last executing test programs: 19.707124905s ago: executing program 0 (id=209): getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) r3 = io_uring_setup(0x7bb2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x3, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 19.644699001s ago: executing program 0 (id=211): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) 19.563498507s ago: executing program 0 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 19.459306796s ago: executing program 0 (id=215): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 19.257993592s ago: executing program 0 (id=218): syz_clone(0xb088000, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140), &(0x7f000001b2c0)="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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 18.993972373s ago: executing program 0 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 18.979708704s ago: executing program 32 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 18.450487727s ago: executing program 2 (id=240): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) r1 = io_uring_setup(0x5d1c, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 18.330740217s ago: executing program 2 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000009b1168bca192533fdd788516d4d92a94e92b7dd2aaf305c73dfb19e0972a"], 0x14}}, 0x10) 15.303011872s ago: executing program 2 (id=275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x28) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0xc016) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x80, 0x100}}) 15.265016065s ago: executing program 2 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 15.218100169s ago: executing program 2 (id=281): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 14.95264502s ago: executing program 2 (id=288): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file1\x00') readlink(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 14.916106873s ago: executing program 33 (id=288): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file1\x00') readlink(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 3.09770379s ago: executing program 5 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x27, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 2.995575868s ago: executing program 4 (id=512): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x20000000) 2.701384962s ago: executing program 5 (id=516): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 2.22384434s ago: executing program 3 (id=520): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 1.995928069s ago: executing program 3 (id=522): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r1, r0, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.876321339s ago: executing program 3 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}}, 0x4000000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x40000) dup3(r3, r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1.765670057s ago: executing program 5 (id=525): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[], [{@measure}, {@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x30, 0x39, 0x36, 0x32, 0x51, 0x30, 0x38], 0x2d, [0x6f, 0x65, 0x56, 0x35], 0x2d, [0x61, 0x34, 0x33, 0x33], 0x2d, [0x62, 0x64, 0x62, 0x30], 0x2d, [0x61, 0x64, 0x35, 0x33, 0x34, 0x0, 0x63, 0x31]}}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") 1.72946396s ago: executing program 4 (id=527): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x900000000000000, 0x8}, 0x10137f, 0x7ff, 0x6, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @local}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0003}]}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1.60946132s ago: executing program 4 (id=529): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 1.472683861s ago: executing program 6 (id=531): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000380)={0x18, 0x2, {0x2, @local}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0x13) 1.461507752s ago: executing program 4 (id=532): syz_clone3(&(0x7f0000002400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), {0x5}, &(0x7f0000002300)=""/217, 0xd9, &(0x7f00000001c0)=""/70, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45d6}) 1.441630753s ago: executing program 6 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.36011769s ago: executing program 6 (id=534): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xe5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r0, &(0x7f0000001880)="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", 0x45c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) 1.261509658s ago: executing program 6 (id=535): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) chdir(&(0x7f0000000100)='./file0\x00') 1.018833308s ago: executing program 3 (id=539): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001300)=""/4118, 0x1016, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 951.145433ms ago: executing program 6 (id=540): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b4, &(0x7f0000000600)="$eJzs3b9rO2UYAPDn0jQJCiaCkwge6OD05duuLinSQjGTkkEdtNgWpAlCCwV/YOzk6uKmq4sguPlPuPgfCK6Cmx0KJ5e7a5KaxkSb1h+fz9K37z3P+z7vNdfSIU/eeW54cpjG8cXHP0WrlUStG924TKITtah8GjO6nwcA8G92mWXxa1ZYJS+JiNb6ygIA1mjlv//frb0kAGDNXn/jzVd3er3d19K0FXvDz877+X/2+dfi+s5xvBeDOIrH0Y6riOxaMd7LsmxUT3OdeHE4Ou/nmcO3fyjX3/klYpy/Fe3ojKdm8/d7u1tpYSp/lNfxRLl/N8/fjnY8M2f//d7u9pz86DfipRem6n8U7fjx3Xg/BnE4LqLIj1rEJ1tp+kr2xW8fvZWXl+cno/N+cxw3kW3c848GAAAAAAAAAAAAAAAAAAAAAID/sEdl75xmjPv35FNl/52Nq/ybzUgrndn+PEV+Ui10oz/QKIuvqv48j9M0zcrASX49nq1H/WFODQAAAAAAAAAAAAAAAAAAAP8sZx98eHIwGByd3smg6gZQva3/r67TnZp5PhYHNyd71crhgpVjo4pJIhaWkR9iiVKr7Yu2B6ud9Msotnj6tpq/+XbpBb/+87OXg80lYv7moHp1nRwk8+9hM6qZVvUi+X46phFL7tW45dJTZQVL1tyYe6m98tkbT44HowUxkSx6Ll7+uai7nEluPkSN8V2dm75ZDqbSZ2Nay96N4kn5g+S6W0dyN798AAAAAAAAAAAAAAAAAACAGZM3/c65eLEwtZY111YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyryef/rzAYlclLBDfi9OyBjwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wO8BAAD//3tlWs8=") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x12, 0xffffffffffffffff, 0xfffff000) r2 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) pipe(&(0x7f0000000400)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 945.370544ms ago: executing program 5 (id=541): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='qdisc_create\x00', r4, 0x0, 0xffffffffffffff41}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) 890.832048ms ago: executing program 5 (id=542): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r3 = dup(r2) sendfile(r0, r1, 0x0, 0x8000fffffffc) syz_clone3(&(0x7f00000008c0)={0x222025080, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0x7}, &(0x7f0000000300)=""/220, 0xdc, &(0x7f0000000800)=""/180, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r1}}, 0x58) connect$inet6(r2, &(0x7f00000024c0)={0xa, 0x4e22, 0x80, @empty}, 0x1c) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000740)=""/175, 0xaf}], 0x1) writev(0xffffffffffffffff, &(0x7f0000004d40)=[{&(0x7f0000002580)="910b0684c9d7afb63fede90ee177869773acf3b239836c92591431ce877ef3f790dcc9e29fa03b4adadced90f94e31f88aea458fef180a232eee13512d76c194cd1f7a384e499b5533ef8c7fd7520644d3fa8f84b56b30a2558bdc18f76c719716e60dd32d8d2c548a8555ea3be6a77f45fa9e62f6490017", 0x78}, {&(0x7f0000002600)="1be7a4af604ac14ae28ea801ccf95b5ece0f8377e9f0be1b5c8d8fc89a94781d5570dc57a991854652f8e4e2f4079f0598d12323a52b22f33e8b7a7a95c5afc700d2fde3509a480d936515f4c0ad02", 0x4f}, {&(0x7f0000002680)="a67e72714e28052970168270ae27be37482c8846d49df2ebb03ce7a06513386a5c3e1c975f82dad7d020d4ef417c0521c76f4022c20d54c223220fc1b0af51bf483b5c5afbf5ef37b7670c576dc6c5e96d02cdb85e971c009b6fbb813942d736e996b59059ab0970c41cac7d55b7b98e6e74e360ae82177bf999bb1a6e6be42e4b0f490cfdd06ee3a12fe472bdde5a8955e2b5675d943bcf095d518702f4ff218fdeb0d84c7b3cfd03c54cf60b542a75e21e6ae831d286fd1f6d02b5ce44dc0f391606cd3ad4512a569b15cca51f12df265ee118823d804b13972febef95b7561f03e2e5a38e", 