.900223][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.917546][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.936337][ T3695] hsr_slave_1: entered promiscuous mode [ 44.942535][ T3695] debugfs: 'hsr0' already exists in 'hsr' [ 44.948322][ T3695] Cannot create hsr debugfs directory [ 44.956205][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 44.965116][ T3612] hsr_slave_0: left promiscuous mode [ 44.975028][ T3612] hsr_slave_1: left promiscuous mode [ 44.981499][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.989363][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.993463][ T3787] loop1: detected capacity change from 0 to 512 [ 45.003380][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.005381][ T3787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.010902][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.029050][ T3787] EXT4-fs (loop1): 1 truncate cleaned up [ 45.034893][ T3612] veth1_macvtap: left promiscuous mode [ 45.035375][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.053097][ T3612] veth0_macvtap: left promiscuous mode [ 45.059102][ T3787] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.99: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 45.077440][ T3612] veth1_vlan: left promiscuous mode [ 45.077538][ T3612] veth0_vlan: left promiscuous mode [ 45.101116][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.162733][ T3797] openvswitch: netlink: Message has 6 unknown bytes. [ 45.175732][ T3612] team0 (unregistering): Port device team_slave_1 removed [ 45.187539][ T3612] team0 (unregistering): Port device team_slave_0 removed [ 45.226004][ T3793] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 45.324896][ T3814] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 45.341048][ T3814] ipvlan0: entered allmulticast mode [ 45.346432][ T3814] veth0_vlan: entered allmulticast mode [ 45.354118][ T3814] team0: Device ipvlan0 failed to register rx_handler [ 45.405137][ T3695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.420045][ T3695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.431363][ T3695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.440822][ T3695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.458661][ T3823] loop3: detected capacity change from 0 to 1024 [ 45.465661][ T3823] EXT4-fs: Ignoring removed bh option [ 45.499370][ T3823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 45.506101][ T3695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.529479][ T3695] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.543141][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.550250][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.585603][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.592730][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.620014][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 45.642291][ T3837] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 45.734855][ T3853] loop3: detected capacity change from 0 to 1024 [ 45.745653][ T3851] loop1: detected capacity change from 0 to 256 [ 45.757530][ T3853] EXT4-fs: Ignoring removed orlov option [ 45.763338][ T3853] EXT4-fs: Ignoring removed nobh option [ 45.769023][ T3853] EXT4-fs: Ignoring removed bh option [ 45.777684][ T3851] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.800447][ T3851] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.816840][ T3857] loop2: detected capacity change from 0 to 2048 [ 45.830039][ T3695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.832462][ T3853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.840788][ T3857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.884857][ T3853] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 45.999190][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.015741][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.099451][ T3891] netlink: 'syz.2.131': attribute type 5 has an invalid length. [ 46.107201][ T3891] netlink: 'syz.2.131': attribute type 2 has an invalid length. [ 46.115007][ T3891] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 46.122695][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 46.131539][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.147333][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.154481][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.171144][ T3695] veth0_vlan: entered promiscuous mode [ 46.203526][ T3695] veth1_vlan: entered promiscuous mode [ 46.209549][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 46.209562][ T29] audit: type=1400 audit(1758927719.399:267): avc: denied { create } for pid=3902 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.274462][ T3695] veth0_macvtap: entered promiscuous mode [ 46.283063][ T3695] veth1_macvtap: entered promiscuous mode [ 46.295426][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.308839][ T3916] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 46.330151][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.347300][ T3427] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.358866][ T3427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.388228][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 46.399300][ T3427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.430554][ T3427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.447583][ T3928] ref_ctr_offset mismatch. inode: 0xe6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x918 [ 46.462054][ T29] audit: type=1400 audit(1758927719.659:268): avc: denied { mounton } for pid=3695 comm="syz-executor" path="/root/syzkaller.md1UUW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.518180][ T3933] loop2: detected capacity change from 0 to 512 [ 46.539234][ T3933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.550252][ T29] audit: type=1400 audit(1758927719.689:269): avc: denied { create } for pid=3929 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.569753][ T29] audit: type=1400 audit(1758927719.689:270): avc: denied { setopt } for pid=3929 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.593525][ T3940] loop1: detected capacity change from 0 to 512 [ 46.623483][ T3940] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.644144][ T29] audit: type=1400 audit(1758927719.839:271): avc: denied { create } for pid=3943 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.664045][ T29] audit: type=1400 audit(1758927719.839:272): avc: denied { setopt } for pid=3943 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.684163][ T29] audit: type=1400 audit(1758927719.839:273): avc: denied { bind } for pid=3943 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.713746][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.726613][ T3933] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.732949][ T29] audit: type=1326 audit(1758927719.909:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd2d3eec9 code=0x7ffc0000 [ 46.760293][ T29] audit: type=1326 audit(1758927719.909:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd2d3eec9 code=0x7ffc0000 [ 46.784274][ T29] audit: type=1326 audit(1758927719.909:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3939 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd2d3eec9 code=0x7ffc0000 [ 46.822165][ T3300] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 46.839654][ T3933] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 