last executing test programs: 43.379346561s ago: executing program 3 (id=67): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x200000000000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 43.220210675s ago: executing program 3 (id=72): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r1 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) 42.365565439s ago: executing program 3 (id=88): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x47b, &(0x7f0000000a00)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 42.006935458s ago: executing program 3 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') 41.757950505s ago: executing program 3 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, 0x0, 0x0) 41.468293033s ago: executing program 3 (id=104): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 41.468164853s ago: executing program 32 (id=104): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 22.837554548s ago: executing program 1 (id=556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2, 0x20000003}, 0x0, 0x0) 21.787068118s ago: executing program 1 (id=586): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r0, 0x8000) listen(r1, 0xfffeffff) 21.69870643s ago: executing program 1 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 21.68125815s ago: executing program 1 (id=588): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$eJzs3MtvVFUYAPDv3j5406r4AEGrmEh8tLQ8F24wmrjQxEQXGFe1LQQZqNKaCCGCLnBpSNwblyb+Ba50Y9SViYkr3RsSYtiAJiZj7p1723E6UzvtwFDm90sunDP3DOd8c86Z+zhzCaBnjWR/JBFbI+K3iBiqZf9bYKT2160bF6f+unFxKolq9Y0/k7zczRsXp8qi5fu21DLVapHf0KTeK29HTFYqM+eK/Nj8mffG5s5feP7UmcmTMydnzk4cPXrwwJ7BwxOHOhJnFtfNXR/N7t75yltXX5s6fvWdH7/O2ru12F8fR6eM1D7dpfo6XVP3batLJ/1dbAhtyYZi1l0D+fwfir7YtLBvKF7+pKuNA26rarVabXZ8LlyuAvewJLrdAqA7ygN9dv1bbnfo1OOucP1YxPtHavHfKrbanv5IizIDDde3nTQSEccv//1FtsVtug8BAFDv22MR8Vyz8780Hqort71YQxmOiPsi4v6IeCAidkTEgxF52Ycj4pE2629cIVl6/pNeW1VgK5Sd/71QrG0tnP/9U83jLwz3FbltefwDyYlTlZn9xWeyLwY2ZPnxZer47qVfPmu1r/78L9uy+stzwZr0Wn/DDbrpyfnJNYa94PrHEbv6G+LPJVEu4yQRsTMidrX1Ly9eYZx65qvdrUr9f/zL6MA6U/XLiKdr/X85GuIvJS3XJ8ePHJ44NLYxKjP7x8pRsdRPP195vVX9a4q/A7L+39w4/hd771I25JONEXPnL5zO12vn2q/jyu+ftrymWe34H0zezNODxWsfTs7PnxuPGExeXfr6xOJ7y3xZPot/395m4z/Nv+Oi6P9HIyIbxHsi4rGIeLxo+xMR8WRE7F0m/h9efOrd9uNf5q58B2XxTzfp/7rxP5ylFvu//UTf6e+/aT/+Utb/B/PUvuKVlXz/rbSBa/nsAAAAYL1I89/AJ+noQjpNR0drv+HfEZvTyuzc/LMnZj84O137rfxwDKTlna6huvuh48W94TI/0ZA/UNw3/rxvU54fnZqtTHc7eOhxW1rM/8wf9+BzKkADz2tB7zL/oXeZ/9C7Fuf/4a62A7jzHP+hdzWb/5e60A7gznP8h95l/kPvMv+hd5n/0JNaPhufrumR/3Wb+HX7XdGMdZCItP139Uc32zzY1dpXnehf8X9mscrEhqa7uv3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BgAA//92QvTM") prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6e) 21.381752698s ago: executing program 1 (id=597): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 21.206664444s ago: executing program 1 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001"], 0x118}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21.035967698s ago: executing program 33 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001"], 0x118}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.79086566s ago: executing program 2 (id=1149): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x0, 0x4, 0x8}}, 0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.616304355s ago: executing program 5 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') 1.541491577s ago: executing program 5 (id=1158): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) fsetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000000200)='\x00', 0x1, 0x0) 1.303610544s ago: executing program 5 (id=1165): r0 = socket(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x28}], 0x1}}], 0x1, 0x4046040) 1.239882635s ago: executing program 5 (id=1167): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.207921636s ago: executing program 5 (id=1169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 981.403033ms ago: executing program 4 (id=1175): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 912.331294ms ago: executing program 4 (id=1176): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2042, 0x58) pwrite64(r0, &(0x7f0000000140)='2', 0xffffff77, 0x8000c61) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0x361, 0x0) 767.329778ms ago: executing program 2 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000280), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 672.121851ms ago: executing program 0 (id=1179): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 671.601891ms ago: executing program 2 (id=1180): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x9}, @TCA_BPF_FD={0x8}]}}]}, 0x40}}, 0x0) 588.345184ms ago: executing program 0 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 530.448195ms ago: executing program 2 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 524.377355ms ago: executing program 0 (id=1185): sendmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x48, 0x88, 0xb7, "e772a515658979a241969e1ae379df4fb06e279014b0487df1ad7481989f964caedffb5f5f0f5fdb8273b7a771f721c5af"}, {0x40, 0x103, 0x7, "49a2237900c34ee5a208d641a8348f48e0f3ff79ed203730832070464ba7f0683fa4535f09775285e2"}, {0x110, 0x115, 0xff, "b799dc33193010e7abb23f1487740739de85a9b8bc8193c24d1a229021570def17fbcc3bc3b410086390d3378e4ac84a53cdc38a95cb5952e66e9d2e938ebc00a1f04479bc91cf2a448a1a08f8018f1e307d8e05725c589361ad4d3d2aaa367ede462db9f86a5037c203724287dea5ff00aa86f390d4bd46696cc00e6fdfe45f0f5f90625924d59d5c4580d88734f26e8e0c46f975d42e13ccf056c638dbcc6c0bda91cfd7a91e266e7b698c39fd42faaa1fad17726ee932408378d0c16d6043fac71660b2c7296ff09d0b07f703e6257dcc89f9453cc14747dc0c44962af44e97c18b06d1ba2dbe5c18d3f001619ec21f56480e9080498cf1"}, {0xc8, 0x112, 0x3, "1db8e3243483a8b59278bbcd2af8da442594abf3ebeba1db127f90ab3bcf1f9be2f2cf7bde423578b4321207d3fec1b5023bb5f3ffcb580096b092c2d1f2bc1a58f774d112f580f11637c3f0c638d208523cf43a7fd391be8c78bd44a508b178641136e9f1daf94e7ce1a16e76f3a7eaee6599f3313fa60a443bc853d5c6c9a9ffaa6b8e1a19d47cc09a7fdc21751b413b1168925e77ceb1405970f85ff3d5b88be00ca2ec67037a609d5caefdbef21025"}, {0xd0, 0x108, 0x101, "6577241bc261b51a43da47b44a36da396e3eb39bad0e0d1b660ecffbec51d870a8b9edf172ce0fcd35e536db6f7fb00ade2d84a9e7a149df8f6f94d8e1ae27cdf76cec62869653701034be222a14d9a9d46e3d798c5c205b5f57ec4ffd53dd4d1765eb6429f72199817c78542b2bd3c37a572f55afe5b63377194a69a56b7a59475ed4cf521c93edd95a2b90c631dd1028ecfbeb613c47bda85f150622834cdbe63212a5450180f7222ab16934e5a4f9370bfc8970d4ef9085"}, {0x68, 0x102, 0x7fff, "3fca03bd7589b702104e567f7e11b994fdcce192d6e992d7aa41e98e29dd82db2be838a00399b440a50ad3db8c43ebac088f7c7a45f5b9f5981ee961f15f8a36e3949eed2ad238338ba1461529a26ba90e"}, {0xc0, 0x0, 0x6, "7254c971c07fec3c9910b4294d9a7cd8107605b3199ed679599711e2e4e34489af1cab4a4f97590e7ae5bc24f4f6966bd74a1fd5f13e4999727a4571904246d82be1e59539152595f37130fa53eb703143087e25e6599220932a205711837852cd6258f926b4064a4a855cc3e8aa54f454124848aa561294d1a28d631c0a71b682a43a9bce7637c7870d2425d6adbbc742c6945c0460833b6d83b1bc82dbc28f4727c31e6296746db0"}, {0x1010, 0x10a, 0x1, "4bb39c15b3f67ace39d33f1db8501a0cd0f207606568a71f5068858e97da55e6ec61d1297bfde8302246794acf342dda11a183adb9eb00fe306071be28ba0989e14f22b906fe4ff8cd0a7e678a45e4a7bb76006bf06465ffe593da60707f2be0a97d636b533f14705286fc973acb209c31f69c901c2c6ad75545d59847cd02dc8cf10ffcd13296a71eda0e3971b28c9556b02aac884c0e27537faba854a826cd366ea9bdde83e4e3fe0a202155671f77fdd5f037bfa43c12c1a1f013e8e6a5430620f3ab7236ad0cf21658bb88b2773c5d22532b80d14b2fe9847769c9a2d2a18e791b8d9cb3ec361c47702f383f96f1c02fc8dbda6bc3329672b552dbd9b0cd2e98bbddd3428015c522192b3030f3831428c4c402aee1db0b8191e77dce573d8f1ccded92780eec21d05fa8b948438acc915a08347787580411d7ffbd8f17da7c8744da6fccca998d34721860b20e4853e40c9842bd015f47248afc7944d9e1739c08d754833c1041ce22033df25a56c8e21e66050780b97b256189db2677292bae71e185d62202f53fa7c7f8d103e6702bde3acf0966214964ef38dcdc5c9a046228c06147d8310954fc551ba971978eb55ae656ee370d319887f932cc6dd3909cac6a9157b61ff6a5e57ac30592f0939e79012658f3d100e8acc493d3d24c2e9b6bec9dfa16bcbf2cca5094ab8867daa39eb1800ee3e78a08b7a17340bdbcd719c1e86e058b1a431aea08203d32a9f3e29f0628599e43fd70760e8042783c2e6a3a5896a53c45f815f3476a2108f20b05549575a09c33c3cf8b26ea7fdd9f8e2c149576b82943dbe0d36646e453353d12fcb18a317658c5df0a777c1e9559fceffac08ebd8c3b338642434d9351aad47bfd6e3ffba38d78c75dbadd92d947b79a0b9963ed37a300f47031be080088cbae5b2bcd85d4536367fdcf81015ae53693e4e5381e02342cc7cb797dc083171004ce1925c747bdc5e3b46cd546891b15f121ad266a5e89942e30c1c453689fca2d2cc996fb2e0b64cc3d2d47c5e11fe2a39b4a34bdff11ac0f221d761f6828fc5848f339ab22693c6bd51ff8bb78bed584617c3464f2e1f1ab2a0d0993b8bb92c851818daa174dbc342dd3eec68139c9e78e123dd5659059562bffc0f77fd55f8195bb29e1d425c9707fbde93cc2966c2793f14862d7b97b33fec36681709dcf5707ef0039eac0b59033af40f6b281cef9f0cff30a463c7bdf0a3ba86fa1a981c0b4fd6e709897bcc46ebf11a5d1e0c6a2698fe64ee8c55dd86f1603211ca5d911a34011eb453cb4d7f42dc0d5e37d0f0f89cbf7971f6188d6805e829049aeca432b27a33a7e4958b7c445be57a2f7b419dc229d61d7888ce8e7f15f309c52fd345726b5a724d9aff6b70be83b7c944d3b0eb29fb9fe244a0b9335ff4bac514ac1dd6a549bdf48759b47fefad3b96c8b2519a93b11dc2bbe38c1f0c86a530774306ab76a6c72247a78a45cd9766649573e33e2d843c90ef3a2aef0d881b714d743e9b56a30a76579061abfd29243ad71ca6e33b5409e945293c0146871a49d3a0ad813ff2c4961c132d47104233d48b7903f76f48c542edaa09953ed73a0a5646dff1828924d44adf1ed8b7d20acd013bc184aa2aab591adb00cd8e01a97dce61b37df308382ac94e9fe5995e0c1abd2eda719f83a2e211c883e3b12130b208f0cc114fc6ef0e540934efc7c17e9459dc403b9e42f75b2cf9bfb12d80f017673b1881c1e40ef4f4fe9a2c484397753ec08cdbb13ec4a24ce1f277514e8c44743a966dc38730c618b48db15375a30e2e42fa6168956cf0b0f4115c5bf7eeaca71593f3e7082cea20f72a59636528569f896de9022c9f50752aa3a69af421630768407c9de074e2eda30cff5b6b9a099b7728e1d72694153759b2491de3bbb4006b9bea8ded8aadb0027b2b9d0e1307a219b860d78f20d3a0deb40de04bcdecf110812cd200bda10620773871a6ead6a8cf37f3ced8e22a79ad9f1ae82fcf60b51a977422c76d07f012c6df515a3b103037a0c8041073cfddf92ad64db067e9002dadda852e3fbe4b24f387f32c495da1a80dbb41f43ab6bc54bcef66c1ec16b0552c171297dc731773d5a0cb7aaf0c818dc416e6a07064c27be00a5e6a1de51658f49dfa65929fffcc34de84bf865d457cc745e7458d594370ba75da58009fa2510574a50079f28c3d486d31c61759ee44e7cdca0470a5b8af66404c6d2a4829d4fbc933847a3a4fd0ab623a52cd6646c8537a783dc2b99396e66cf41630beb5b95dde2b851b1b7efbc9a1e6498a846651f63f9b9bb036813c1177b2423e8a5aa8c52f179eb1687b3b14819546b06360e44ebea10ea19cdb211f84c09d28284ad75a8e96d95f39cadb598c441c6aa67d6c0dc2d83cb0b2212c241d667b940eb0edb8e0cac8a68fe30b404b288184f35214250d135a611d5844ba325f2d269fa47199804476d88585db2d64b1618efd5281e9d631cdf0e74e283163b274f86d7e350bb71f2ecb39a3626189686a74db13f0da9411ad47a46883aff5ffc5719f5e018e071cc643d1627850824758fc6a6bf29c93b79c5ba6fc3bee65fe31ed8e8506c6a9b1d8f9759442cbbe93d3e26918b6a0bd080826b72c42480cb0b6a74190dd3616f1b8f3db7e215849d2a7145ef1a01ab6639885dc1f90482599c4f631a9fa55dd37c885d13dab8584ecda98ce03b881c75bb6ef26932ee1bf75b6b9c7cbb160ecaf25f18f4fe8207ae06a96b3af73c931a53aee86838d14776fffc06b0219468bb062da60b4ac57b11b79833628695e807ffbac575ea7092086f67e8603e330f71dd0fb773ddf8d3be949f3cf6edc7568692691423314e6159480d23407e9f61c9daed5e10a150792cded8538a51f0d0fd782eea932ce48bf39d0437508b1cb5fc2415b92c95c0ba312391313376bccdffb477d00261f57b744336faccf9809af3b940f731ad1dcb9d09d3e6f1c591dbd5a223dcbe1845d1a18a1c908c21d449b229a9826836110dcbc3713fcbe68131d6c7f02475c389732a1e336c6bff724bfb6ed8b020957fd89ebb12ee47681b81fe1b86e3e7093fbd1f21722c2930f81c54bc5e13f073e811c02431cf0801f2bd91a61ef85263655248111194c6cfd51f4c6c0466d725d2f0ab0ea8426ccf848e22770995bacd6241a034a03ddeeed98761f2154179273289e774759ef7a52a1d1f5bf6dd6984d544dc901724ea6c95b0c31b8606c1d8c913a21ff275fa015bcde495e60f71d2e226e0e51fc36165dffc7c87e12d1a483196130cec395893dbedeaa236ea3d7839e6ac048d8c794d0ec1146c3dd02eb53841928d320c22ea96e4b7d3c8b5d9b4c358f2ec90abca418102cdc256bd13e431db5748d8cdcf99ca166387a4f00aa235700923dc6620e4c6f3fe3a05064cfacbaee9b9e4da2b94c9aec5c1284773df7bdfbbbd94fa3eb4d3b69f8eb2e02814c428fb5e4804b8943cc89cd728d1d715f4b31d2a984bdcdb6361d821e4d5db68e8037cba5701afc87b3b58d4c9c55fdca72c8cfa72c2e2122d580aabd51c707325b00e4ac08179670b4e42d0e57f7367422ae55310f1590db3f4107f74ebdcec8b844a85fc511c2600b0047204ef3e931f3f129f26a2968e6a17d3113bf15a374ef3de78198249f64ee7fc364c56178ada39057bf54d788ba24ccafa5aa9c8364bf77a4c41847940a495547e8160017d16918aa0b1738ac24c5fbfa431d856292def37cb3f1afcba117e7afcaceaeaf77025785c7f2959eb4fc63b7940d186cb5c66949b5410dcdcb1c6a8760b0768427640f120b3b1d3ac2fbd6706b85af590ab19e98fa385c0cf8fa859c26a71f96de565b318eed4258ddeeef246599107e922c0778e6964315e0d3929c945599964db1221af26c301211477aa3184ea5bdeb446e89ee8b92afe932b73918ebd26af3145d18176eab17183600ba1e3d6f35c79034e172219f34bca459a2e78c64f413ed4965c19c321f1464c1c08d8db141083cb4ebbe293721a1d8c8edda7f6bfbc78ee287eb6f870237db0d91278c57e4914c2ae7a19ecf2a2a9c2a8c1d8c32e9e7b278891712cf10ff167b1da844339ca90b9b17d15ab74e69030f5a5b4a3ab384f0ed5578ea080dcb78e055b29c6321b8d83316596d7bc34d93a6971647d49bfb2096b2227ce5eeb9ec633e54639bda08309cd232cd69c6991e7912fbb920eb8e99e05793a6ec641d25d6ab0807d562a483dad8be6bd6ef0a44175963664333c5a2be354f58948f8510b742ecf92546412c4cb068a5257cbcfd938d279f7cad7be70037c99276dfeb432ba2672b7d1ead72ca319852e7eed3920383472bbebe710962ee663fff457ada3677f04532e3744bb8eed5dc98b9d2d9e20e5ce38b8bc3d10c6c07dc4a59f73283864fa1769e46c8738e8ff2f5f7c72c081bf91ec2dc173fa15be6c72f9a696b9411cadb4b0ba22c6ac84e38e52f1bff5dab5c9c2d6590aa359d81fab39dffe634230970edaf92c2e86efd9d897cfc3b3c552b240500d5592ff27b20e635e81a334c31b2cb494b72c56aca7a00e0281f244b54547b7d3320ea97e97b798e8c9508bc20812bb3ca8216945933729d8bf4d5a179a6b75c650c1992cb43fa8bdb7dfbbb567bd3090a3eec73864d166fabff981803637d4cba504e57fb75dff878836e0f02d6e8875f0a700a70159f6fda60ef524976c24b74f8b4591eeabbc5cdc2c6792c57aa40ea78725974b945e0290d66cadd89db70a49666ab5b05eeaa014d7cfa5d02a166c0325aeae7aa8c239cbe6b9c62120c79a293e09afd3b1a1e3dc7d6165958449a6c4c11138d75fbec4ec31e7b9e3fcf5ee8eb822c648057f993edbfeb391ded35924585e3b6c92c6576b8d41e92756cb52e854ad3de74afb157f9dc53e18318a65cf030d1814a5b00c212a650d874aca2fbb40bec8d898b0ff6a32ccc9f87e12478de48bbe290b9d2918bef64065b34b0b4a7e78f8e61414e067c5a983ddcc86024a82262f04707381f821511f33b17ce29a0e11ee06c2bd04c0f3dfc8baf3d858d47227115553c6906e1a669b833b277213f6203b15c89bc95b11be76a2ee976df4fd162b4e5c9c609e51c29ef6f9b6ff398bdc1a21938cb00d05053c3f2d02cacf156cf5070829b9794caa499c9a01d5dd06a248d5e8a6776c850d2c7ef20b9fc7cd588ede519fdb0314b2d421816c593df2a87437ccb76b6853b0eb0d12333aa91da68090d3a2ac375ec1cceb499b1069ea19dcff1231397fa3f13c01913b37da213dac6c46c66dd5015d572a45f2fd5fe5c2798b0e4c47c5624712c13804ecf568c4a2562b8a6ff544e8968bcfd81ceae6bdab6a63eb9c8d5aef8d4f40ad7739d16d52d07ee3d7942d185bc42ed9dc9549a9d93d67cff5252de56c4be745340ff1bbb88f14c53ff605a8241071c70b667df1bfc8ee3b90e1fadc6eae3e78cf937d3cb4723ea15b16b52858e118b4e72f8e2acb6af71a533f59072a5b278a5aed00c341ec888e4caa8f853b7413f8a7ceb49423520790b2f05a3dd7b7250ff27cddada4a2cce64d8562aaa598a3a95a2a0d5e463a9aae7b076ba6784ec68f13e1638af30996cf4842d5008988c41d7da014d256de7a74b784070491f702b69e3618999384c24cfd20396a125cc82c6576e3d1105e0e2aa3eb3766f3dc73ecb6bf711d9ad949d23978ad1c2a0eb72793a5182f0ca7d5c4c84bf3f77a755e28fc754921293d31bb5629ce4316e31a9396cce60e559ccc9363755a6b308c4e94a9"}, {0x190, 