0xe6}, {&(0x7f0000002780)="ec2d1c335e2b9cf54d73ec466d2599a86f251a5dc666b9e904db7b7041a937f8040184db5600eb43bcb7a113fe5cae39176f5ea5fc14f96ad14da94d38c54b6818aead00e1c83cb2f07a25fdb650cd531186ac2754e1286741a41d1095efdc0fe1b2ec5e180aecdcfc8859d75e1e9382a5eba1340a6a7a3e882f8439ac0e03ae7f2c6a45ce442cea981964c2c4f28289191fef936c0509e3e2340e063f7edb4499", 0xa1}, {&(0x7f0000002840)="532a5cc05615ced5d48025228f18f3533465f1fc02d568a0e000cd281d8e200f81e8f7b16ba79377edb687d8e0b2ddf0598623ffcc63f9d849dca92b0e8054e2450570dd58903f1c846fa75d452794a3f82656b220ee66cded6e23a19f7347e35c074e6c0610b51331ba7912264218571906aae1f0ebd5e38f6d3d17d8c141020276c603ab4fbd0a194375315362cf945ecdeadb01d7132fa2c7f743b234c4cf8153bd8af017a0a1311aba52081e47", 0xaf}, {&(0x7f0000002900)="6e68d4e3", 0x4}, {&(0x7f0000002940)="31e59302d8867f243731c3b04f38822589af8a11573635bdffb06b4f6ed682dd878faa04159ac8f242b3a7c7cf03212c98be40951f917d7e39a06a062f79e79d9cc3a35d08606b988ecc782304f71c5b01a1fe535a2c9a011373971db110c3c40b378c2ee685ba181ed2f4caba33ffbde09c3de39fc762", 0x77}, {&(0x7f00000029c0)="8e67fc003e815d7ba3845e0895a9e7f598e32d117cefc5d542e729efbfc673517f26648d0f8b6711d642b7e473fd817c3868884bfa09bd7781f326763ce37e962c1dde5d304f2ebd3e5f1c4d6d828ee8c84bd81da8698c8daa198e9085de11afdd0a7989925b439910461f08efa63ef348bd195951afeeda8f729d245986d873c16dd5bb2ec6b9bba6802451a6aac0fabbdcc12a26d710d954b81d354ce5de21369e2bbf7a2b5d81b48b96338c35a9426c23f181d5de8cc1a61963ba96ddecad84f4701c3ce77700d7ef43207346bb", 0xcf}, {&(0x7f0000002ac0)="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", 0x1000}], 0x9) 849.334411ms ago: executing program 3 (id=543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x0, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x6}]}, 0xf8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 848.853181ms ago: executing program 1 (id=544): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0xb, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffe44}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r3, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 789.730936ms ago: executing program 1 (id=545): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 676.168775ms ago: executing program 1 (id=546): creat(&(0x7f0000000080)='./file0\x00', 0x1d8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 645.066068ms ago: executing program 6 (id=547): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b7", 0x23) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 553.697185ms ago: executing program 1 (id=548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) writev(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)="f51a", 0x2}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 498.8993ms ago: executing program 1 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffff3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0xc010) 491.365451ms ago: executing program 5 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}}, 0x4000000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x40000) dup3(r3, r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) 414.564367ms ago: executing program 4 (id=551): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 329.696564ms ago: executing program 1 (id=552): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[], [{@measure}, {@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x30, 0x39, 0x36, 0x32, 0x51, 0x30, 0x38], 0x2d, [0x6f, 0x65, 0x56, 0x35], 0x2d, [0x61, 0x34, 0x33, 0x33], 0x2d, [0x62, 0x64, 0x62, 0x30], 0x2d, [0x61, 0x64, 0x35, 0x33, 0x34, 0x0, 0x63, 0x31]}}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 54.166796ms ago: executing program 4 (id=553): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) 0s ago: executing program 3 (id=554): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd28, 0xa5dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 27.667710][ T29] audit: type=1400 audit(1754867853.135:62): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.668939][ T3288] cgroup: Unknown subsys name 'net' [ 27.690452][ T29] audit: type=1400 audit(1754867853.135:63): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.717841][ T29] audit: type=1400 audit(1754867853.165:64): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.836533][ T3288] cgroup: Unknown subsys name 'cpuset' [ 27.842800][ T3288] cgroup: Unknown subsys name 'rlimit' [ 27.954360][ T29] audit: type=1400 audit(1754867853.415:65): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.977612][ T29] audit: type=1400 audit(1754867853.415:66): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.998137][ T29] audit: type=1400 audit(1754867853.425:67): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.018594][ T29] audit: type=1400 audit(1754867853.425:68): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.027410][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.038916][ T29] audit: type=1400 audit(1754867853.425:69): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.072266][ T29] audit: type=1400 audit(1754867853.425:70): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.095505][ T29] audit: type=1400 audit(1754867853.515:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.131337][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.228419][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.289891][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.296998][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.304155][ T3301] bridge_slave_0: entered allmulticast mode [ 29.310850][ T3301] bridge_slave_0: entered promiscuous mode [ 29.319518][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.326594][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.333671][ T3301] bridge_slave_1: entered allmulticast mode [ 29.339998][ T3301] bridge_slave_1: entered promiscuous mode [ 29.373340][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.396749][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.440315][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.449638][ T3301] team0: Port device team_slave_0 added [ 29.457884][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.467521][ T3301] team0: Port device team_slave_1 added [ 29.500829][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.513494][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.520523][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.546570][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.560153][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.567133][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.593056][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.644440][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.671014][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.678148][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.685245][ T3307] bridge_slave_0: entered allmulticast mode [ 29.691595][ T3307] bridge_slave_0: entered promiscuous mode [ 29.719137][ T3301] hsr_slave_0: entered promiscuous mode [ 29.725043][ T3301] hsr_slave_1: entered promiscuous mode [ 29.731416][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.738494][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.745626][ T3307] bridge_slave_1: entered allmulticast mode [ 29.752045][ T3307] bridge_slave_1: entered promiscuous mode [ 29.758423][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.765466][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.772699][ T3300] bridge_slave_0: entered allmulticast mode [ 29.779091][ T3300] bridge_slave_0: entered promiscuous mode [ 29.811780][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.819011][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.826278][ T3300] bridge_slave_1: entered allmulticast mode [ 29.832517][ T3300] bridge_slave_1: entered promiscuous mode [ 29.838780][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.845942][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.853032][ T3312] bridge_slave_0: entered allmulticast mode [ 29.859558][ T3312] bridge_slave_0: entered promiscuous mode [ 29.875081][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.891505][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.898652][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.905921][ T3312] bridge_slave_1: entered allmulticast mode [ 29.912234][ T3312] bridge_slave_1: entered promiscuous mode [ 29.924214][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.962682][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.971828][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.978911][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.986085][ T3306] bridge_slave_0: entered allmulticast mode [ 29.992455][ T3306] bridge_slave_0: entered promiscuous mode [ 30.000386][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.017296][ T3307] team0: Port device team_slave_0 added [ 30.023788][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.038419][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.045482][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.052655][ T3306] bridge_slave_1: entered allmulticast mode [ 30.059186][ T3306] bridge_slave_1: entered promiscuous mode [ 30.066218][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.078317][ T3307] team0: Port device team_slave_1 added [ 30.114205][ T3300] team0: Port device team_slave_0 added [ 30.127248][ T3312] team0: Port device team_slave_0 added [ 30.138145][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.145172][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.171144][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.182645][ T3300] team0: Port device team_slave_1 added [ 30.190591][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.202854][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.212537][ T3312] team0: Port device team_slave_1 added [ 30.218640][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.225617][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.251641][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.305763][ T3306] team0: Port device team_slave_0 added [ 30.318114][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.325097][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.351011][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.362056][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.369055][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.394978][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.409115][ T3306] team0: Port device team_slave_1 added [ 30.420201][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.427377][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.453331][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.464337][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.471353][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.497375][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.534213][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.541313][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.567332][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.580372][ T3307] hsr_slave_0: entered promiscuous mode [ 30.586591][ T3307] hsr_slave_1: entered promiscuous mode [ 30.592423][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 30.598162][ T3307] Cannot create hsr debugfs directory [ 30.618803][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.625824][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.651776][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.675422][ T3312] hsr_slave_0: entered promiscuous mode [ 30.681666][ T3312] hsr_slave_1: entered promiscuous mode [ 30.687699][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 30.693443][ T3312] Cannot create hsr debugfs directory [ 30.709358][ T3300] hsr_slave_0: entered promiscuous mode [ 30.715335][ T3300] hsr_slave_1: entered promiscuous mode [ 30.721363][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 30.727123][ T3300] Cannot create hsr debugfs directory [ 30.784018][ T3306] hsr_slave_0: entered promiscuous mode [ 30.790173][ T3306] hsr_slave_1: entered promiscuous mode [ 30.796127][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 30.801844][ T3306] Cannot create hsr debugfs directory [ 30.807456][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.826726][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.849895][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.869526][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.982664][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.997026][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.006143][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.014634][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.041206][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.053575][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.062383][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.071041][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.102260][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.122601][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.132028][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.141458][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.184639][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.192248][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.201214][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.214526][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.223248][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.232004][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.253551][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.265497][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.279759][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.286828][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.299280][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.306421][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.315138][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.322322][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.343166][ T2648] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.350234][ T2648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.370617][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.413861][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.430169][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.440592][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.453323][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.460424][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.474063][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.490185][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.497247][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.508460][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.527054][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.544442][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.551638][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.560939][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.568022][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.588819][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.625295][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.636486][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.643548][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.652917][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.660012][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.682243][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.692714][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.717979][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.748150][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.824436][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.845427][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.897691][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.936879][ T3301] veth0_vlan: entered promiscuous mode [ 31.950089][ T3312] veth0_vlan: entered promiscuous mode [ 31.963931][ T3301] veth1_vlan: entered promiscuous mode [ 31.980205][ T3312] veth1_vlan: entered promiscuous mode [ 32.020036][ T3301] veth0_macvtap: entered promiscuous mode [ 32.031943][ T3312] veth0_macvtap: entered promiscuous mode [ 32.043494][ T3301] veth1_macvtap: entered promiscuous mode [ 32.054443][ T3312] veth1_macvtap: entered promiscuous mode [ 32.061929][ T3307] veth0_vlan: entered promiscuous mode [ 32.073069][ T3307] veth1_vlan: entered promiscuous mode [ 32.080517][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.100479][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.112994][ T3307] veth0_macvtap: entered promiscuous mode [ 32.120531][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.133661][ T3306] veth0_vlan: entered promiscuous mode [ 32.143407][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.154729][ T3444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.163818][ T3444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.173137][ T3306] veth1_vlan: entered promiscuous mode [ 32.180007][ T3307] veth1_macvtap: entered promiscuous mode [ 32.187285][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.205232][ T3306] veth0_macvtap: entered promiscuous mode [ 32.217593][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227958][ T3306] veth1_macvtap: entered promiscuous mode [ 32.242780][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.253854][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.261771][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.271876][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.287210][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.295984][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.306497][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.314146][ T3300] veth0_vlan: entered promiscuous mode [ 32.322200][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.333209][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.351127][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.362742][ T3300] veth1_vlan: entered promiscuous mode [ 32.384108][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.395091][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.401559][ T3300] veth0_macvtap: entered promiscuous mode [ 32.423272][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.438755][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.450728][ T3300] veth1_macvtap: entered promiscuous mode [ 32.477286][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.499652][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.512498][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.530653][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.540001][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.559546][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588793][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.626824][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.663992][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.691277][ T3490] loop0: detected capacity change from 0 to 512 [ 32.730030][ T3490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.745533][ T3490] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.748377][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 32.748392][ T29] audit: type=1400 audit(1754867858.205:106): avc: denied { mount } for pid=3478 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.783536][ T29] audit: type=1400 audit(1754867858.215:107): avc: denied { create } for pid=3494 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.927012][ T29] audit: type=1400 audit(1754867858.245:108): avc: denied { add_name } for pid=3478 comm="syz.0.7" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.947367][ T29] audit: type=1400 audit(1754867858.245:109): avc: denied { create } for pid=3478 comm="syz.0.7" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.967174][ T29] audit: type=1400 audit(1754867858.335:110): avc: denied { kexec_image_load } for pid=3494 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 32.987145][ T29] audit: type=1400 audit(1754867858.345:111): avc: denied { write open } for pid=3478 comm="syz.0.7" path="/1/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.009718][ T29] audit: type=1400 audit(1754867858.345:112): avc: denied { read write } for pid=3478 comm="syz.0.7" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.032048][ T29] audit: type=1400 audit(1754867858.345:113): avc: denied { open } for pid=3478 comm="syz.0.7" path="/1/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.054728][ T29] audit: type=1400 audit(1754867858.355:114): avc: denied { create } for pid=3505 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.073987][ T29] audit: type=1400 audit(1754867858.355:115): avc: denied { bind } for pid=3505 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.149813][ T3514] loop4: detected capacity change from 0 to 1024 [ 33.158695][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.175787][ T3514] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.215076][ T3514] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.15: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.247887][ T3514] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.15: Failed to acquire dquot type 0 [ 33.277110][ T3514] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.15: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.310195][ T3514] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.15: Invalid inode bitmap blk 0 in block_group 0 [ 33.329004][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.354043][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 33.365993][ T3514] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 33.375537][ T3514] EXT4-fs (loop4): 1 orphan inode deleted [ 33.382123][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.451792][ T3524] syz_tun: entered allmulticast mode [ 33.462575][ T3524] dvmrp8: entered allmulticast mode [ 33.470665][ T3523] syz_tun: left allmulticast mode [ 33.477500][ T3523] dvmrp8: left allmulticast mode [ 33.488498][ T3514] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.553527][ T3527] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 33.566865][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.578629][ T3527] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 33.710898][ T3541] loop1: detected capacity change from 0 to 512 [ 33.812360][ T3506] kexec: Could not allocate control_code_buffer [ 33.826287][ T3541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.898106][ T3554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3554 comm=syz.3.28 [ 33.910559][ T3554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3554 comm=syz.3.28 [ 33.929815][ T3541] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.028511][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 34.086307][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.232355][ T3583] loop3: detected capacity change from 0 to 2048 [ 34.256324][ T3588] loop0: detected capacity change from 0 to 128 [ 34.314623][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.392212][ T3583] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 34.437572][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.462172][ T3598] Illegal XDP return value 4294967274 on prog (id 51) dev N/A, expect packet loss! [ 34.487711][ T3601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'. [ 34.630155][ T3616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 34.652947][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.660591][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.664143][ C0] hrtimer: interrupt took 46772 ns [ 34.674062][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.681687][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.760534][ T3618] veth3: entered promiscuous mode [ 34.779584][ T3629] loop0: detected capacity change from 0 to 512 [ 34.786777][ T3629] EXT4-fs: Ignoring removed bh option [ 34.797305][ T3618] syz.4.54 (3618) used greatest stack depth: 10248 bytes left [ 34.816183][ T3629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.829331][ T3629] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.838712][ T3629] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 34.856609][ T3629] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 34.866738][ T3629] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 34.875073][ T3629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.941360][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.084411][ T3647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 35.207215][ T3651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.261049][ T3651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.307295][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'. [ 35.320135][ T3651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.379335][ T3651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.414027][ T3444] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.432629][ T3444] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.443973][ T3444] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.459768][ T3444] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.590647][ T3680] loop2: detected capacity change from 0 to 128 [ 35.623646][ T3680] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.636462][ T3680] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.699663][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.701333][ T3691] loop1: detected capacity change from 0 to 1024 [ 35.715576][ T3691] EXT4-fs: Ignoring removed orlov option [ 35.733318][ T3691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.778561][ T3699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 35.813696][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.866949][ T3709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 35.905713][ T3711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.92'. [ 36.115619][ T3724] syz.0.98 (3724) used greatest stack depth: 10008 bytes left [ 36.195258][ T3731] loop3: detected capacity change from 0 to 1024 [ 36.215331][ T3731] ======================================================= [ 36.215331][ T3731] WARNING: The mand mount option has been deprecated and [ 36.215331][ T3731] and is ignored by this kernel. Remove the mand [ 36.215331][ T3731] option from the mount to silence this warning. [ 36.215331][ T3731] ======================================================= [ 36.363381][ T3731] EXT4-fs: inline encryption not supported [ 36.384714][ T3731] EXT4-fs: Ignoring removed bh option [ 36.409541][ T3731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.460852][ T3731] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 36.481971][ T3731] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 36.531813][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.565519][ T3742] bond_slave_1: entered promiscuous mode [ 36.572855][ T3742] bond_slave_1: left promiscuous mode [ 36.704729][ T3749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 36.755383][ T3751] mmap: syz.3.108 (3751) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.759549][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 36.875288][ T3757] loop1: detected capacity change from 0 to 512 [ 36.906222][ T3757] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.111: casefold flag without casefold feature [ 36.944175][ T3757] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.111: couldn't read orphan inode 15 (err -117) [ 36.957532][ T3757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.104786][ T3766] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 37.278762][ T3783] loop0: detected capacity change from 0 to 128 [ 37.439888][ T3794] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.517529][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.812537][ T3813] loop2: detected capacity change from 0 to 512 [ 37.848968][ T3813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.868470][ T3813] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.988710][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.038551][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 38.038642][ T29] audit: type=1400 audit(1754867863.505:677): avc: denied { unlink } for pid=3307 comm="syz-executor" name="file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.092716][ T29] audit: type=1326 audit(1754867863.545:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.116003][ T29] audit: type=1326 audit(1754867863.545:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.139729][ T29] audit: type=1326 audit(1754867863.545:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.163041][ T29] audit: type=1326 audit(1754867863.545:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.186322][ T29] audit: type=1326 audit(1754867863.545:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.209838][ T29] audit: type=1326 audit(1754867863.545:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.233121][ T29] audit: type=1326 audit(1754867863.545:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.256344][ T29] audit: type=1326 audit(1754867863.545:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.279569][ T29] audit: type=1326 audit(1754867863.545:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd8f551ebe9 code=0x7ffc0000 [ 38.355925][ T3834] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 38.367813][ T3834] macvlan0: entered promiscuous mode [ 38.373204][ T3834] macvlan0: entered allmulticast mode [ 38.378691][ T3834] veth1_vlan: entered allmulticast mode [ 38.454422][ T3837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.515985][ T3837] bond1 (unregistering): Released all slaves [ 38.542242][ T3846] syz.1.150 uses obsolete (PF_INET,SOCK_PACKET) [ 38.694100][ T3860] pim6reg1: entered promiscuous mode [ 38.699591][ T3860] pim6reg1: entered allmulticast mode [ 39.247701][ T3877] __nla_validate_parse: 5 callbacks suppressed [ 39.247719][ T3877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 39.508189][ T3881] netlink: 'syz.3.164': attribute type 30 has an invalid length. [ 39.595934][ T3881] Zero length message leads to an empty skb [ 40.167862][ T3915] loop0: detected capacity change from 0 to 512 [ 40.199359][ T3915] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.244283][ T3915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 40.253031][ T3915] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.179: corrupted in-inode xattr: e_value size too large [ 40.273977][ T3915] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.179: couldn't read orphan inode 15 (err -117) [ 40.287750][ T3915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.314830][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.571098][ T3935] smc: net device bond0 applied user defined pnetid SYZ2 [ 40.593756][ T3941] netlink: 'syz.1.189': attribute type 12 has an invalid length. [ 40.644812][ T3945] IPv4: Oversized IP packet from 127.202.26.0 [ 40.659172][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 40.672383][ T3949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.679887][ T3949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.698592][ T3949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.706132][ T3949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.726903][ T3956] loop3: detected capacity change from 0 to 764 [ 40.736873][ T3956] Symlink component flag not implemented [ 40.742523][ T3956] Symlink component flag not implemented [ 40.748716][ T3956] Symlink component flag not implemented (129) [ 40.754967][ T3956] Symlink component flag not implemented (6) [ 40.767418][ T3956] rock: directory entry would overflow storage [ 40.773612][ T3956] rock: sig=0x4f50, size=4, remaining=3 [ 40.779223][ T3956] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 40.800591][ T3961] loop1: detected capacity change from 0 to 512 [ 40.824017][ T3961] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.835625][ T3961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.851991][ T3961] EXT4-fs (loop1): 1 truncate cleaned up [ 40.897989][ T3961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.962214][ T3972] loop2: detected capacity change from 0 to 4096 [ 40.998653][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.007640][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.018384][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.064601][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.073565][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.086326][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.130278][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.139129][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.161613][ T3989] loop3: detected capacity change from 0 to 1024 [ 41.170814][ T3989] ext4: Unknown parameter 'measure' [ 41.514757][ T4012] loop0: detected capacity change from 0 to 512 [ 41.534947][ T4012] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.606986][ T4012] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.215: Failed to acquire dquot type 0 [ 41.619002][ T4012] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 41.675856][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /48/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 41.742485][ T4020] sd 0:0:1:0: device reset [ 41.799348][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.833551][ T4025] capability: warning: `syz.1.220' uses deprecated v2 capabilities in a way that may be insecure [ 41.903280][ T4032] loop3: detected capacity change from 0 to 1024 [ 41.923293][ T4032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.942302][ T4032] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.224: Allocating blocks 385-513 which overlap fs metadata [ 41.961364][ T4032] EXT4-fs (loop3): pa ffff888106e2c310: logic 16, phys. 129, len 24 [ 41.969613][ T4032] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 42.030966][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.232533][ T4028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.458390][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 42.535919][ T4088] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 42.546122][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.553312][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.560774][ T4039] bridge_slave_0: entered allmulticast mode [ 42.567321][ T4039] bridge_slave_0: entered promiscuous mode [ 42.581607][ T4088] bond1: entered promiscuous mode [ 42.586700][ T4088] bond1: entered allmulticast mode [ 42.592014][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.599101][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.610429][ T4039] bridge_slave_1: entered allmulticast mode [ 42.617065][ T4039] bridge_slave_1: entered promiscuous mode [ 42.630948][ T4088] geneve2: entered allmulticast mode [ 42.640038][ T4088] bond1: (slave geneve2): making interface the new active one [ 42.647580][ T4088] geneve2: entered promiscuous mode [ 42.654899][ T4088] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 42.674118][ T4095] bond1: left promiscuous mode [ 42.678969][ T4095] geneve2: left promiscuous mode [ 42.683954][ T4095] bond1: left allmulticast mode [ 42.690473][ T4095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.699450][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.710247][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.740645][ T4039] team0: Port device team_slave_0 added [ 42.749020][ T4039] team0: Port device team_slave_1 added [ 42.768468][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.775407][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.801469][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.813725][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.820683][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.846738][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.877988][ T4039] hsr_slave_0: entered promiscuous mode [ 42.884213][ T4039] hsr_slave_1: entered promiscuous mode [ 42.890424][ T4039] debugfs: 'hsr0' already exists in 'hsr' [ 42.896221][ T4039] Cannot create hsr debugfs directory [ 42.981656][ T4039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.991064][ T4039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.001000][ T4039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.010927][ T4039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.030204][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.037351][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.044666][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.051747][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.079907][ T4112] loop3: detected capacity change from 0 to 128 [ 43.087481][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.103654][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 43.103666][ T29] audit: type=1400 audit(1754867868.565:1032): avc: denied { mount } for pid=4111 comm="syz.3.247" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.107980][ T4112] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.126840][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.131900][ T4112] FAT-fs (loop3): Filesystem has been set read-only [ 43.153473][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.153788][ T4112] syz.3.247: attempt to access beyond end of device [ 43.153788][ T4112] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 43.174800][ T4112] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.182738][ T4112] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.191761][ T4112] syz.3.247: attempt to access beyond end of device [ 43.191761][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.208418][ T4112] syz.3.247: attempt to access beyond end of device [ 43.208418][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.222286][ T4112] syz.3.247: attempt to access beyond end of device [ 43.222286][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.245275][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.253127][ T4112] syz.3.247: attempt to access beyond end of device [ 43.253127][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.266643][ T4112] syz.3.247: attempt to access beyond end of device [ 43.266643][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.267684][ T2648] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.279939][ T4112] syz.3.247: attempt to access beyond end of device [ 43.279939][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.286843][ T2648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.308114][ T4112] syz.3.247: attempt to access beyond end of device [ 43.308114][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.321407][ T4112] syz.3.247: attempt to access beyond end of device [ 43.321407][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.324079][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.335402][ T4112] syz.3.247: attempt to access beyond end of device [ 43.335402][ T4112] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.341664][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.386293][ T4039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.396699][ T4039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.490162][ T4123] program syz.4.