46.856753][ T3933] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 46.869222][ T3933] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.869222][ T3933] [ 46.878985][ T3933] EXT4-fs (loop2): Total free blocks count 0 [ 46.884998][ T3933] EXT4-fs (loop2): Free/Dirty block details [ 46.891111][ T3933] EXT4-fs (loop2): free_blocks=39626 [ 46.896520][ T3933] EXT4-fs (loop2): dirty_blocks=16 [ 46.901682][ T3933] EXT4-fs (loop2): Block reservation details [ 46.907861][ T3933] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 46.914424][ T3952] ./file0: Can't open blockdev [ 46.944149][ T3955] process 'syz.1.158' launched './file0' with NULL argv: empty string added [ 47.053703][ T3965] loop1: detected capacity change from 0 to 1024 [ 47.088583][ T3965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.129283][ T3965] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.186180][ T3965] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.165: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.219407][ T3965] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 47.231809][ T3965] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.231809][ T3965] [ 47.296744][ T3949] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 47.314213][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.371478][ T3967] loop5: detected capacity change from 0 to 2048 [ 47.418181][ T3984] loop1: detected capacity change from 0 to 512 [ 47.448216][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.473378][ T3984] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.499068][ T3967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.529469][ T3967] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 47.613127][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.659999][ T3695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.694832][ T3999] syz_tun: entered promiscuous mode [ 47.727007][ T3999] batadv_slave_0: entered promiscuous mode [ 47.993426][ T4029] loop3: detected capacity change from 0 to 128 [ 48.015354][ T4029] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.057470][ T4029] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.205440][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.291910][ T4048] loop1: detected capacity change from 0 to 164 [ 48.299209][ T4046] loop9: detected capacity change from 0 to 7 [ 48.306824][ T4046] buffer_io_error: 35222 callbacks suppressed [ 48.306836][ T4046] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.347577][ T4046] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.355468][ T4046] loop9: unable to read partition table [ 48.361525][ T4046] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 48.361525][ T4046] ) failed (rc=-5) [ 48.379472][ T4049] syz_tun (unregistering): left promiscuous mode [ 48.411306][ T4057] sd 0:0:1:0: device reset [ 48.487607][ T4062] syz.3.202 uses obsolete (PF_INET,SOCK_PACKET) [ 48.529857][ T4066] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 48.537781][ T4066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.204'. [ 48.557619][ T4066] team0: Port device geneve1 added [ 48.569724][ T3633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.624798][ T4077] loop3: detected capacity change from 0 to 512 [ 48.625771][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 48.631661][ T4077] EXT4-fs: Ignoring removed bh option [ 48.648205][ T4077] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 48.659435][ T3633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.671819][ T4077] EXT4-fs (loop3): 1 truncate cleaned up [ 48.701665][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.750487][ T4086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 48.759450][ T4086] netlink: 196 bytes leftover after parsing attributes in process `syz.0.213'. [ 48.769038][ T4086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 48.778168][ T4086] netlink: 196 bytes leftover after parsing attributes in process `syz.0.213'. [ 48.817444][ T3633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.853416][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.871683][ T3633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.941870][ T3633] bridge_slave_0: left allmulticast mode [ 48.947609][ T3633] bridge_slave_0: left promiscuous mode [ 48.953397][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.052057][ T4116] loop5: detected capacity change from 0 to 128 [ 49.060906][ T3633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.080115][ T4116] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.099989][ T3633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.124958][ T3633] bond0 (unregistering): Released all slaves [ 49.171008][ T3633] batadv_slave_0: left promiscuous mode [ 49.171016][ T4116] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.194531][ T3633] hsr_slave_0: left promiscuous mode [ 49.208513][ T3633] hsr_slave_1: left promiscuous mode [ 49.234431][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.242091][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.251762][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.259493][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.268063][ T3695] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.288707][ T3633] veth1_macvtap: left promiscuous mode [ 49.294213][ T3633] veth0_macvtap: left promiscuous mode [ 49.318291][ T3633] veth1_vlan: left promiscuous mode [ 49.323640][ T3633] veth0_vlan: left promiscuous mode [ 49.338742][ T4140] atomic_op ffff888118f28128 conn xmit_atomic 0000000000000000 [ 49.446819][ T3633] team0 (unregistering): Port device team_slave_1 removed [ 49.457092][ T3633] team0 (unregistering): Port device team_slave_0 removed [ 49.544814][ T4161] Illegal XDP return value 2846684574 on prog (id 166) dev syz_tun, expect packet loss! [ 49.557775][ T4079] chnl_net:caif_netlink_parms(): no params data found [ 49.620862][ T4167] loop5: detected capacity change from 0 to 512 [ 49.647439][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.654605][ T4079] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.667323][ T4079] bridge_slave_0: entered allmulticast mode [ 49.673972][ T4167] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.690492][ T4079] bridge_slave_0: entered promiscuous mode [ 49.696917][ T4167] EXT4-fs (loop5): mount failed [ 49.702758][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.710064][ T4079] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.717295][ T4079] bridge_slave_1: entered allmulticast mode [ 49.725471][ T4079] bridge_slave_1: entered promiscuous mode [ 49.752694][ T4167] loop5: detected capacity change from 0 to 512 [ 49.762693][ T4079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.779167][ T4167] EXT4-fs: Ignoring removed nobh option [ 49.789327][ T4079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.822254][ T4167] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.244: corrupted inode contents [ 49.837607][ T4167] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.244: mark_inode_dirty error [ 49.850401][ T4079] team0: Port device team_slave_0 added [ 49.858636][ T4079] team0: Port device team_slave_1 added [ 49.866262][ T4167] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.244: corrupted inode contents [ 49.886934][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.894068][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.920002][ T4079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.931512][ T4167] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.244: mark_inode_dirty error [ 49.931797][ T4079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.949681][ T4079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.975739][ T4079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.998005][ T4167] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.244: Failed to acquire dquot type 0 [ 50.021470][ T4199] loop3: detected capacity change from 0 to 512 [ 50.033738][ T4079] hsr_slave_0: entered promiscuous mode [ 50.035487][ T4167] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.244: corrupted inode contents [ 50.046222][ T4079] hsr_slave_1: entered promiscuous mode [ 50.057255][ T4199] EXT4-fs: Ignoring removed i_version option [ 50.063356][ T4199] EXT4-fs: Ignoring removed bh option [ 50.067247][ T4167] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.244: mark_inode_dirty error [ 50.069195][ T4079] debugfs: 'hsr0' already exists in 'hsr' [ 50.085863][ T4079] Cannot create hsr debugfs directory [ 50.096277][ T4167] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.244: corrupted inode contents [ 50.119024][ T4199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.137308][ T4167] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.244: mark_inode_dirty error [ 50.151554][ T4199] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.162368][ T4167] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.244: corrupted inode contents [ 50.176805][ T4206] loop2: detected capacity change from 0 to 128 [ 50.184310][ T4167] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 50.198218][ T4167] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.244: corrupted inode contents [ 50.211336][ T4206] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.212483][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.233850][ T4206] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.268271][ T4167] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.244: mark_inode_dirty error [ 50.298532][ T4167] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 50.309289][ T4167] EXT4-fs (loop5): 1 truncate cleaned up [ 50.315424][ T4167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.329097][ T4167] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.341045][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.366257][ T4079] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 50.383718][ T4079] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 50.396123][ T4079] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 50.404472][ T3695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.416113][ T4079] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 50.443445][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.450908][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.458363][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.481188][ T4228] loop5: detected capacity change from 0 to 128 [ 50.490357][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.497815][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.504950][ T4079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.505246][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.519318][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.526762][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.529514][ T4079] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.534214][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.548194][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.566547][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 50.590169][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.597273][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.612675][ T4231] SELinux: failed to load policy [ 50.633931][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.641067][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.641303][ T4235] loop5: detected capacity change from 0 to 512 [ 50.659669][ T3395] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 50.676842][ T4239] loop2: detected capacity change from 0 to 1024 [ 50.696805][ T4079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.725189][ T4235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.749266][ T4239] EXT4-fs: Ignoring removed orlov option [ 50.749722][ T4235] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.754998][ T4239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.804055][ T4235] SELinux: Context @ is not valid (left unmapped). [ 50.815222][ T4239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.834325][ T4079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.868888][ T3695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.884489][ T4262] loop3: detected capacity change from 0 to 128 [ 51.045083][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.059858][ T4283] netlink: 'syz.5.283': attribute type 10 has an invalid length. [ 51.067982][ T4283] netlink: 40 bytes leftover after parsing attributes in process `syz.5.283'. [ 51.085226][ T4079] veth0_vlan: entered promiscuous mode [ 51.094056][ T4079] veth1_vlan: entered promiscuous mode [ 51.103251][ T4283] batman_adv: batadv0: Adding interface: veth1_vlan [ 51.109898][ T4283] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.136511][ T4283] batman_adv: batadv0: Interface activated: veth1_vlan [ 51.149735][ T4079] veth0_macvtap: entered promiscuous mode [ 51.177108][ T4079] veth1_macvtap: entered promiscuous mode [ 51.190213][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.199095][ T4079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.235901][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 51.235957][ T29] audit: type=1400 audit(1758927724.429:463): avc: denied { connect } for pid=4290 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.272906][ T3634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.297366][ T3634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.322189][ T29] audit: type=1400 audit(1758927724.509:464): avc: denied { read } for pid=4294 comm="syz.2.287" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.345410][ T29] audit: type=1400 audit(1758927724.509:465): avc: denied { open } for pid=4294 comm="syz.2.287" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.376592][ T3634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.394259][ T3634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.483736][ T29] audit: type=1400 audit(1758927724.639:466): avc: denied { mount } for pid=4298 comm="syz.5.288" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.505930][ T29] audit: type=1400 audit(1758927724.659:467): avc: denied { unmount } for pid=3695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.575702][ T29] audit: type=1400 audit(1758927724.769:468): avc: denied { append } for pid=4303 comm="syz.3.290" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.613423][ T29] audit: type=1400 audit(1758927724.799:469): avc: denied { write } for pid=4304 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.633505][ T29] audit: type=1400 audit(1758927724.799:470): avc: denied { nlmsg_write } for pid=4304 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.686683][ T4312] loop5: detected capacity change from 0 to 128 [ 51.789791][ T4327] loop6: detected capacity change from 0 to 128 [ 51.796261][ T4324] loop3: detected capacity change from 0 to 2048 [ 51.811477][ T29] audit: type=1326 audit(1758927725.009:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.6.