0x107, 0x3d74, "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"}], 0x15f8}}], 0x1, 0x400c800) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 524.209605ms ago: executing program 4 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fspick(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ioprio_get$pid(0x2, 0x0) 470.638807ms ago: executing program 0 (id=1188): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd77f2e9332f24016, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x401, @mcast2, 0x10}, 0x1c, 0x0}}], 0x1, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 445.563577ms ago: executing program 6 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 418.067168ms ago: executing program 2 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x1}, 0x5f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) 410.446418ms ago: executing program 0 (id=1191): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 408.856189ms ago: executing program 4 (id=1192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 379.608899ms ago: executing program 6 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000300)) pipe(&(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r1, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 357.55992ms ago: executing program 2 (id=1194): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 344.06091ms ago: executing program 4 (id=1195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) 337.86202ms ago: executing program 6 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x2) 330.205441ms ago: executing program 0 (id=1197): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x9000, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 107.380037ms ago: executing program 6 (id=1198): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 64.284658ms ago: executing program 6 (id=1199): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 53.752058ms ago: executing program 4 (id=1200): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x2, 0xa1f, 0xc, 0x6, 0x4}, 0x14) 35.399249ms ago: executing program 6 (id=1201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 0s ago: executing program 5 (id=1202): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x40000}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='\x00', 0x1, 0x8080c62) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 22.690377][ T29] audit: type=1400 audit(1763537559.170:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.713352][ T29] audit: type=1400 audit(1763537559.200:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.714088][ T3302] cgroup: Unknown subsys name 'net' [ 22.741005][ T29] audit: type=1400 audit(1763537559.230:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.891223][ T3302] cgroup: Unknown subsys name 'cpuset' [ 22.897916][ T3302] cgroup: Unknown subsys name 'rlimit' [ 23.046288][ T29] audit: type=1400 audit(1763537559.530:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.069687][ T29] audit: type=1400 audit(1763537559.530:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.090111][ T29] audit: type=1400 audit(1763537559.530:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.110593][ T29] audit: type=1400 audit(1763537559.530:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.127962][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.130852][ T29] audit: type=1400 audit(1763537559.540:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.164617][ T29] audit: type=1400 audit(1763537559.540:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.188349][ T29] audit: type=1400 audit(1763537559.630:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.212982][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.293662][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 24.329464][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.379577][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 24.401615][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.418308][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 24.458547][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.465645][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.472890][ T3317] bridge_slave_0: entered allmulticast mode [ 24.479208][ T3317] bridge_slave_0: entered promiscuous mode [ 24.494130][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.501251][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.508491][ T3313] bridge_slave_0: entered allmulticast mode [ 24.514878][ T3313] bridge_slave_0: entered promiscuous mode [ 24.523236][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.530349][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.537527][ T3317] bridge_slave_1: entered allmulticast mode [ 24.544045][ T3317] bridge_slave_1: entered promiscuous mode [ 24.555966][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.563380][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.570579][ T3313] bridge_slave_1: entered allmulticast mode [ 24.576963][ T3313] bridge_slave_1: entered promiscuous mode [ 24.627028][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.636211][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.643300][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.650426][ T3325] bridge_slave_0: entered allmulticast mode [ 24.656834][ T3325] bridge_slave_0: entered promiscuous mode [ 24.667690][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.674821][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.681995][ T3314] bridge_slave_0: entered allmulticast mode [ 24.688368][ T3314] bridge_slave_0: entered promiscuous mode [ 24.695840][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.704962][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.712134][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.719214][ T3314] bridge_slave_1: entered allmulticast mode [ 24.725623][ T3314] bridge_slave_1: entered promiscuous mode [ 24.732600][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.741727][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.748890][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.756094][ T3325] bridge_slave_1: entered allmulticast mode [ 24.762370][ T3325] bridge_slave_1: entered promiscuous mode [ 24.779052][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.801428][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.808647][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.815904][ T3321] bridge_slave_0: entered allmulticast mode [ 24.822552][ T3321] bridge_slave_0: entered promiscuous mode [ 24.842827][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.852426][ T3317] team0: Port device team_slave_0 added [ 24.858238][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.865336][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.872863][ T3321] bridge_slave_1: entered allmulticast mode [ 24.879282][ T3321] bridge_slave_1: entered promiscuous mode [ 24.891042][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.901221][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.911492][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.921284][ T3317] team0: Port device team_slave_1 added [ 24.936711][ T3313] team0: Port device team_slave_0 added [ 24.961057][ T3313] team0: Port device team_slave_1 added [ 24.975352][ T3314] team0: Port device team_slave_0 added [ 24.981905][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.996277][ T3325] team0: Port device team_slave_0 added [ 25.002523][ T3325] team0: Port device team_slave_1 added [ 25.008471][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.015436][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.041501][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.053409][ T3314] team0: Port device team_slave_1 added [ 25.060076][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.078047][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.085049][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.111048][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.131233][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.138187][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.164121][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.190726][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.197662][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.223592][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.234550][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.241549][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.267529][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.279034][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.286108][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.312042][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.323085][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.330021][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.355998][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.371665][ T3321] team0: Port device team_slave_0 added [ 25.380319][ T3321] team0: Port device team_slave_1 added [ 25.388953][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.395920][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.421801][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.473712][ T3314] hsr_slave_0: entered promiscuous mode [ 25.479653][ T3314] hsr_slave_1: entered promiscuous mode [ 25.491474][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.498431][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.524412][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.537372][ T3317] hsr_slave_0: entered promiscuous mode [ 25.543362][ T3317] hsr_slave_1: entered promiscuous mode [ 25.549147][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 25.554885][ T3317] Cannot create hsr debugfs directory [ 25.562506][ T3313] hsr_slave_0: entered promiscuous mode [ 25.568432][ T3313] hsr_slave_1: entered promiscuous mode [ 25.574340][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 25.580048][ T3313] Cannot create hsr debugfs directory [ 25.598403][ T3325] hsr_slave_0: entered promiscuous mode [ 25.604563][ T3325] hsr_slave_1: entered promiscuous mode [ 25.610429][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 25.616169][ T3325] Cannot create hsr debugfs directory [ 25.621863][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.628785][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.654809][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.733295][ T3321] hsr_slave_0: entered promiscuous mode [ 25.739251][ T3321] hsr_slave_1: entered promiscuous mode [ 25.745174][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 25.750944][ T3321] Cannot create hsr debugfs directory [ 25.888723][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.897383][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.908162][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.916878][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.936223][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.945265][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.958835][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.970462][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.991151][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.019471][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.028397][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.037375][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.049032][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.057817][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.066673][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.079703][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.128825][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.136498][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.146831][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.155568][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.164386][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.190605][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.207192][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.215786][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.222920][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.234928][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.242005][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.275335][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.293613][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.300703][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.318519][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.327451][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.334588][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.346212][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.365592][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.388907][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.396003][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.406960][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.421638][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.428823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.437726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.444822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.454072][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.461132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.477078][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.487765][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.523195][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.559239][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.575017][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.597863][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.604944][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.619336][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.634792][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.641898][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.667749][ T3314] veth0_vlan: entered promiscuous mode [ 26.681483][ T3314] veth1_vlan: entered promiscuous mode [ 26.724051][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.739215][ T3314] veth0_macvtap: entered promiscuous mode [ 26.756881][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.765212][ T3314] veth1_macvtap: entered promiscuous mode [ 26.795236][ T3317] veth0_vlan: entered promiscuous mode [ 26.806861][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.819692][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.829060][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.849755][ T3317] veth1_vlan: entered promiscuous mode [ 26.878981][ T3317] veth0_macvtap: entered promiscuous mode [ 26.901316][ T3317] veth1_macvtap: entered promiscuous mode [ 26.912575][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.934597][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.944199][ T3325] veth0_vlan: entered promiscuous mode [ 26.958012][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.982521][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.989764][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.004447][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.010403][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.033657][ T3313] veth0_vlan: entered promiscuous mode [ 27.044312][ T3325] veth1_vlan: entered promiscuous mode [ 27.052320][ T3313] veth1_vlan: entered promiscuous mode [ 27.068982][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.083157][ T3321] veth0_vlan: entered promiscuous mode [ 27.091629][ T3321] veth1_vlan: entered promiscuous mode [ 27.106253][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.119504][ T3481] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3481 comm=syz.3.4 [ 27.119535][ T3313] veth0_macvtap: entered promiscuous mode [ 27.129546][ T3321] veth0_macvtap: entered promiscuous mode [ 27.156907][ T3313] veth1_macvtap: entered promiscuous mode [ 27.163413][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.173685][ T3321] veth1_macvtap: entered promiscuous mode [ 27.183795][ T3325] veth0_macvtap: entered promiscuous mode [ 27.192036][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.201759][ T3325] veth1_macvtap: entered promiscuous mode [ 27.212558][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.220726][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.234793][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.245970][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.261363][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.269951][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.285231][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.294498][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.307655][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.315544][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.325025][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.346311][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.361663][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.377329][ T316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.398520][ T316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.411201][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.433573][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.459800][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.488899][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.557849][ T3493] loop2: detected capacity change from 0 to 8192 [ 27.691184][ T3508] ======================================================= [ 27.691184][ T3508] WARNING: The mand mount option has been deprecated and [ 27.691184][ T3508] and is ignored by this kernel. Remove the mand [ 27.691184][ T3508] option from the mount to silence this warning. [ 27.691184][ T3508] ======================================================= [ 27.726530][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 27.726544][ T29] audit: type=1400 audit(1763537564.180:108): avc: denied { remount } for pid=3507 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.833947][ T3493] loop2: p1 p2 p4 < > [ 27.838075][ T3493] loop2: partition table partially beyond EOD, truncated [ 27.851665][ T3493] loop2: p1 start 16777216 is beyond EOD, truncated [ 27.858437][ T3493] loop2: p2 size 515840 extends beyond EOD, truncated [ 27.890226][ T29] audit: type=1400 audit(1763537564.370:109): avc: denied { allowed } for pid=3516 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 27.952828][ T29] audit: type=1400 audit(1763537564.410:110): avc: denied { create } for pid=3516 comm="syz.4.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.973833][ T29] audit: type=1400 audit(1763537564.410:111): avc: denied { create } for pid=3512 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.993097][ T29] audit: type=1400 audit(1763537564.410:112): avc: denied { create } for pid=3513 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.012650][ T29] audit: type=1400 audit(1763537564.410:113): avc: denied { write } for pid=3512 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.031795][ T29] audit: type=1400 audit(1763537564.410:114): avc: denied { setopt } for pid=3512 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.051035][ T29] audit: type=1400 audit(1763537564.410:115): avc: denied { setopt } for pid=3513 comm="syz.3.14" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.071194][ T29] audit: type=1400 audit(1763537564.410:116): avc: denied { write } for pid=3513 comm="syz.3.14" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.091297][ T29] audit: type=1400 audit(1763537564.430:117): avc: denied { map } for pid=3516 comm="syz.4.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.115577][ T3493] loop2: p4 start 16777216 is beyond EOD, truncated [ 28.191019][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 28.203348][ T3523] SELinux: policydb version 0 does not match my version range 15-35 [ 28.213165][ T3519] syz.3.14 (3519) used greatest stack depth: 10224 bytes left [ 28.227096][ T3525] pim6reg1: entered promiscuous mode [ 28.232458][ T3525] pim6reg1: entered allmulticast mode [ 28.252904][ T3523] SELinux: failed to load policy [ 28.313981][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 28.419284][ T3534] netlink: 'syz.4.20': attribute type 27 has an invalid length. [ 28.433948][ T3531] syz.2.19 (3531) used greatest stack depth: 10160 bytes left [ 28.442292][ T3537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 28.511344][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 28.537696][ T3550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 28.538419][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.549623][ T3548] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.553827][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.631211][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.650661][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.772404][ T3542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.801304][ T3542] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.817612][ T3542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 28.836714][ T3548] Zero length message leads to an empty skb [ 28.836749][ T3552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 28.866143][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.890580][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.911086][ T316] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.935651][ T316] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.121058][ T3567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 29.151936][ T3569] macvtap1: entered promiscuous mode [ 29.157395][ T3569] macvtap1: entered allmulticast mode [ 29.157618][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.190736][ T3569] dummy0: entered promiscuous mode [ 29.195897][ T3569] dummy0: entered allmulticast mode [ 29.201948][ T3569] team0: Device macvtap1 failed to register rx_handler [ 29.237843][ T3569] dummy0: left allmulticast mode [ 29.252300][ T3569] dummy0: left promiscuous mode [ 29.372824][ T3581] bridge0: port 3(gretap0) entered blocking state [ 29.379425][ T3581] bridge0: port 3(gretap0) entered disabled state [ 29.401770][ T3581] gretap0: entered allmulticast mode [ 29.424960][ T3581] gretap0: entered promiscuous mode [ 29.504231][ T3581] bridge0: port 3(gretap0) entered blocking state [ 29.510760][ T3581] bridge0: port 3(gretap0) entered forwarding state [ 29.542762][ T3584] gretap0: left allmulticast mode [ 29.547856][ T3584] gretap0: left promiscuous mode [ 29.553003][ T3584] bridge0: port 3(gretap0) entered disabled state [ 30.200819][ T3592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 30.244286][ T3591] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 30.391247][ T3596] loop2: detected capacity change from 0 to 512 [ 30.508111][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.593741][ T3596] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.624125][ T3607] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 30.684814][ T3607] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 30.933042][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.062923][ T3622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 31.331789][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.349995][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 31.431933][ T3643] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 31.634709][ T3664] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 31.688941][ T3667] syzkaller0: entered promiscuous mode [ 31.694560][ T3667] syzkaller0: entered allmulticast mode [ 31.775507][ T3659] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 31.786369][ T3678] syz.0.78 uses obsolete (PF_INET,SOCK_PACKET) [ 31.967823][ T3690] loop1: detected capacity change from 0 to 2048 [ 31.987786][ T3690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.093642][ T3698] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 32.126175][ T3698] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 32.138831][ T3698] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.138831][ T3698] [ 32.149033][ T3698] EXT4-fs (loop1): Total free blocks count 0 [ 32.155398][ T3698] EXT4-fs (loop1): Free/Dirty block details [ 32.161345][ T3698] EXT4-fs (loop1): free_blocks=2415919504 [ 32.167075][ T3698] EXT4-fs (loop1): dirty_blocks=400 [ 32.172335][ T3698] EXT4-fs (loop1): Block reservation details [ 32.178386][ T3698] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 32.507388][ T3707] loop3: detected capacity change from 0 to 512 [ 32.548538][ T3707] EXT4-fs: Ignoring removed oldalloc option [ 32.591543][ T3707] EXT4-fs (loop3): 1 truncate cleaned up [ 32.607149][ T3707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.772089][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 32.772102][ T29] audit: type=1400 audit(1763537569.260:189): avc: denied { name_connect } for pid=3716 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 32.837633][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.887443][ T29] audit: type=1400 audit(1763537569.320:190): avc: denied { listen } for pid=3716 comm="syz.4.92" lport=36160 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.910361][ T29] audit: type=1400 audit(1763537569.320:191): avc: denied { accept } for pid=3716 comm="syz.4.92" lport=36160 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.933083][ T29] audit: type=1400 audit(1763537569.330:192): avc: denied { write } for pid=3716 comm="syz.4.92" lport=36160 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 32.956594][ T29] audit: type=1400 audit(1763537569.340:193): avc: denied { setopt } for pid=3716 comm="syz.4.92" lport=36160 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 32.980129][ T29] audit: type=1400 audit(1763537569.350:194): avc: denied { mount } for pid=3718 comm="+}[@" name="/" dev="rpc_pipefs" ino=5362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 33.042959][ T29] audit: type=1400 audit(1763537569.520:195): avc: denied { mount } for pid=3720 comm="syz.3.93" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.080538][ T29] audit: type=1400 audit(1763537569.560:196): avc: denied { mounton } for pid=3720 comm="syz.3.93" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 33.101819][ T29] audit: type=1400 audit(1763537569.560:197): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.121841][ T29] audit: type=1400 audit(1763537569.560:198): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.178621][ T316] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 384 with max blocks 2048 with error 28 [ 33.430017][ T3746] __nla_validate_parse: 1 callbacks suppressed [ 33.430034][ T3746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.109'. [ 33.636918][ T3764] loop0: detected capacity change from 0 to 256 [ 33.704276][ T3764] FAT-fs (loop0): Directory bread(block 64) failed [ 33.731772][ T3764] FAT-fs (loop0): Directory bread(block 65) failed [ 33.766420][ T3749] chnl_net:caif_netlink_parms(): no params data found [ 33.790624][ T3764] FAT-fs (loop0): Directory bread(block 66) failed [ 33.831330][ T3764] FAT-fs (loop0): Directory bread(block 67) failed [ 33.850594][ T3764] FAT-fs (loop0): Directory bread(block 68) failed [ 33.892343][ T3764] FAT-fs (loop0): Directory bread(block 69) failed [ 33.899148][ T3764] FAT-fs (loop0): Directory bread(block 70) failed [ 33.918496][ T3764] FAT-fs (loop0): Directory bread(block 71) failed [ 33.926157][ T3749] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.933460][ T3749] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.955531][ T3749] bridge_slave_0: entered allmulticast mode [ 33.989077][ T3749] bridge_slave_0: entered promiscuous mode [ 33.995141][ T3764] FAT-fs (loop0): Directory bread(block 72) failed [ 34.001898][ T3764] FAT-fs (loop0): Directory bread(block 73) failed [ 34.013858][ T3749] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.021059][ T3749] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.028491][ T3749] bridge_slave_1: entered allmulticast mode [ 34.035236][ T3749] bridge_slave_1: entered promiscuous mode [ 34.063000][ T3749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.072110][ T3778] netlink: 96 bytes leftover after parsing attributes in process `syz.1.97'. [ 34.082555][ T3749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.107548][ T3764] process 'syz.0.113' launched './file0' with NULL argv: empty string added [ 34.132341][ T3749] team0: Port device team_slave_0 added [ 34.151928][ T3749] team0: Port device team_slave_1 added [ 34.171828][ T3764] syz.0.113: attempt to access beyond end of device [ 34.171828][ T3764] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 34.188219][ T3787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.120'. [ 34.227125][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 34.235971][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 34.238424][ T3764] syz.0.113: attempt to access beyond end of device [ 34.238424][ T3764] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 34.248491][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 34.263358][ T3749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.274126][ T3749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.300157][ T3749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.316001][ T3749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.323056][ T3749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.349114][ T3749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.412147][ T3749] hsr_slave_0: entered promiscuous mode [ 34.418313][ T3749] hsr_slave_1: entered promiscuous mode [ 34.452170][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 34.458526][ T3749] debugfs: 'hsr0' already exists in 'hsr' [ 34.466807][ T3749] Cannot create hsr debugfs directory [ 34.532423][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 34.553989][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 34.622906][ T3816] netlink: 96 bytes leftover after parsing attributes in process `syz.4.132'. [ 34.635683][ T3749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.649700][ T3749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 34.665589][ T3749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.680392][ T3749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.709139][ T3749] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.716328][ T3749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.723695][ T3749] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.730765][ T3749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.802096][ T3835] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 34.814885][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.822895][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.865401][ T3749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.920786][ T3749] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.934747][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.941842][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.953630][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.960743][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.986037][ T3749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.054909][ T3749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.125758][ T3859] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 35.272757][ T3749] veth0_vlan: entered promiscuous mode [ 35.281526][ T3749] veth1_vlan: entered promiscuous mode [ 35.302045][ T3749] veth0_macvtap: entered promiscuous mode [ 35.321077][ T3749] veth1_macvtap: entered promiscuous mode [ 35.345567][ T3749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.363730][ T3749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.384109][ T296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.405518][ T296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.424093][ T296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.438434][ T296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.812123][ T3911] SELinux: syz.2.161 (3911) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 35.874717][ T3916] loop1: detected capacity change from 0 to 1024 [ 35.892047][ T3916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.918109][ T3916] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.163: Allocating blocks 449-513 which overlap fs metadata [ 35.938193][ T3915] EXT4-fs (loop1): pa ffff8881072e5070: logic 48, phys. 177, len 21 [ 35.946283][ T3915] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 35.965344][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.986732][ T3923] loop1: detected capacity change from 0 to 512 [ 36.008800][ T3923] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.165: bad orphan inode 13 [ 36.019159][ T3923] ext4_test_bit(bit=12, block=4) = 1 [ 36.024608][ T3923] is_bad_inode(inode)=0 [ 36.028831][ T3923] NEXT_ORPHAN(inode)=0 [ 36.032970][ T3923] max_ino=32 [ 36.036152][ T3923] i_nlink=1 [ 36.039727][ T3923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.059537][ T3923] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.165: Unrecognised inode hash code 20 [ 36.071285][ T3923] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.165: Corrupt directory, running e2fsck is recommended [ 36.086502][ T3923] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.165: corrupted in-inode xattr: e_value out of bounds [ 36.115930][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.372240][ T3952] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.459669][ T3966] netlink: 'syz.1.185': attribute type 10 has an invalid length. [ 36.502434][ T3966] team0: Port device dummy0 added [ 36.549314][ T3966] syz.1.185 (3966) used greatest stack depth: 10128 bytes left [ 36.572142][ T3977] xt_hashlimit: max too large, truncated to 1048576 [ 36.617953][ T3988] netlink: zone id is out of range [ 36.623202][ T3988] netlink: zone id is out of range [ 36.658196][ T3990] atomic_op ffff88811f4c5928 conn xmit_atomic 0000000000000000 [ 36.660262][ T3988] netlink: set zone limit has 8 unknown bytes [ 36.752495][ T4001] netlink: 'syz.5.197': attribute type 10 has an invalid length. [ 36.768257][ T4001] ipvlan0: entered allmulticast mode [ 36.773705][ T4001] veth0_vlan: entered allmulticast mode [ 36.783044][ T4001] team0: Device ipvlan0 failed to register rx_handler [ 37.133218][ T4026] loop1: detected capacity change from 0 to 512 [ 37.177300][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.206283][ T4026] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.334827][ T4041] loop4: detected capacity change from 0 to 512 [ 37.376227][ T4041] EXT4-fs: Ignoring removed bh option [ 37.391143][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.410847][ T4041] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.424235][ T4041] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.460225][ T4046] dummy0: entered promiscuous mode [ 37.473566][ T4046] dummy0: left promiscuous mode [ 37.478826][ T4049] capability: warning: `syz.0.214' uses deprecated v2 capabilities in a way that may be insecure [ 37.479200][ T4041] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.510785][ T4041] EXT4-fs (loop4): 1 truncate cleaned up [ 37.518910][ T4041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.568557][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.773074][ T4077] syz.0.223 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.827511][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 37.827595][ T29] audit: type=1400 audit(1763537574.310:338): avc: denied { connect } for pid=4080 comm="syz.1.224" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.029652][ T29] audit: type=1326 audit(1763537574.510:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.033186][ T4111] netlink: 'syz.0.230': attribute type 13 has an invalid length. [ 38.053246][ T29] audit: type=1326 audit(1763537574.510:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.099844][ T4110] loop1: detected capacity change from 0 to 512 [ 38.106550][ T29] audit: type=1326 audit(1763537574.520:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.110468][ T4110] EXT4-fs: Ignoring removed bh option [ 38.129985][ T29] audit: type=1326 audit(1763537574.520:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.158532][ T29] audit: type=1326 audit(1763537574.520:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.181866][ T29] audit: type=1326 audit(1763537574.520:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.205189][ T29] audit: type=1326 audit(1763537574.520:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.228520][ T29] audit: type=1326 audit(1763537574.580:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.252227][ T29] audit: type=1326 audit(1763537574.580:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 38.312553][ T4110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.432822][ T4110] EXT4-fs (loop1): 1 truncate cleaned up [ 38.439032][ T4110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.533396][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.592748][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.599935][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.719552][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.730058][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.791668][ T316] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.819137][ T316] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.842764][ T316] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.869224][ T316] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.143514][ T4154] loop0: detected capacity change from 0 to 2048 [ 39.250239][ T4149] Set syz1 is full, maxelem 65536 reached [ 39.265112][ T4154] Alternate GPT is invalid, using primary GPT. [ 39.271573][ T4154] loop0: p2 p3 p7 [ 39.964884][ C0] hrtimer: interrupt took 51516 ns [ 39.995168][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.045376][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.093431][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.133471][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.228739][ T59] bridge_slave_1: left allmulticast mode [ 40.234603][ T59] bridge_slave_1: left promiscuous mode [ 40.240535][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.251950][ T59] bridge_slave_0: left allmulticast mode [ 40.257673][ T59] bridge_slave_0: left promiscuous mode [ 40.263424][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.486322][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.509703][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.526785][ T59] bond0 (unregistering): Released all slaves [ 40.612693][ T59] hsr_slave_0: left promiscuous mode [ 40.635591][ T59] hsr_slave_1: left promiscuous mode [ 40.643546][ T4342] loop4: detected capacity change from 0 to 164 [ 40.646411][ T4340] __nla_validate_parse: 17 callbacks suppressed [ 40.646427][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 40.660451][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.673052][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.695916][ T4342] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.710907][ T4350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 40.723494][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.730993][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.746634][ T59] veth1_macvtap: left promiscuous mode [ 40.752695][ T59] veth0_macvtap: left promiscuous mode [ 40.758262][ T59] veth1_vlan: left promiscuous mode [ 40.764291][ T59] veth0_vlan: left promiscuous mode [ 40.901409][ T59] team0 (unregistering): Port device team_slave_1 removed [ 40.924312][ T59] team0 (unregistering): Port device team_slave_0 removed [ 40.987774][ T4373] netlink: 96 bytes leftover after parsing attributes in process `syz.2.275'. [ 41.063582][ T4379] netlink: 96 bytes leftover after parsing attributes in process `syz.1.276'. [ 41.421855][ T4429] bridge0: port 3(gretap0) entered blocking state [ 41.428391][ T4429] bridge0: port 3(gretap0) entered disabled state [ 41.475539][ T4429] gretap0: entered allmulticast mode [ 41.492055][ T4429] gretap0: entered promiscuous mode [ 41.507756][ T4429] bridge0: port 3(gretap0) entered blocking state [ 41.514262][ T4429] bridge0: port 3(gretap0) entered forwarding state [ 41.565566][ T4429] gretap0: left allmulticast mode [ 41.570793][ T4429] gretap0: left promiscuous mode [ 41.576071][ T4429] bridge0: port 3(gretap0) entered disabled state [ 41.760010][ T4456] netlink: 'syz.5.296': attribute type 10 has an invalid length. [ 41.783835][ T4456] team0: Port device dummy0 added [ 41.857055][ T4457] netlink: 'syz.5.296': attribute type 10 has an invalid length. [ 41.910877][ T4457] team0: Port device dummy0 removed [ 41.928981][ T4457] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.966908][ T4456] syz.5.296 (4456) used greatest stack depth: 10000 bytes left [ 42.014506][ T4470] loop5: detected capacity change from 0 to 512 [ 42.036632][ T4470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.050961][ T4470] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.073712][ T4479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 42.116915][ T4470] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #18: comm syz.5.303: corrupted inode contents [ 42.133518][ T4470] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #18: comm syz.5.303: mark_inode_dirty error [ 42.152790][ T4470] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #18: comm syz.5.303: corrupted inode contents [ 42.165159][ T4470] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #18: comm syz.5.303: mark_inode_dirty error [ 42.177441][ T4470] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #18: comm syz.5.303: mark inode dirty (error -117) [ 42.190242][ T4470] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 42.228905][ T3749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.424012][ T4518] loop1: detected capacity change from 0 to 512 [ 42.530038][ T4529] unsupported nlmsg_type 40 [ 42.548080][ T4529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.557278][ T4529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.557288][ T4533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.325'. [ 42.645288][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.652530][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.689693][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.701199][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.732698][ T4541] ipvlan0: left allmulticast mode [ 42.737995][ T4541] veth0_vlan: left allmulticast mode [ 42.757150][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.771817][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.791247][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.810981][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.826926][ T4552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4552 comm=syz.5.334 [ 42.921217][ T4566] loop1: detected capacity change from 0 to 256 [ 42.928381][ T4566] FAT-fs (loop1): bogus number of FAT sectors [ 42.934681][ T4566] FAT-fs (loop1): Can't find a valid FAT filesystem [ 42.999795][ T4572] loop0: detected capacity change from 0 to 128 [ 43.013133][ T4572] FAT-fs (loop0): Directory bread(block 162) failed [ 43.021395][ T4572] FAT-fs (loop0): Directory bread(block 163) failed [ 43.029566][ T4572] FAT-fs (loop0): Directory bread(block 164) failed [ 43.036531][ T4572] FAT-fs (loop0): Directory bread(block 165) failed [ 43.043354][ T4572] FAT-fs (loop0): Directory bread(block 166) failed [ 43.058652][ T4572] FAT-fs (loop0): Directory bread(block 167) failed [ 43.099560][ T4580] loop5: detected capacity change from 0 to 1024 [ 43.102407][ T4572] FAT-fs (loop0): Directory bread(block 168) failed [ 43.113203][ T4580] ext4: Bad value for 'max_dir_size_kb' [ 43.132749][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 43.141773][ T4572] FAT-fs (loop0): Directory bread(block 169) failed [ 43.149568][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 43.160064][ T4572] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.208014][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 43.220218][ T4572] FAT-fs (loop0): Directory bread(block 162) failed [ 43.227101][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 43.227841][ T4572] FAT-fs (loop0): Directory bread(block 163) failed [ 43.253579][ T4572] syz.0.342: attempt to access beyond end of device [ 43.253579][ T4572] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 43.267989][ T4572] syz.0.342: attempt to access beyond end of device [ 43.267989][ T4572] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 43.294258][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 43.294272][ T29] audit: type=1400 audit(1763537579.780:425): avc: denied { write } for pid=4588 comm="syz.1.350" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.346436][ T29] audit: type=1400 audit(1763537579.830:426): avc: denied { mount } for pid=4590 comm="syz.4.351" name="/" dev="configfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.369097][ T29] audit: type=1400 audit(1763537579.830:427): avc: denied { search } for pid=4590 comm="syz.4.351" name="/" dev="configfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.392213][ T29] audit: type=1400 audit(1763537579.860:428): avc: denied { search } for pid=4590 comm="syz.4.351" name="/" dev="configfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.414464][ T29] audit: type=1400 audit(1763537579.860:429): avc: denied { read open } for pid=4590 comm="syz.4.351" path="/" dev="configfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.477411][ T29] audit: type=1326 audit(1763537579.960:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 43.517348][ T29] audit: type=1326 audit(1763537579.970:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 43.540666][ T29] audit: type=1326 audit(1763537579.970:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 43.563961][ T29] audit: type=1326 audit(1763537579.970:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 43.587315][ T29] audit: type=1326 audit(1763537579.970:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10df3fdf10 code=0x7ffc0000 [ 43.615273][ T4604] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 43.658784][ T4615] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 43.672301][ T4615] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 43.681490][ T4615] team0: Port device dummy0 removed [ 43.692059][ T4615] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.848238][ T4626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.916996][ T4628] loop2: detected capacity change from 0 to 7 [ 43.923689][ T4628] loop2: [ 44.040897][ T4641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4641 comm=syz.4.374 [ 44.067607][ T4643] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 44.102287][ T4643] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 44.496149][ T4690] loop1: detected capacity change from 0 to 512 [ 44.519701][ T4690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.546220][ T4690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.569282][ T4690] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.745720][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.918162][ T4722] loop4: detected capacity change from 0 to 8192 [ 44.961315][ T4722] loop4: p1 p2 p3 p4 [ 44.973312][ T4722] loop4: p3 start 331777 is beyond EOD, truncated [ 44.979827][ T4722] loop4: p4 size 262238 extends beyond EOD, truncated [ 45.096459][ T3907] udevd[3907]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.099559][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 45.109681][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 45.180647][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.301147][ T4769] loop4: detected capacity change from 0 to 1024 [ 45.339097][ T4769] EXT4-fs: inline encryption not supported [ 45.345036][ T4769] EXT4-fs: Ignoring removed orlov option [ 45.352035][ T4769] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 45.372359][ T4769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 45.380474][ T4769] System zones: 0-1, 3-12 [ 45.388453][ T4769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.419141][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.456789][ T4792] IPv6: Can't replace route, no match found [ 45.491410][ T4798] ALSA: seq fatal error: cannot create timer (-19) [ 45.645747][ T4829] support for cryptoloop has been removed. Use dm-crypt instead. [ 45.871453][ T4867] __nla_validate_parse: 5 callbacks suppressed [ 45.871537][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 45.887572][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 46.212538][ T4900] loop1: detected capacity change from 0 to 164 [ 46.254779][ T4900] syz.1.430: attempt to access beyond end of device [ 46.254779][ T4900] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 46.280550][ T4900] syz.1.430: attempt to access beyond end of device [ 46.280550][ T4900] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 46.744666][ T4926] netlink: 64 bytes leftover after parsing attributes in process `syz.0.441'. [ 46.795750][ T4923] loop4: detected capacity change from 0 to 2048 [ 46.831781][ T4916] netlink: 68 bytes leftover after parsing attributes in process `syz.1.438'. [ 46.889242][ T3520] Alternate GPT is invalid, using primary GPT. [ 46.895790][ T3520] loop4: p2 p3 p7 [ 46.927524][ T4923] Alternate GPT is invalid, using primary GPT. [ 46.933912][ T4923] loop4: p2 p3 p7 [ 46.949498][ T4932] veth1_macvtap: left promiscuous mode [ 46.968443][ T4932] macsec0: entered promiscuous mode [ 47.121498][ T4936] loop1: detected capacity change from 0 to 512 [ 47.171997][ T4936] EXT4-fs: Ignoring removed i_version option [ 47.178058][ T4936] EXT4-fs: Ignoring removed bh option [ 47.196203][ T4939] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 47.204015][ T4939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.447'. [ 47.229265][ T4936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.242152][ T4936] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.250852][ T4921] Set syz1 is full, maxelem 65536 reached [ 47.260729][ T4939] team0: Port device geneve1 added [ 47.266745][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.278757][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.293062][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.301932][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.321376][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.439579][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 47.451724][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.500648][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.510878][ T3907] udevd[3907]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.773880][ T4985] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 47.841206][ T4985] bond1: entered promiscuous mode [ 47.865102][ T4985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.925088][ T5021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.977482][ T5021] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 47.987674][ T5021] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 48.116696][ T5021] bond1: (slave xfrm1): making interface the new active one [ 48.124146][ T5021] xfrm1: entered promiscuous mode [ 48.146250][ T5021] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 48.172360][ T5068] loop1: detected capacity change from 0 to 2048 [ 48.209623][ T5068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.213613][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.228047][ T5068] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.254941][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.317992][ T5068] SELinux: failed to load policy [ 48.343954][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.726807][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 48.726820][ T29] audit: type=1326 audit(1763537585.210:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 48.756243][ T29] audit: type=1326 audit(1763537585.210:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 48.779605][ T29] audit: type=1326 audit(1763537585.210:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10df3fdf10 code=0x7ffc0000 [ 48.802917][ T29] audit: type=1326 audit(1763537585.210:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 48.826186][ T29] audit: type=1326 audit(1763537585.210:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 48.849648][ T29] audit: type=1326 audit(1763537585.210:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 48.872773][ T29] audit: type=1326 audit(1763537585.210:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 48.895985][ T29] audit: type=1326 audit(1763537585.210:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df3ff6c9 code=0x7ffc0000 [ 48.923455][ T29] audit: type=1326 audit(1763537585.400:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5101 comm="syz.5.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc902dcf6c9 code=0x7fc00000 [ 49.222226][ T5132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5132 comm=syz.4.502 [ 49.222654][ T5134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.243578][ T5134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.308558][ T5140] loop1: detected capacity change from 0 to 1024 [ 49.336937][ T5140] EXT4-fs: Ignoring removed bh option [ 49.348950][ T29] audit: type=1400 audit(1763537585.830:512): avc: denied { mount } for pid=5143 comm="syz.4.505" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.356779][ T5140] EXT4-fs: inline encryption not supported [ 49.412244][ T5140] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.446823][ T5140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0100] [ 49.455237][ T5140] System zones: 0-1, 3-12 [ 49.463450][ T5140] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.503: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.491852][ T5140] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.503: Failed to acquire dquot type 0 [ 49.527417][ T5140] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.503: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.580225][ T5140] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.503: Invalid inode bitmap blk 0 in block_group 0 [ 49.594889][ T5019] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.617342][ T5019] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:35: Failed to release dquot type 0 [ 49.640702][ T5140] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 49.702824][ T5140] EXT4-fs (loop1): 1 orphan inode deleted [ 49.730868][ T5140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.914994][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 49.934209][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.969207][ T5199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 50.375915][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 50.400938][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.423898][ T5261] bridge_slave_1 (unregistering): left allmulticast mode [ 50.431001][ T5261] bridge_slave_1 (unregistering): left promiscuous mode [ 50.438057][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.591791][ T5296] loop5: detected capacity change from 0 to 256 [ 50.625746][ T5296] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.001001][ T5346] netlink: 56 bytes leftover after parsing attributes in process `syz.1.536'. [ 51.052937][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 51.114384][ T5341] loop0: detected capacity change from 0 to 2048 [ 51.150302][ T5355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 51.173546][ T5341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.199967][ T5341] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.274828][ T5341] SELinux: failed to load policy [ 51.311264][ T5361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5361 comm=syz.2.540 [ 51.324648][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.662857][ T5376] netlink: 96 bytes leftover after parsing attributes in process `syz.1.546'. [ 51.825351][ T5382] tipc: Started in network mode [ 51.830275][ T5382] tipc: Node identity ac141413, cluster identity 4711 [ 51.841616][ T5382] tipc: New replicast peer: 10.1.1.2 [ 51.841699][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 51.847042][ T5382] tipc: Enabled bearer , priority 10 [ 51.883224][ T5385] ip6gre1: entered allmulticast mode [ 51.922755][ T5378] loop4: detected capacity change from 0 to 8192 [ 52.007513][ T5397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5397 comm=syz.5.557 [ 52.269158][ T5413] netlink: 'syz.5.563': attribute type 1 has an invalid length. [ 52.309950][ T5413] bond1: entered promiscuous mode [ 52.315064][ T5413] bond1: entered allmulticast mode [ 52.330807][ T5413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.480479][ T5422] netlink: 'syz.0.566': attribute type 17 has an invalid length. [ 52.488300][ T5422] netlink: 148 bytes leftover after parsing attributes in process `syz.0.566'. [ 52.911961][ T5449] vlan2: entered allmulticast mode [ 52.944336][ T5452] loop0: detected capacity change from 0 to 512 [ 52.971714][ T4129] tipc: Node number set to 2886997011 [ 53.003375][ T5452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.033020][ T5452] ext4 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.053379][ T5465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'. [ 53.090416][ T5452] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #18: comm syz.0.580: corrupted inode contents [ 53.137831][ T5452] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #18: comm syz.0.580: mark_inode_dirty error [ 53.153592][ T5452] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #18: comm syz.0.580: corrupted inode contents [ 53.169408][ T5474] loop1: detected capacity change from 0 to 512 [ 53.176070][ T5473] loop4: detected capacity change from 0 to 512 [ 53.176078][ T5452] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #18: comm syz.0.580: mark_inode_dirty error [ 53.176547][ T5474] EXT4-fs: Ignoring removed bh option [ 53.204011][ T5452] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #18: comm syz.0.580: mark inode dirty (error -117) [ 53.217064][ T5452] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 53.228348][ T5473] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.244143][ T5476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.590'. [ 53.256560][ T5474] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 53.279138][ T5473] EXT4-fs (loop4): 1 truncate cleaned up [ 53.285519][ T5474] EXT4-fs (loop1): 1 truncate cleaned up [ 53.289482][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.301044][ T5473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.311086][ T5474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.327318][ T5473] ÿÿÿÿÿÿ: renamed from vlan1 [ 53.367911][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.468869][ T3313] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 53.484378][ T3313] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 53.535930][ T5486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.095860][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 54.095873][ T29] audit: type=1326 audit(1763537590.580:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1270c46567 code=0x7ffc0000 [ 54.140562][ T29] audit: type=1326 audit(1763537590.620:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1270beb789 code=0x7ffc0000 [ 54.164238][ T29] audit: type=1326 audit(1763537590.620:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1270c46567 code=0x7ffc0000 [ 54.187463][ T29] audit: type=1326 audit(1763537590.620:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1270beb789 code=0x7ffc0000 [ 54.210718][ T29] audit: type=1326 audit(1763537590.620:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1270c4f6c9 code=0x7ffc0000 [ 54.234152][ T29] audit: type=1326 audit(1763537590.620:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1270c4f6c9 code=0x7ffc0000 [ 54.257433][ T29] audit: type=1326 audit(1763537590.620:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1270c4f6c9 code=0x7ffc0000 [ 54.280799][ T29] audit: type=1326 audit(1763537590.620:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1270c4f6c9 code=0x7ffc0000 [ 54.304077][ T29] audit: type=1326 audit(1763537590.620:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1270c4f6c9 code=0x7ffc0000 [ 54.327417][ T29] audit: type=1326 audit(1763537590.620:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1270c4f6c9 code=0x7ffc0000 [ 54.405359][ T5519] chnl_net:caif_netlink_parms(): no params data found [ 54.495461][ T5540] loop5: detected capacity change from 0 to 256 [ 54.502625][ T5519] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.509729][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.550591][ T5519] bridge_slave_0: entered allmulticast mode [ 54.557061][ T5519] bridge_slave_0: entered promiscuous mode [ 54.574216][ T5519] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.581445][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.607893][ T5519] bridge_slave_1: entered allmulticast mode [ 54.614692][ T5519] bridge_slave_1: entered promiscuous mode [ 54.643420][ T5560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.651927][ T5560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.671347][ T5519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.697447][ T5519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.699991][ T5563] loop0: detected capacity change from 0 to 512 [ 54.758048][ T5563] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.619: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 54.758951][ T5519] team0: Port device team_slave_0 added [ 54.783174][ T5519] team0: Port device team_slave_1 added [ 54.791566][ T5563] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.619: Bad quota inode: 3, type: 0 [ 54.815579][ T5563] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.830785][ T5563] EXT4-fs (loop0): mount failed [ 54.884060][ T5519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.891075][ T5519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.917182][ T5519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.004346][ T5519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.011397][ T5519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.037415][ T5519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.090803][ T5519] hsr_slave_0: entered promiscuous mode [ 55.096971][ T5519] hsr_slave_1: entered promiscuous mode [ 55.330729][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 55.339547][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 55.373169][ T5519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 55.393704][ T5031] bridge_slave_1: left allmulticast mode [ 55.399383][ T5031] bridge_slave_1: left promiscuous mode [ 55.405125][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.443113][ T5031] bridge_slave_0: left promiscuous mode [ 55.448849][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.475332][ T5619] loop0: detected capacity change from 0 to 1024 [ 55.491551][ T5619] EXT4-fs: Ignoring removed bh option [ 55.497077][ T5619] EXT4-fs: inline encryption not supported [ 55.503722][ T5619] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.516781][ T5031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.525728][ T5619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 55.534856][ T5031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.546321][ T5619] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.639: lblock 2 mapped to illegal pblock 2 (length 1) [ 55.571721][ T5031] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 55.581238][ T5031] bond0 (unregistering): Released all slaves [ 55.590610][ T5619] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.639: lblock 0 mapped to illegal pblock 48 (length 1) [ 55.592388][ T5031] bond1 (unregistering): Released all slaves [ 55.611588][ T5619] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.639: Failed to acquire dquot type 0 [ 55.624934][ T5619] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 55.637101][ T5519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 55.646601][ T5619] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.639: mark_inode_dirty error [ 55.660636][ T5619] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 55.674447][ T5619] EXT4-fs (loop0): 1 orphan inode deleted [ 55.681545][ T5619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.694998][ T5020] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.722658][ T5519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 55.729799][ T5020] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:36: Failed to release dquot type 0 [ 55.746004][ T5031] hsr_slave_0: left promiscuous mode [ 55.751904][ T5031] hsr_slave_1: left promiscuous mode [ 55.759872][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.779495][ T3317] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 55.814486][ T3317] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 55.826231][ T3317] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 55.844351][ T5031] team0 (unregistering): Port device team_slave_1 removed [ 55.866001][ T5031] team0 (unregistering): Port device team_slave_0 removed [ 55.916444][ T5519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 55.958034][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.996398][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.152674][ T5602] chnl_net:caif_netlink_parms(): no params data found [ 56.201542][ T5684] loop0: detected capacity change from 0 to 512 [ 56.208142][ T5684] EXT4-fs: dax option not supported [ 56.208433][ T5519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.240650][ T5687] mmap: syz.4.649 (5687) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.256601][ T5519] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.337645][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.344830][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.406785][ T4996] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.413908][ T4996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.432002][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.439150][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.446743][ T5602] bridge_slave_0: entered allmulticast mode [ 56.467675][ T5602] bridge_slave_0: entered promiscuous mode [ 56.485692][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.493005][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.500373][ T5602] bridge_slave_1: entered allmulticast mode [ 56.506969][ T5602] bridge_slave_1: entered promiscuous mode [ 56.544885][ T5731] loop0: detected capacity change from 0 to 512 [ 56.548140][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.564663][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.585062][ T5731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.597858][ T5731] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.609605][ T5602] team0: Port device team_slave_0 added [ 56.625848][ T5602] team0: Port device team_slave_1 added [ 56.644390][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.747100][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.754127][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.780064][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.782318][ T5768] SELinux: ebitmap: truncated map [ 56.797957][ T5768] SELinux: failed to load policy [ 56.805271][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.812268][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.838206][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.846935][ T5771] netlink: 596 bytes leftover after parsing attributes in process `syz.2.660'. [ 56.857920][ T5766] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 56.877630][ T5769] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 56.903994][ T5602] hsr_slave_0: entered promiscuous mode [ 56.914336][ T5602] hsr_slave_1: entered promiscuous mode [ 56.926287][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 56.932105][ T5602] Cannot create hsr debugfs directory [ 56.946887][ T5519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.995834][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 57.109095][ T5519] veth0_vlan: entered promiscuous mode [ 57.136936][ T5519] veth1_vlan: entered promiscuous mode [ 57.164910][ T5519] veth0_macvtap: entered promiscuous mode [ 57.176027][ T5519] veth1_macvtap: entered promiscuous mode [ 57.197291][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.208198][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.228451][ T5043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.246422][ T5043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.266578][ T5043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.282405][ T5043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.319987][ T5602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.336776][ T5602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.346996][ T5811] loop4: detected capacity change from 0 to 512 [ 57.356503][ T5602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.374353][ T5602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.399635][ T5811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.429321][ T5811] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.461566][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.473796][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.494072][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.501236][ T5031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.522963][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.553697][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.560786][ T5031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.627542][ T5830] loop6: detected capacity change from 0 to 8192 [ 57.647776][ T5602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.658370][ T5602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.799063][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.814682][ T5847] loop4: detected capacity change from 0 to 512 [ 57.821692][ T5847] EXT4-fs: dax option not supported [ 57.887856][ T5847] loop4: detected capacity change from 0 to 1024 [ 57.897486][ T5847] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.918423][ T5847] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.934173][ T5847] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.956917][ T5847] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.680: Failed to acquire dquot type 0 [ 57.968823][ T5847] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.680: Failed to acquire dquot type 0 [ 57.981003][ T5847] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.680: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.994586][ T5847] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.680: Failed to acquire dquot type 0 [ 58.013388][ T5847] EXT4-fs (loop4): 1 orphan inode deleted [ 58.032220][ T5847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.077629][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.112788][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 58.149544][ T5602] veth0_vlan: entered promiscuous mode [ 58.179375][ T5602] veth1_vlan: entered promiscuous mode [ 58.197584][ T5602] veth0_macvtap: entered promiscuous mode [ 58.206368][ T5602] veth1_macvtap: entered promiscuous mode [ 58.218422][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.231678][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.243604][ T5003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.253210][ T5003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.264076][ T5003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.273660][ T5003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.441231][ T5879] SELinux: ebitmap: truncated map [ 58.447297][ T5879] SELinux: failed to load policy [ 58.494898][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.688'. [ 58.503878][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.688'. [ 58.535239][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 58.605176][ T5892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.693'. [ 58.747840][ T5899] loop5: detected capacity change from 0 to 8192 [ 58.812126][ T5896] loop2: detected capacity change from 0 to 8192 [ 59.166005][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 59.166018][ T29] audit: type=1326 audit(1763537595.650:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.6.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 59.227757][ T29] audit: type=1326 audit(1763537595.690:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.6.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a1c6ab789 code=0x7ffc0000 [ 59.251007][ T29] audit: type=1326 audit(1763537595.700:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.6.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 59.274268][ T29] audit: type=1326 audit(1763537595.700:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.6.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 59.711214][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 59.754769][ T6022] loop5: detected capacity change from 0 to 512 [ 59.761758][ T6022] EXT4-fs: dax option not supported [ 59.779197][ T6024] netlink: 96 bytes leftover after parsing attributes in process `syz.4.712'. [ 59.812662][ T29] audit: type=1400 audit(1763537596.290:677): avc: denied { mounton } for pid=6025 comm="syz.2.713" path="/109/file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 59.951712][ T6036] SELinux: failed to load policy [ 60.107614][ T6055] loop6: detected capacity change from 0 to 512 [ 60.139868][ T6055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.167237][ T6055] ext4 filesystem being mounted at /7/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.196413][ T6055] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.726: corrupted xattr block 33: invalid ea_ino [ 60.217534][ T6055] EXT4-fs (loop6): Remounting filesystem read-only [ 60.224102][ T6055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 60.279142][ T6055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 60.305678][ T6073] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 60.314425][ T6055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 60.328433][ T29] audit: type=1326 audit(1763537596.790:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d140f6c9 code=0x7ffc0000 [ 60.351950][ T29] audit: type=1326 audit(1763537596.790:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff3d140f6c9 code=0x7ffc0000 [ 60.375374][ T29] audit: type=1326 audit(1763537596.790:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d140f6c9 code=0x7ffc0000 [ 60.398784][ T29] audit: type=1326 audit(1763537596.790:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d140f6c9 code=0x7ffc0000 [ 60.422196][ T29] audit: type=1326 audit(1763537596.790:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff3d140f6c9 code=0x7ffc0000 [ 60.456090][ T5519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.473482][ T6077] sch_fq: defrate 4294967295 ignored. [ 60.542924][ T6095] netlink: 188 bytes leftover after parsing attributes in process `syz.4.743'. [ 60.776384][ T6123] futex_wake_op: syz.0.756 tries to shift op by 144; fix this program [ 60.823739][ T6130] syzkaller1: entered promiscuous mode [ 60.829282][ T6130] syzkaller1: entered allmulticast mode [ 60.909809][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6134 comm=syz.0.760 [ 61.727630][ T6195] loop4: detected capacity change from 0 to 128 [ 61.742004][ T6197] loop6: detected capacity change from 0 to 256 [ 61.791176][ T6197] FAT-fs (loop6): Directory bread(block 64) failed [ 61.797910][ T6197] FAT-fs (loop6): Directory bread(block 65) failed [ 61.804518][ T6197] FAT-fs (loop6): Directory bread(block 66) failed [ 61.811188][ T6197] FAT-fs (loop6): Directory bread(block 67) failed [ 61.817731][ T6197] FAT-fs (loop6): Directory bread(block 68) failed [ 61.824602][ T6197] FAT-fs (loop6): Directory bread(block 69) failed [ 61.831181][ T6197] FAT-fs (loop6): Directory bread(block 70) failed [ 61.837823][ T6197] FAT-fs (loop6): Directory bread(block 71) failed [ 61.844903][ T6197] FAT-fs (loop6): Directory bread(block 72) failed [ 61.851818][ T6197] FAT-fs (loop6): Directory bread(block 73) failed [ 62.056858][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.056858][ T5043] loop6: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 62.070928][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.070928][ T5043] loop6: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 62.084665][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.084665][ T5043] loop6: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 62.098562][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.098562][ T5043] loop6: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 62.112186][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.112186][ T5043] loop6: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 62.126740][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.126740][ T5043] loop6: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 62.140771][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.140771][ T5043] loop6: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 62.154888][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.154888][ T5043] loop6: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 62.168714][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.168714][ T5043] loop6: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 62.182634][ T5043] kworker/u8:52: attempt to access beyond end of device [ 62.182634][ T5043] loop6: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 62.221416][ T6211] __nla_validate_parse: 2 callbacks suppressed [ 62.221430][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.790'. [ 62.306046][ T6217] loop5: detected capacity change from 0 to 2048 [ 62.340952][ T3520] loop5: p1 < > p3 p4 < > [ 62.346213][ T3520] loop5: p3 start 4284289 is beyond EOD, truncated [ 62.355179][ T6217] loop5: p1 < > p3 p4 < > [ 62.360354][ T6217] loop5: p3 start 4284289 is beyond EOD, truncated [ 62.385532][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 62.401699][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 62.402415][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 62.485912][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.5.795'. [ 62.576718][ T6231] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 62.584648][ T6231] netlink: 'syz.0.800': attribute type 11 has an invalid length. [ 62.591253][ T6229] vhci_hcd: invalid port number 96 [ 62.592470][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 62.597850][ T6229] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 62.658138][ T6235] loop5: detected capacity change from 0 to 512 [ 62.675655][ T6235] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.738856][ T6235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.758487][ T6245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 62.785383][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.045811][ T6263] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 63.053698][ T6263] netlink: 'syz.2.812': attribute type 11 has an invalid length. [ 63.061477][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 63.174136][ T6273] loop2: detected capacity change from 0 to 128 [ 63.190090][ T6273] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.208124][ T6273] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.236609][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.397055][ T6288] netlink: 'syz.2.825': attribute type 30 has an invalid length. [ 63.727384][ T6310] loop5: detected capacity change from 0 to 512 [ 63.771528][ T6310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.796664][ T6310] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.984507][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.834: corrupted inode contents [ 64.010208][ T6310] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.834: mark_inode_dirty error [ 64.086445][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.834: corrupted inode contents [ 64.154935][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.834: corrupted inode contents [ 64.194557][ T6310] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.834: mark_inode_dirty error [ 64.230763][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.834: corrupted inode contents [ 64.271659][ T6310] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.834: mark_inode_dirty error [ 64.305615][ T6310] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.834: corrupted inode contents [ 64.335530][ T6310] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.834: mark_inode_dirty error [ 64.422379][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.469406][ T29] kauditd_printk_skb: 948 callbacks suppressed [ 64.469420][ T29] audit: type=1400 audit(1763537600.950:1631): avc: denied { relabelfrom } for pid=6336 comm="syz.5.844" name="NETLINK" dev="sockfs" ino=13239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.500843][ T29] audit: type=1400 audit(1763537600.950:1632): avc: denied { relabelto } for pid=6336 comm="syz.5.844" name="NETLINK" dev="sockfs" ino=13239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 64.571794][ T6341] netlink: 56 bytes leftover after parsing attributes in process `syz.5.848'. [ 64.581140][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.848'. [ 64.601796][ T6345] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 64.609462][ T6345] netlink: 'syz.4.846': attribute type 4 has an invalid length. [ 64.617207][ T6345] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.846'. [ 64.637810][ T6345] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 64.645761][ T6345] netlink: 'syz.4.846': attribute type 4 has an invalid length. [ 64.653459][ T6345] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.846'. [ 64.857270][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 