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c7fbeec9 code=0x7ffc0000 [ 51.834901][ T29] audit: type=1326 audit(1758927725.009:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.6.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c7fbeec9 code=0x7ffc0000 [ 51.840179][ T4324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 51.923846][ T4340] loop6: detected capacity change from 0 to 512 [ 51.933261][ T4338] loop5: detected capacity change from 0 to 512 [ 51.941101][ T4340] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 51.951682][ T4338] EXT4-fs (loop5): orphan cleanup on readonly fs [ 51.954201][ T4324] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.958627][ T4338] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.302: iget: bad extended attribute block 1 [ 51.973306][ T4340] EXT4-fs (loop6): invalid journal inode [ 51.987400][ T4338] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.302: couldn't read orphan inode 15 (err -117) [ 51.992350][ T4324] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1506 with error 28 [ 52.003418][ T4340] EXT4-fs (loop6): can't get journal size [ 52.015281][ T4324] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.015281][ T4324] [ 52.023542][ T4338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.030785][ T4324] EXT4-fs (loop3): Total free blocks count 0 [ 52.048731][ T4324] EXT4-fs (loop3): Free/Dirty block details [ 52.054646][ T4324] EXT4-fs (loop3): free_blocks=2415919104 [ 52.060474][ T4324] EXT4-fs (loop3): dirty_blocks=1520 [ 52.065770][ T4324] EXT4-fs (loop3): Block reservation details [ 52.071861][ T4324] EXT4-fs (loop3): i_reserved_data_blocks=95 [ 52.080687][ T4340] EXT4-fs (loop6): 1 truncate cleaned up [ 52.098036][ T4340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.100161][ T3695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.165857][ T4351] loop5: detected capacity change from 0 to 1024 [ 52.176497][ T4353] loop2: detected capacity change from 0 to 1024 [ 52.184604][ T4351] EXT4-fs: Ignoring removed orlov option [ 52.190813][ T4351] EXT4-fs: Ignoring removed nobh option [ 52.196442][ T4351] EXT4-fs: Ignoring removed bh option [ 52.212966][ T4356] loop6: detected capacity change from 0 to 512 [ 52.260154][ T4351] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.305: Allocating blocks 465-513 which overlap fs metadata [ 52.285577][ T4363] loop2: detected capacity change from 0 to 2048 [ 52.294282][ T4351] EXT4-fs (loop5): pa ffff888106e7c1c0: logic 256, phys. 369, len 9 [ 52.302520][ T4351] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 52.313206][ T3613] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 52.325626][ T4351] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 52.370947][ T4367] loop3: detected capacity change from 0 to 512 [ 52.398603][ T4367] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.532237][ T4389] loop6: detected capacity change from 0 to 764 [ 52.540598][ T4387] loop5: detected capacity change from 0 to 512 [ 52.549074][ T4387] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.560905][ T4389] rock: directory entry would overflow storage [ 52.567181][ T4389] rock: sig=0x4f50, size=4, remaining=3 [ 52.572782][ T4389] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 52.592208][ T4387] EXT4-fs error (device loop5): ext4_init_orphan_info:611: comm syz.5.319: orphan file block 0: bad magic [ 52.616351][ T4387] EXT4-fs (loop5): Remounting filesystem read-only [ 52.637596][ T4387] EXT4-fs (loop5): mount failed [ 52.676641][ T4398] loop6: detected capacity change from 0 to 512 [ 52.711438][ T4398] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.730257][ T4398] EXT4-fs (loop6): mount failed [ 52.773799][ T4398] loop6: detected capacity change from 0 to 512 [ 52.786325][ T4398] EXT4-fs: Ignoring removed nobh option [ 52.804996][ T4422] loop3: detected capacity change from 0 to 512 [ 52.823454][ T4422] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.835776][ T4398] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.324: corrupted inode contents [ 52.850003][ T4422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 52.870148][ T4398] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.324: mark_inode_dirty error [ 52.896379][ T4422] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.333: corrupted in-inode xattr: e_value size too large [ 52.910792][ T4398] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.324: corrupted inode contents [ 52.944561][ T4398] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.324: mark_inode_dirty error [ 52.967210][ T4422] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.333: couldn't read orphan inode 15 (err -117) [ 52.968090][ T4398] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.324: Failed to acquire dquot type 0 [ 53.006775][ T4398] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.324: corrupted inode contents [ 53.021177][ T4398] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.324: mark_inode_dirty error [ 53.031299][ T4442] loop2: detected capacity change from 0 to 2048 [ 53.065650][ T4447] loop5: detected capacity change from 0 to 2048 [ 53.070122][ T4398] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.324: corrupted inode contents [ 53.087734][ T4398] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.324: mark_inode_dirty error [ 53.130590][ T4398] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.324: corrupted inode contents [ 53.153452][ T4453] netlink: 64 bytes leftover after parsing attributes in process `syz.3.347'. [ 53.163114][ T4442] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.179549][ T4442] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1778 with error 28 [ 53.192092][ T4442] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.192092][ T4442] [ 53.192355][ T4398] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 53.201859][ T4442] EXT4-fs (loop2): Total free blocks count 0 [ 53.201878][ T4442] EXT4-fs (loop2): Free/Dirty block details [ 53.201893][ T4442] EXT4-fs (loop2): free_blocks=2415919104 [ 53.212488][ T4398] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.324: corrupted inode contents [ 53.216386][ T4442] EXT4-fs (loop2): dirty_blocks=1792 [ 53.222647][ T4398] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.324: mark_inode_dirty error [ 53.228076][ T4442] EXT4-fs (loop2): Block reservation details [ 53.228093][ T4442] EXT4-fs (loop2): i_reserved_data_blocks=112 [ 53.243381][ T4398] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 53.304427][ T4398] EXT4-fs (loop6): 1 truncate cleaned up [ 53.318930][ T4398] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.340073][ T4462] loop3: detected capacity change from 0 to 2048 [ 53.423744][ T4469] SELinux: security policydb version 17 (MLS) not backwards compatible [ 53.458184][ T4469] SELinux: failed to load policy [ 53.500451][ T3613] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 53.512727][ T3613] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.512727][ T3613] [ 53.708944][ T4487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.731455][ T4487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.799380][ T4493] serio: Serial port ptm0 [ 53.926625][ T4500] syz.2.366 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.001347][ T4507] mmap: syz.2.369 (4507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.067222][ T4510] loop2: detected capacity change from 0 to 8192 [ 54.209757][ T4530] netlink: 68 bytes leftover after parsing attributes in process `syz.5.382'. [ 54.318470][ T4550] loop2: detected capacity change from 0 to 512 [ 54.348084][ T4550] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.363919][ T4550] EXT4-fs (loop2): mount failed [ 54.455610][ T4565] loop2: detected capacity change from 0 to 128 [ 54.462588][ T4565] EXT4-fs: Ignoring removed nobh option [ 54.471488][ T4565] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.669685][ T4580] loop5: detected capacity change from 0 to 512 [ 54.676789][ T4580] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.692538][ T4580] EXT4-fs (loop5): 1 truncate cleaned up [ 54.944734][ T4599] loop2: detected capacity change from 0 to 128 [ 54.971122][ T4599] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.094236][ T4611] serio: Serial port ptm0 [ 55.156441][ T4618] loop5: detected capacity change from 0 to 2048 [ 55.192222][ T4622] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 55.310240][ T3395] Process accounting resumed [ 55.418063][ T4638] loop5: detected capacity change from 0 to 512 [ 55.458258][ T4638] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.458446][ T4638] EXT4-fs (loop5): mount failed [ 55.665044][ T4660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.436'. [ 55.737179][ T4666] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.819030][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 55.864054][ T3587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.953063][ T3587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.078428][ T4664] Set syz1 is full, maxelem 65536 reached [ 56.099783][ T3587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.145040][ T3587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.230809][ T4695] loop5: detected capacity change from 0 to 1024 [ 56.271218][ T3587] bridge_slave_1: left allmulticast mode [ 56.276995][ T3587] bridge_slave_1: left promiscuous mode [ 56.282661][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.300507][ T3587] bridge_slave_0: left allmulticast mode [ 56.306218][ T3587] bridge_slave_0: left promiscuous mode [ 56.308162][ T4704] netlink: 'syz.6.452': attribute type 13 has an invalid length. [ 56.312512][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.372267][ T4708] loop5: detected capacity change from 0 to 128 [ 56.380469][ T4708] EXT4-fs: Ignoring removed nobh option [ 56.388110][ T4708] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.454471][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 56.454490][ T29] audit: type=1400 audit(1758927729.649:592): avc: denied { create } for pid=4711 comm="syz.5.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.480983][ T3587] team0: Port device geneve1 removed [ 56.524332][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.533356][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.534300][ T3587] bond0 (unregistering): Released all slaves [ 56.581423][ T4704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.582471][ T4672] chnl_net:caif_netlink_parms(): no params data found [ 56.614441][ T3587] hsr_slave_0: left promiscuous mode [ 56.614695][ T3587] hsr_slave_1: left promiscuous mode [ 56.614881][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.614895][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.615280][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.615294][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.620827][ T3587] veth1_macvtap: left promiscuous mode [ 56.621795][ T3587] veth0_macvtap: left promiscuous mode [ 56.666433][ T3587] veth1_vlan: left allmulticast mode [ 56.671962][ T3587] veth1_vlan: left promiscuous mode [ 56.672296][ T3587] veth0_vlan: left promiscuous mode [ 56.778806][ T3587] team0 (unregistering): Port device macvlan0 removed [ 56.816624][ T3587] team0 (unregistering): Port device team_slave_1 removed [ 56.834724][ T4732] loop6: detected capacity change from 0 to 2048 [ 56.842082][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 56.995081][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.995119][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.995266][ T4672] bridge_slave_0: entered allmulticast mode [ 56.995892][ T4672] bridge_slave_0: entered promiscuous mode [ 57.022680][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.022716][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.022871][ T4672] bridge_slave_1: entered allmulticast mode [ 57.023416][ T4672] bridge_slave_1: entered promiscuous mode [ 57.051575][ T4672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.052920][ T4672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.104862][ T4672] team0: Port device team_slave_0 added [ 57.105943][ T4672] team0: Port device team_slave_1 added [ 57.145716][ T29] audit: type=1326 audit(1758927730.319:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.145754][ T29] audit: type=1326 audit(1758927730.319:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.145845][ T29] audit: type=1326 audit(1758927730.319:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.145872][ T29] audit: type=1326 audit(1758927730.319:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.145896][ T29] audit: type=1326 audit(1758927730.319:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.145926][ T29] audit: type=1326 audit(1758927730.319:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.146032][ T29] audit: type=1326 audit(1758927730.319:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.146136][ T29] audit: type=1326 audit(1758927730.319:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.146168][ T29] audit: type=1326 audit(1758927730.319:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6e97eec9 code=0x7ffc0000 [ 57.278004][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.278020][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.278063][ T4672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.278638][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.278647][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.278669][ T4672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.363883][ T4672] hsr_slave_0: entered promiscuous mode [ 57.364368][ T4672] hsr_slave_1: entered promiscuous mode [ 57.364599][ T4672] debugfs: 'hsr0' already exists in 'hsr' [ 57.364611][ T4672] Cannot create hsr debugfs directory [ 57.605712][ T4763] loop6: detected capacity change from 0 to 512 [ 57.616152][ T4763] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 57.629032][ T4763] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.475: invalid indirect mapped block 4294967295 (level 0) [ 57.643303][ T4763] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.475: invalid indirect mapped block 4294967295 (level 1) [ 57.661231][ T4763] EXT4-fs (loop6): 1 orphan inode deleted [ 57.667025][ T4763] EXT4-fs (loop6): 1 truncate cleaned up [ 57.677082][ T4767] loop5: detected capacity change from 0 to 128 [ 57.697446][ T4767] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.705537][ T4767] FAT-fs (loop5): Filesystem has been set read-only [ 57.712328][ T4767] bio_check_eod: 35215 callbacks suppressed [ 57.712342][ T4767] syz.5.476: attempt to access beyond end of device [ 57.712342][ T4767] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 57.732253][ T4767] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.740255][ T4767] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.749613][ T4767] syz.5.476: attempt to access beyond end of device [ 57.749613][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.763147][ T4767] syz.5.476: attempt to access beyond end of device [ 57.763147][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.776682][ T4767] syz.5.476: attempt to access beyond end of device [ 57.776682][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.789997][ T4767] syz.5.476: attempt to access beyond end of device [ 57.789997][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.803386][ T4767] syz.5.476: attempt to access beyond end of device [ 57.803386][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.816852][ T4767] syz.5.476: attempt to access beyond end of device [ 57.816852][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.831103][ T4767] syz.5.476: attempt to access beyond end of device [ 57.831103][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.850351][ T4672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.861294][ T4672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.866687][ T4767] syz.5.476: attempt to access beyond end of device [ 57.866687][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.881863][ T4767] syz.5.476: attempt to access beyond end of device [ 57.881863][ T4767] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.885333][ T4672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.943758][ T4672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.061524][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.316829][ T4672] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.344922][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.352024][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.465777][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.473024][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.527201][ T4672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.537758][ T4672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.639414][ T4808] loop6: detected capacity change from 0 to 1024 [ 58.686654][ T4808] EXT4-fs: Ignoring removed bh option [ 58.696565][ T4808] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.715122][ T4672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.886744][ T4672] veth0_vlan: entered promiscuous mode [ 58.930345][ T4672] veth1_vlan: entered promiscuous mode [ 59.003140][ T4672] veth0_macvtap: entered promiscuous mode [ 59.027618][ T4672] veth1_macvtap: entered promiscuous mode [ 59.034700][ T4829] loop3: detected capacity change from 0 to 512 [ 59.048622][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.062898][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.074429][ T4829] EXT4-fs warning (device loop3): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 59.090705][ T3605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.106154][ T3605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.134294][ T3605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.155413][ T3605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.281503][ T4846] Invalid ELF header magic: != ELF [ 59.468081][ T4863] loop5: detected capacity change from 0 to 512 [ 59.499843][ T4863] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.741412][ T4885] loop6: detected capacity change from 0 to 2048 [ 59.799040][ T4885] loop6: p1 < > p4 [ 59.803993][ T4885] loop6: p4 size 8388608 extends beyond EOD, truncated [ 59.887912][ T4903] loop3: detected capacity change from 0 to 1024 [ 59.906271][ T4907] capability: warning: `syz.6.522' uses deprecated v2 capabilities in a way that may be insecure [ 59.992654][ T4903] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.520: Allocating blocks 385-513 which overlap fs metadata [ 60.049391][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 60.099941][ T4903] EXT4-fs (loop3): pa ffff888106e7c380: logic 16, phys. 129, len 24 [ 60.108116][ T4903] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 60.251159][ T4927] sd 0:0:1:0: device reset [ 60.282132][ T4926] loop2: detected capacity change from 0 to 2048 [ 60.436988][ T4946] l2tp_ppp: sess 2/0: no socket in recv [ 60.640196][ T4958] loop2: detected capacity change from 0 to 2048 [ 60.718344][ T4958] loop2: p1 < > p4 [ 60.727990][ T4958] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.738302][ T4968] loop5: detected capacity change from 0 to 128 [ 60.754532][ T4968] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.847949][ T4976] loop6: detected capacity change from 0 to 512 [ 60.875826][ T4976] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.897435][ T4976] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 60.911594][ T4976] EXT4-fs (loop6): 1 truncate cleaned up [ 61.818482][ T5011] loop2: detected capacity change from 0 to 1024 [ 61.856016][ T5011] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.856631][ T5008] loop3: detected capacity change from 0 to 8192 [ 61.952635][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 61.952652][ T29] audit: type=1400 audit(1758927735.149:696): avc: denied { connect } for pid=5026 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.026251][ T5032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.047954][ T29] audit: type=1400 audit(1758927735.179:697): avc: denied { setopt } for pid=5028 comm="syz.5.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.110166][ T3597] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 393: padding at end of block bitmap is not set [ 62.131398][ T5043] syz_tun: entered allmulticast mode [ 62.150873][ T29] audit: type=1400 audit(1758927735.279:698): avc: denied { connect } for pid=5036 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.164824][ T5043] dvmrp1: entered allmulticast mode [ 62.170396][ T29] audit: type=1400 audit(1758927735.279:699): avc: denied { setopt } for pid=5036 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.189741][ T5047] loop5: detected capacity change from 0 to 256 [ 62.195119][ T29] audit: type=1400 audit(1758927735.279:700): avc: denied { read } for pid=5036 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.230311][ T3597] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 62.243038][ T3597] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.243038][ T3597] [ 62.265760][ T5047] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.279233][ T5042] syz_tun: left allmulticast mode [ 62.311762][ T5047] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.336034][ T5050] loop6: detected capacity change from 0 to 512 [ 62.350999][ T5050] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.363748][ T5047] syz.5.579 (5047): attempted to duplicate a private mapping with mremap. This is not supported. [ 62.394712][ T5050] EXT4-fs (loop6): shut down requested (0) [ 62.403684][ T29] audit: type=1400 audit(1758927735.599:701): avc: denied { read } for pid=2972 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.440534][ T5050] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 