65.015956][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 65.320307][ T6415] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.984209][ T29] audit: type=1326 audit(1763537602.470:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.007686][ T29] audit: type=1326 audit(1763537602.470:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.031060][ T29] audit: type=1326 audit(1763537602.480:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.050261][ T6453] netlink: 'syz.0.896': attribute type 30 has an invalid length. [ 66.054649][ T29] audit: type=1326 audit(1763537602.480:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.085601][ T29] audit: type=1326 audit(1763537602.480:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.109222][ T29] audit: type=1326 audit(1763537602.480:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.134535][ T29] audit: type=1326 audit(1763537602.480:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.157885][ T29] audit: type=1326 audit(1763537602.480:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a213bf6c9 code=0x7ffc0000 [ 66.380778][ T4585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.381002][ T3545] Bluetooth: hci0: command 0x1003 tx timeout [ 66.425113][ T6478] loop2: detected capacity change from 0 to 128 [ 66.514287][ T6484] syzkaller1: entered promiscuous mode [ 66.519813][ T6484] syzkaller1: entered allmulticast mode [ 66.723210][ T6498] veth2: entered promiscuous mode [ 66.728402][ T6498] veth2: entered allmulticast mode [ 67.087113][ T6526] syzkaller0: entered allmulticast mode [ 67.100265][ T6526] syzkaller0: entered promiscuous mode [ 67.116186][ T6526] syzkaller0 (unregistering): left allmulticast mode [ 67.123089][ T6526] syzkaller0 (unregistering): left promiscuous mode [ 67.675751][ T6567] __nla_validate_parse: 14 callbacks suppressed [ 67.675768][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.948'. [ 67.761520][ T6570] loop4: detected capacity change from 0 to 512 [ 67.779478][ T6570] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.800649][ T6570] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.951: bg 0: block 248: padding at end of block bitmap is not set [ 67.836854][ T6570] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.951: Failed to acquire dquot type 1 [ 67.869601][ T6570] EXT4-fs (loop4): 1 truncate cleaned up [ 67.882652][ T6587] loop5: detected capacity change from 0 to 136 [ 67.882924][ T6570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.936714][ T6589] IPv6: Can't replace route, no match found [ 67.971706][ T6570] syz.4.951 (6570) used greatest stack depth: 9200 bytes left [ 67.997448][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.023386][ T6597] loop2: detected capacity change from 0 to 512 [ 68.029587][ T6599] netlink: 'syz.5.965': attribute type 5 has an invalid length. [ 68.065018][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.088801][ T6597] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.101506][ T6599] netlink: 'syz.5.965': attribute type 5 has an invalid length. [ 68.113482][ T6597] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #18: comm syz.2.963: corrupted inode contents [ 68.150706][ T6597] EXT4-fs (loop2): Remounting filesystem read-only [ 68.196205][ T6597] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 68.249230][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.311465][ T6622] netlink: 164 bytes leftover after parsing attributes in process `syz.6.973'. [ 68.320854][ T6624] netdevsim netdevsim2: Direct firmware load for $ failed with error -2 [ 68.452040][ T6638] loop6: detected capacity change from 0 to 1024 [ 68.473078][ T6638] EXT4-fs: Ignoring removed orlov option [ 68.478857][ T6638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.534001][ T6638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.551708][ T6651] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 68.569174][ T6651] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 68.578384][ T6651] team0: Failed to send options change via netlink (err -105) [ 68.585939][ T6651] team0: Port device netdevsim1 added [ 68.593392][ T5519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.619040][ T6657] loop2: detected capacity change from 0 to 8192 [ 68.921238][ T6712] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.952394][ T6718] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1014'. [ 68.990123][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 69.019455][ T6725] loop2: detected capacity change from 0 to 512 [ 69.034886][ T6725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.052327][ T6725] EXT4-fs (loop2): shut down requested (0) [ 69.083857][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.493065][ T6749] batman_adv: batadv0: Adding interface: dummy0 [ 69.499351][ T6749] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.524645][ T6749] batman_adv: batadv0: Interface activated: dummy0 [ 69.532555][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 69.532567][ T29] audit: type=1400 audit(1763537606.020:1766): avc: denied { ioctl } for pid=6748 comm="syz.4.1027" path="socket:[13959]" dev="sockfs" ino=13959 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.533766][ T6749] batadv0: mtu less than device minimum [ 69.569443][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.580160][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.591507][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.602516][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.613337][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.624031][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.634922][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.645864][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.656650][ T6749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.774728][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 69.834619][ T29] audit: type=1400 audit(1763537606.320:1767): avc: denied { nlmsg_tty_audit } for pid=6767 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 69.856605][ T29] audit: type=1400 audit(1763537606.320:1768): avc: denied { audit_write } for pid=6767 comm="syz.0.1036" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.877849][ T29] audit: type=1107 audit(1763537606.320:1769): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 70.002865][ T29] audit: type=1400 audit(1763537606.490:1770): avc: denied { create } for pid=6788 comm="syz.0.1047" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.055963][ T29] audit: type=1400 audit(1763537606.540:1771): avc: denied { mounton } for pid=6788 comm="syz.0.1047" path="/235/file0" dev="tmpfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.183662][ T29] audit: type=1400 audit(1763537606.670:1772): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.242155][ T6804] syzkaller1: entered promiscuous mode [ 70.247741][ T6804] syzkaller1: entered allmulticast mode [ 70.272405][ T29] audit: type=1326 audit(1763537606.760:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 70.301301][ T29] audit: type=1326 audit(1763537606.760:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 70.326055][ T29] audit: type=1326 audit(1763537606.790:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 70.395831][ T6818] netlink: 'syz.4.1058': attribute type 10 has an invalid length. [ 70.405628][ T6818] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 70.415053][ T6818] team0: Failed to send options change via netlink (err -105) [ 70.422677][ T6818] team0: Port device netdevsim1 added [ 70.941654][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 71.054559][ T6859] loop4: detected capacity change from 0 to 1024 [ 71.063733][ T6859] EXT4-fs: Ignoring removed nobh option [ 71.069388][ T6859] EXT4-fs: inline encryption not supported [ 71.112172][ T6859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.140907][ T6859] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 71.163890][ T6868] sctp: [Deprecated]: syz.6.1078 (pid 6868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.163890][ T6868] Use struct sctp_sack_info instead [ 71.187515][ T6868] sctp: [Deprecated]: syz.6.1078 (pid 6868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.187515][ T6868] Use struct sctp_sack_info instead [ 71.188263][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.272556][ T6874] vhci_hcd: invalid port number 96 [ 71.277728][ T6874] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 71.398654][ T6894] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1092'. [ 71.685766][ T6920] netlink: 'syz.6.1101': attribute type 10 has an invalid length. [ 71.702472][ T6920] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 71.718371][ T6920] team0: Failed to send options change via netlink (err -105) [ 71.725909][ T6920] team0: Port device netdevsim1 added [ 72.589758][ T6987] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 72.600680][ T6986] IPVS: stopping master sync thread 6987 ... [ 72.802951][ T7010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7010 comm=syz.0.1136 [ 73.226499][ T7048] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 73.310200][ T7056] loop5: detected capacity change from 0 to 512 [ 73.383630][ T7056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.434947][ T7056] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.475370][ T7056] SELinux: Context is not valid (left unmapped). [ 73.525330][ T5602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.700112][ T7086] loop4: detected capacity change from 0 to 8192 [ 73.715556][ T7086] vfat: Unknown parameter 'GPL' [ 73.949720][ T7102] loop4: detected capacity change from 0 to 1024 [ 74.001700][ T7102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.131249][ T7102] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1176: Allocating blocks 497-513 which overlap fs metadata [ 74.181517][ T7107] EXT4-fs (loop4): pa ffff8881072e5150: logic 131104, phys. 177, len 21 [ 74.189911][ T7107] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 74.208845][ T7111] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1179'. [ 74.337824][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.541186][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 74.541200][ T29] audit: type=1326 audit(1763537611.030:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 74.600901][ T29] audit: type=1326 audit(1763537611.030:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 74.624629][ T29] audit: type=1326 audit(1763537611.030:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 74.648571][ T29] audit: type=1326 audit(1763537611.070:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 74.672026][ T29] audit: type=1326 audit(1763537611.070:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 74.697473][ T29] audit: type=1326 audit(1763537611.070:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 74.721438][ T29] audit: type=1326 audit(1763537611.070:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.6.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1c70f6c9 code=0x7ffc0000 [ 74.840424][ T4131] ================================================================== [ 74.848516][ T4131] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 74.856260][ T4131] [ 74.858598][ T4131] read-write to 0xffff888237c29de4 of 4 bytes by task 3388 on cpu 0: [ 74.866637][ T4131] wq_worker_running+0x95/0x120 [ 74.871471][ T4131] synchronize_rcu_expedited+0x611/0x790 [ 74.877226][ T4131] synchronize_rcu+0x45/0x320 [ 74.881904][ T4131] xfrm_state_gc_task+0x96/0x4a0 [ 74.886851][ T4131] process_scheduled_works+0x4ce/0x9d0 [ 74.892315][ T4131] worker_thread+0x582/0x770 [ 74.896901][ T4131] kthread+0x489/0x510 [ 74.900953][ T4131] ret_from_fork+0x122/0x1b0 [ 74.905622][ T4131] ret_from_fork_asm+0x1a/0x30 [ 74.910974][ T4131] [ 74.913296][ T4131] read to 0xffff888237c29de4 of 4 bytes by task 4131 on cpu 1: [ 74.920832][ T4131] kick_pool+0x49/0x2d0 [ 74.924987][ T4131] __queue_work+0x8cb/0xb50 [ 74.929521][ T4131] queue_work_on+0xd1/0x160 [ 74.934003][ T4131] process_srcu+0x999/0xbc0 [ 74.938489][ T4131] process_scheduled_works+0x4ce/0x9d0 [ 74.944072][ T4131] worker_thread+0x582/0x770 [ 74.948664][ T4131] kthread+0x489/0x510 [ 74.952721][ T4131] ret_from_fork+0x122/0x1b0 [ 74.957286][ T4131] ret_from_fork_asm+0x1a/0x30 [ 74.962039][ T4131] [ 74.964339][ T4131] value changed: 0x00000000 -> 0x00000001 [ 74.970027][ T4131] [ 74.972355][ T4131] Reported by Kernel Concurrency Sanitizer on: [ 74.978531][ T4131] CPU: 1 UID: 0 PID: 4131 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.988702][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.998752][ T4131] Workqueue: rcu_gp process_srcu [ 75.003687][ T4131] ================================================================== [ 75.025511][ T7163] loop5: detected capacity change from 0 to 128 [ 75.043880][ T7163] FAT-fs (loop5): Directory bread(block 32) failed [ 75.055762][ T7163] FAT-fs (loop5): Directory bread(block 33) failed [ 75.062645][ T7163] FAT-fs (loop5): Directory bread(block 34) failed [ 75.069210][ T7163] FAT-fs (loop5): Directory bread(block 35) failed [ 75.086202][ T7163] FAT-fs (loop5): Directory bread(block 36) failed [ 75.097286][ T7163] FAT-fs (loop5): Directory bread(block 37) failed [ 75.110803][ T7163] FAT-fs (loop5): Directory bread(block 38) failed [ 75.127259][ T7163] FAT-fs (loop5): Directory bread(block 39) failed [ 75.152455][ T7163] FAT-fs (loop5): Directory bread(block 40) failed [ 75.159226][ T7163] FAT-fs (loop5): Directory bread(block 41) failed [ 75.198012][ T7163] bio_check_eod: 43 callbacks suppressed [ 75.198028][ T7163] syz.5.1202: attempt to access beyond end of device [ 75.198028][ T7163] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 75.232402][ T7163] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 75.240668][ T7163] FAT-fs (loop5): Filesystem has been set read-only