62.488291][ T5050] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 62.501951][ T29] audit: type=1400 audit(1758927735.599:702): avc: denied { search } for pid=2972 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.523580][ T29] audit: type=1400 audit(1758927735.599:703): avc: denied { search } for pid=2972 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.545094][ T29] audit: type=1400 audit(1758927735.599:704): avc: denied { add_name } for pid=2972 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.561705][ T5060] loop2: detected capacity change from 0 to 1024 [ 62.566090][ T29] audit: type=1400 audit(1758927735.599:705): avc: denied { create } for pid=2972 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.587929][ T5050] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 62.593258][ T5061] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 62.625007][ T5050] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 62.634441][ T5050] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 62.643694][ T5050] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 62.842780][ T5057] loop3: detected capacity change from 0 to 32768 [ 62.869313][ T5073] loop6: detected capacity change from 0 to 512 [ 62.893875][ T3609] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 62.911275][ T5057] loop3: p1 p3 < > [ 62.928157][ T3609] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 62.939322][ T5073] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.940827][ T3609] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.940827][ T3609] [ 62.960877][ T3609] EXT4-fs (loop2): Total free blocks count 0 [ 62.966868][ T3609] EXT4-fs (loop2): Free/Dirty block details [ 62.972906][ T3609] EXT4-fs (loop2): free_blocks=68451041280 [ 62.978873][ T3609] EXT4-fs (loop2): dirty_blocks=320 [ 62.984209][ T3609] EXT4-fs (loop2): Block reservation details [ 62.991248][ T3609] EXT4-fs (loop2): i_reserved_data_blocks=20 [ 63.224922][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 63.311184][ T5098] rdma_op ffff88810cbdd980 conn xmit_rdma 0000000000000000 [ 63.365897][ T5105] netlink: 76 bytes leftover after parsing attributes in process `syz.0.600'. [ 63.440755][ T5052] syz.3.582 (5052) used greatest stack depth: 7512 bytes left [ 63.645733][ T5124] FAT-fs (loop7): unable to read boot sector [ 63.753347][ T5133] loop3: detected capacity change from 0 to 128 [ 63.773868][ T5133] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 63.806007][ T5138] loop2: detected capacity change from 0 to 1024 [ 63.840959][ T5133] bio_check_eod: 12465 callbacks suppressed [ 63.841013][ T5133] syz.3.613: attempt to access beyond end of device [ 63.841013][ T5133] loop3: rw=0, sector=97, nr_sectors = 944 limit=128 [ 63.868963][ T5138] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.933612][ T37] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 64.075900][ T3587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 393: padding at end of block bitmap is not set [ 64.106806][ T3587] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 64.119579][ T3587] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.119579][ T3587] [ 64.131577][ T5164] policy can only be matched on NF_INET_PRE_ROUTING [ 64.131607][ T5164] unable to load match [ 64.204361][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 64.214232][ T5166] loop6: detected capacity change from 0 to 8192 [ 64.258530][ T5166] loop6: p2 p3 p4[EZD] [ 64.263305][ T5166] loop6: p3 start 360447 is beyond EOD, truncated [ 64.269940][ T5166] loop6: p4 size 264072 extends beyond EOD, truncated [ 64.555106][ T5195] loop9: detected capacity change from 0 to 7 [ 64.566010][ T5195] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.566626][ T5191] infiniband syz!: set active [ 64.574242][ T5195] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.578702][ T5191] infiniband syz!: added team_slave_0 [ 64.586566][ T5195] loop9: unable to read partition table [ 64.598109][ T5195] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 64.598109][ T5195] ) failed (rc=-5) [ 64.603312][ T5191] RDS/IB: syz!: added [ 64.615471][ T5191] smc: adding ib device syz! with port count 1 [ 64.621901][ T5191] smc: ib device syz! port 1 has pnetid [ 64.954523][ T5241] loop3: detected capacity change from 0 to 512 [ 64.971328][ T5241] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.115448][ T5260] loop5: detected capacity change from 0 to 2048 [ 65.160569][ T5270] loop3: detected capacity change from 0 to 128 [ 65.167537][ T5260] loop5: p1 < > p4 [ 65.186600][ T5260] loop5: p4 size 8388608 extends beyond EOD, truncated [ 65.201525][ T5270] syz.3.674: attempt to access beyond end of device [ 65.201525][ T5270] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 65.270386][ T5280] loop5: detected capacity change from 0 to 128 [ 65.298761][ T5280] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 65.305571][ T5278] loop2: detected capacity change from 0 to 4096 [ 65.306656][ T5280] FAT-fs (loop5): Filesystem has been set read-only [ 65.314637][ T5278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.347026][ T5280] syz.5.678: attempt to access beyond end of device [ 65.347026][ T5280] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 65.387567][ T5280] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 65.395468][ T5280] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 65.416427][ T5288] syzkaller0: entered promiscuous mode [ 65.421963][ T5288] syzkaller0: entered allmulticast mode [ 65.457326][ T5280] syz.5.678: attempt to access beyond end of device [ 65.457326][ T5280] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 65.504592][ T5280] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 65.528522][ T5280] syz.5.678: attempt to access beyond end of device [ 65.528522][ T5280] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 65.548846][ T5280] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 65.556713][ T5280] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 65.565852][ T5290] syz.5.678: attempt to access beyond end of device [ 65.565852][ T5290] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 65.579170][ T5290] Buffer I/O error on dev loop5, logical block 2065, async page read [ 65.590147][ T5290] syz.5.678: attempt to access beyond end of device [ 65.590147][ T5290] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 65.603358][ T5290] Buffer I/O error on dev loop5, logical block 2066, async page read [ 65.613295][ T5290] syz.5.678: attempt to access beyond end of device [ 65.613295][ T5290] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 65.626486][ T5290] Buffer I/O error on dev loop5, logical block 2067, async page read [ 65.636591][ T5290] syz.5.678: attempt to access beyond end of device [ 65.636591][ T5290] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 65.649863][ T5290] Buffer I/O error on dev loop5, logical block 2068, async page read [ 65.660158][ T5290] syz.5.678: attempt to access beyond end of device [ 65.660158][ T5290] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 65.673357][ T5290] Buffer I/O error on dev loop5, logical block 2069, async page read [ 65.682164][ T5290] Buffer I/O error on dev loop5, logical block 2070, async page read [ 65.690648][ T5290] Buffer I/O error on dev loop5, logical block 2071, async page read [ 65.698798][ T5290] Buffer I/O error on dev loop5, logical block 2072, async page read [ 65.936182][ T5318] loop6: detected capacity change from 0 to 128 [ 66.095594][ T5319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 66.104564][ T5319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 66.117075][ T5318] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.205193][ T5325] netlink: 96 bytes leftover after parsing attributes in process `syz.5.695'. [ 66.244512][ T3609] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.354055][ T5348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.702'. [ 66.490347][ T5363] loop6: detected capacity change from 0 to 256 [ 66.503276][ T5363] /dev/loop6: Can't open blockdev [ 66.509806][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 66.803076][ T5391] loop3: detected capacity change from 0 to 512 [ 66.827960][ T5391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.844081][ T5391] EXT4-fs (loop3): 1 truncate cleaned up [ 66.846986][ T5394] loop5: detected capacity change from 0 to 128 [ 66.953509][ T5402] loop3: detected capacity change from 0 to 764 [ 66.961316][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 66.961393][ T29] audit: type=1400 audit(1758927740.159:1038): avc: denied { mount } for pid=5401 comm="syz.3.730" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.992236][ T5402] rock: directory entry would overflow storage [ 66.998568][ T5402] rock: sig=0x4f50, size=4, remaining=3 [ 67.004291][ T5402] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 67.028094][ T29] audit: type=1400 audit(1758927740.219:1039): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.076573][ T5410] loop5: detected capacity change from 0 to 1024 [ 67.088728][ T5410] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.200535][ T5418] netlink: 204 bytes leftover after parsing attributes in process `syz.2.737'. [ 67.242574][ T29] audit: type=1400 audit(1758927740.439:1040): avc: denied { execute } for pid=5419 comm="syz.2.738" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.263561][ T29] audit: type=1400 audit(1758927740.439:1041): avc: denied { execute_no_trans } for pid=5419 comm="syz.2.738" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.296734][ T5422] loop6: detected capacity change from 0 to 512 [ 67.303665][ T5422] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 67.332564][ T5422] EXT4-fs (loop6): 1 truncate cleaned up [ 67.345314][ T3617] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:42: bg 0: block 393: padding at end of block bitmap is not set [ 67.365496][ T3617] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 67.378199][ T3617] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.378199][ T3617] [ 67.393846][ T5430] loop3: detected capacity change from 0 to 512 [ 67.411188][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 67.441839][ T5430] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.462397][ T5440] netlink: 'syz.6.747': attribute type 7 has an invalid length. [ 67.470316][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.747'. [ 67.497847][ T5446] netlink: 14 bytes leftover after parsing attributes in process `syz.5.750'. [ 67.546327][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 67.555203][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 67.568893][ T5457] loop6: detected capacity change from 0 to 128 [ 67.594846][ T5459] wg2: entered promiscuous mode [ 67.599810][ T5459] wg2: entered allmulticast mode [ 67.631763][ T29] audit: type=1326 audit(1758927740.829:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.2.755" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa259a7eec9 code=0x0 [ 67.851725][ T5477] loop5: detected capacity change from 0 to 1024 [ 67.858472][ T29] audit: type=1400 audit(1758927741.039:1043): avc: denied { write } for pid=5476 comm="syz.5.760" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.881938][ T5477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.913779][ T5477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 67.925213][ T5477] System zones: 0-1, 3-12 [ 67.933262][ T5477] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.760: bg 0: block 88: padding at end of block bitmap is not set [ 67.997019][ T29] audit: type=1400 audit(1758927741.189:1044): avc: denied { bind } for pid=5501 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.023103][ T5505] loop3: detected capacity change from 0 to 512 [ 68.026236][ T29] audit: type=1400 audit(1758927741.199:1045): avc: denied { setopt } for pid=5501 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.033343][ T5505] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.056888][ T5505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.069871][ T5505] EXT4-fs (loop3): 1 truncate cleaned up [ 68.464537][ T5505] ================================================================== [ 68.472708][ T5505] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 68.480730][ T5505] [ 68.483068][ T5505] write to 0xffff88811a0369a4 of 4 bytes by task 5512 on cpu 1: [ 68.490811][ T5505] xas_set_mark+0x12b/0x140 [ 68.495342][ T5505] tag_pages_for_writeback+0xc2/0x290 [ 68.500728][ T5505] ext4_do_writepages+0x6b2/0x2750 [ 68.505858][ T5505] ext4_writepages+0x176/0x300 [ 68.510635][ T5505] do_writepages+0x1c3/0x310 [ 68.515253][ T5505] filemap_write_and_wait_range+0x144/0x340 [ 68.521168][ T5505] filemap_invalidate_pages+0xa4/0x1a0 [ 68.526639][ T5505] kiocb_invalidate_pages+0x6e/0x80 [ 68.531841][ T5505] __iomap_dio_rw+0x5d4/0x1250 [ 68.536612][ T5505] iomap_dio_rw+0x40/0x90 [ 68.541033][ T5505] ext4_file_write_iter+0xad9/0xf00 [ 68.546250][ T5505] iter_file_splice_write+0x666/0xa60 [ 68.551649][ T5505] direct_splice_actor+0x156/0x2a0 [ 68.556779][ T5505] splice_direct_to_actor+0x312/0x680 [ 68.562161][ T5505] do_splice_direct+0xda/0x150 [ 68.566929][ T5505] do_sendfile+0x380/0x650 [ 68.571376][ T5505] __x64_sys_sendfile64+0x105/0x150 [ 68.576591][ T5505] x64_sys_call+0x2bb0/0x2ff0 [ 68.581280][ T5505] do_syscall_64+0xd2/0x200 [ 68.585801][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.591702][ T5505] [ 68.594025][ T5505] read to 0xffff88811a0369a4 of 4 bytes by task 5505 on cpu 0: [ 68.601568][ T5505] file_write_and_wait_range+0x10e/0x2c0 [ 68.607391][ T5505] generic_buffers_fsync_noflush+0x45/0x120 [ 68.613292][ T5505] ext4_sync_file+0x1ab/0x690 [ 68.617975][ T5505] vfs_fsync_range+0x10a/0x130 [ 68.622760][ T5505] ext4_buffered_write_iter+0x34f/0x3c0 [ 68.628334][ T5505] ext4_file_write_iter+0xdbf/0xf00 [ 68.633557][ T5505] iter_file_splice_write+0x666/0xa60 [ 68.639048][ T5505] direct_splice_actor+0x156/0x2a0 [ 68.644261][ T5505] splice_direct_to_actor+0x312/0x680 [ 68.649727][ T5505] do_splice_direct+0xda/0x150 [ 68.654500][ T5505] do_sendfile+0x380/0x650 [ 68.658934][ T5505] __x64_sys_sendfile64+0x105/0x150 [ 68.664157][ T5505] x64_sys_call+0x2bb0/0x2ff0 [ 68.668849][ T5505] do_syscall_64+0xd2/0x200 [ 68.673399][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.679406][ T5505] [ 68.681728][ T5505] value changed: 0x02000021 -> 0x04000021 [ 68.687442][ T5505] [ 68.689765][ T5505] Reported by Kernel Concurrency Sanitizer on: [ 68.696207][ T5505] CPU: 0 UID: 0 PID: 5505 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.706022][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.716085][ T5505] ==================================================================