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.512829][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.676118][ T4039] veth0_vlan: entered promiscuous mode [ 43.685090][ T4039] veth1_vlan: entered promiscuous mode [ 43.691937][ T29] audit: type=1400 audit(1754867869.155:1033): avc: denied { firmware_load } for pid=4141 comm="syz.4.252" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 43.707004][ T4039] veth0_macvtap: entered promiscuous mode [ 43.761792][ T4039] veth1_macvtap: entered promiscuous mode [ 43.775595][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.789985][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.801338][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.812393][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.821975][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.836120][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.859676][ T29] audit: type=1400 audit(1754867869.325:1034): avc: denied { mount } for pid=4039 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.920079][ T29] audit: type=1400 audit(1754867869.325:1035): avc: denied { mounton } for pid=4039 comm="syz-executor" path="/root/syzkaller.axXx6k/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.941594][ T4148] loop5: detected capacity change from 0 to 2048 [ 43.946953][ T29] audit: type=1326 audit(1754867869.385:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.5.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe8debe9 code=0x7ffc0000 [ 43.976975][ T29] audit: type=1326 audit(1754867869.385:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.5.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe8debe9 code=0x7ffc0000 [ 44.000487][ T29] audit: type=1326 audit(1754867869.385:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.5.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd3fe8debe9 code=0x7ffc0000 [ 44.023757][ T29] audit: type=1326 audit(1754867869.385:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.5.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe8debe9 code=0x7ffc0000 [ 44.047212][ T29] audit: type=1326 audit(1754867869.385:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.5.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fe8debe9 code=0x7ffc0000 [ 44.070602][ T29] audit: type=1326 audit(1754867869.385:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.5.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3fe8debe9 code=0x7ffc0000 [ 44.115198][ T4150] ip6gre1: entered allmulticast mode [ 44.146247][ T3977] loop5: p1 < > p4 [ 44.150851][ T3977] loop5: p4 size 8388608 extends beyond EOD, truncated [ 44.162029][ T4148] loop5: p1 < > p4 [ 44.166542][ T4148] loop5: p4 size 8388608 extends beyond EOD, truncated [ 44.318308][ T4165] capability: warning: `syz.3.261' uses 32-bit capabilities (legacy support in use) [ 44.577699][ T4171] loop5: detected capacity change from 0 to 128 [ 44.589711][ T4172] loop8: detected capacity change from 0 to 16384 [ 44.591525][ T4171] EXT4-fs: Ignoring removed nobh option [ 44.655502][ T4174] loop1: detected capacity change from 0 to 1024 [ 44.669550][ T4174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.672738][ T4171] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.719397][ T4174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.735732][ T4171] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.775657][ T4175] loop8: detected capacity change from 16384 to 16383 [ 44.786876][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.841155][ T4182] loop4: detected capacity change from 0 to 8192 [ 45.095051][ T4189] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 45.102663][ T4189] FAT-fs (loop4): Filesystem has been set read-only [ 45.475000][ T4194] loop4: detected capacity change from 0 to 512 [ 45.492480][ T4039] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.522765][ T4196] syz.5.271 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.557885][ T4194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.570919][ T4194] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.605748][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.747825][ T4216] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.768099][ T4214] loop5: detected capacity change from 0 to 1024 [ 45.780013][ T4214] EXT4-fs: Ignoring removed nobh option [ 45.802927][ T4214] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.830874][ T4214] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.279: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 45.861619][ T4222] tipc: Failed to remove unknown binding: 66,1,1/0:2397707817/2397707819 [ 45.868526][ T4214] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.279: couldn't read orphan inode 11 (err -117) [ 45.882786][ T4222] tipc: Failed to remove unknown binding: 66,1,1/0:2397707817/2397707819 [ 45.892443][ T4222] tipc: Failed to remove unknown binding: 66,1,1/0:2397707817/2397707819 [ 45.903205][ T4214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.935142][ T4214] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.279: Invalid block bitmap block 0 in block_group 0 [ 45.953113][ T4214] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.279: Failed to acquire dquot type 0 [ 46.023994][ T51] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm kworker/u8:3: Invalid inode table block 8589934593 in block_group 0 [ 46.073688][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.161683][ T4251] loop1: detected capacity change from 0 to 512 [ 46.187262][ T4252] loop4: detected capacity change from 0 to 2048 [ 46.200881][ T4251] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.237865][ T3977] Alternate GPT is invalid, using primary GPT. [ 46.244183][ T3977] loop4: p1 p2 p3 [ 46.252972][ T4251] EXT4-fs (loop1): mount failed [ 46.289960][ T4252] Alternate GPT is invalid, using primary GPT. [ 46.296361][ T4252] loop4: p1 p2 p3 [ 46.391895][ T4266] loop1: detected capacity change from 0 to 1024 [ 46.404900][ T4266] EXT4-fs: Ignoring removed orlov option [ 46.411560][ T3977] udevd[3977]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.412415][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.421529][ T3959] udevd[3959]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 46.459798][ T4266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.472607][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 46.483318][ T3977] udevd[3977]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.503779][ T3977] udevd[3977]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.541535][ T4241] chnl_net:caif_netlink_parms(): no params data found [ 46.559987][ T4273] loop3: detected capacity change from 0 to 128 [ 46.567208][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.630284][ T4278] loop1: detected capacity change from 0 to 512 [ 46.650031][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.657218][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.665968][ T4241] bridge_slave_0: entered allmulticast mode [ 46.672773][ T4241] bridge_slave_0: entered promiscuous mode [ 46.679976][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.687270][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.694962][ T4241] bridge_slave_1: entered allmulticast mode [ 46.701642][ T4278] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.702029][ T4241] bridge_slave_1: entered promiscuous mode [ 46.735242][ T4241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.737279][ T4278] EXT4-fs (loop1): mount failed [ 46.747819][ T4241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.783632][ T4241] team0: Port device team_slave_0 added [ 46.798096][ T4241] team0: Port device team_slave_1 added [ 46.824626][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.831670][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.831684][ T4285] loop1: detected capacity change from 0 to 1764 [ 46.831705][ T4241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.866159][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.881532][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.907649][ T4241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.950769][ T4289] loop3: detected capacity change from 0 to 512 [ 46.966649][ T4287] __nla_validate_parse: 3 callbacks suppressed [ 46.966662][ T4287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.305'. [ 46.969380][ T4241] hsr_slave_0: entered promiscuous mode [ 46.993051][ T4241] hsr_slave_1: entered promiscuous mode [ 46.999123][ T4241] debugfs: 'hsr0' already exists in 'hsr' [ 47.004864][ T4241] Cannot create hsr debugfs directory [ 47.017303][ T4289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.031383][ T4289] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.097269][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.308'. [ 47.107092][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.162948][ T4241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 47.177113][ T4241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 47.199507][ T4303] loop4: detected capacity change from 0 to 128 [ 47.200881][ T4241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.224315][ T4304] loop5: detected capacity change from 0 to 1024 [ 47.236508][ T4303] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.250092][ T4304] EXT4-fs: Ignoring removed orlov option [ 47.256419][ T4304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.265729][ T4303] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.275035][ T4241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.300182][ T4304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.325416][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.332559][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.361162][ T4315] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.312'. [ 47.385462][ T4304] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 47.409621][ T4317] vhci_hcd: invalid port number 96 [ 47.414818][ T4317] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 47.437098][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.443055][ T4306] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.312'. [ 47.523295][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.547448][ T4324] ip6_vti0: mtu greater than device maximum [ 47.563167][ T4241] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.580779][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.610683][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.617804][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.670314][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.677509][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.725516][ T4241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.736066][ T4241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.830258][ T4339] loop1: detected capacity change from 0 to 512 [ 47.878113][ T4348] loop3: detected capacity change from 0 to 1024 [ 47.882089][ T4321] pim6reg: entered allmulticast mode [ 47.884886][ T4348] EXT4-fs: Ignoring removed orlov option [ 47.903921][ T4339] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.908047][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.915819][ T4348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.924186][ T4339] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.932716][ T4321] pim6reg: left allmulticast mode [ 47.947431][ T4354] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.326'. [ 47.957364][ T4347] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.326'. [ 47.973917][ T4348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.987210][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.322: corrupted inode contents [ 48.003823][ T4339] EXT4-fs (loop1): Remounting filesystem read-only [ 48.013714][ T4339] EXT4-fs (loop1): 1 truncate cleaned up [ 48.020291][ T2648] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.030955][ T2648] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.072758][ T2648] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.092158][ T4362] loop5: detected capacity change from 0 to 1024 [ 48.099092][ T4362] EXT4-fs: Ignoring removed orlov option [ 48.112755][ T2648] __quota_error: 148 callbacks suppressed [ 48.112771][ T2648] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 48.130027][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.137956][ T4362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.162432][ T4339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.187455][ T4373] loop3: detected capacity change from 0 to 128 [ 48.194079][ T4373] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.202750][ T4368] loop4: detected capacity change from 0 to 128 [ 48.217611][ T4368] EXT4-fs: Ignoring removed nobh option [ 48.233329][ T4368] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.251002][ T4373] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.273397][ T4241] veth0_vlan: entered promiscuous mode [ 48.279883][ T4368] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.286420][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.317268][ T4241] veth1_vlan: entered promiscuous mode [ 48.340526][ T4241] veth0_macvtap: entered promiscuous mode [ 48.340567][ T4039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.349608][ T4241] veth1_macvtap: entered promiscuous mode [ 48.361019][ T29] audit: type=1326 audit(1754867873.815:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcce8a2ebe9 code=0x0 [ 48.375201][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.400455][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.411739][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.425209][ T4382] loop1: detected capacity change from 0 to 512 [ 48.483676][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.508118][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.520288][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.549381][ T4382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.562252][ T4382] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.598263][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.604946][ T4391] syz_tun: entered promiscuous mode [ 48.612979][ T4391] vlan2: entered promiscuous mode [ 48.640697][ T4393] loop1: detected capacity change from 0 to 512 [ 48.653129][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.675194][ T4393] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.748460][ T4393] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 48.758915][ T4393] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 48.768458][ T4393] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.332: Failed to acquire dquot type 0 [ 48.818493][ T4393] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 48.871213][ T29] audit: type=1326 audit(1754867874.335:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 48.877469][ T4403] loop4: detected capacity change from 0 to 1024 [ 48.894586][ T29] audit: type=1326 audit(1754867874.335:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 48.924337][ T29] audit: type=1326 audit(1754867874.335:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 48.926488][ T4403] EXT4-fs: Ignoring removed nobh option [ 48.947808][ T29] audit: type=1326 audit(1754867874.335:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 48.948773][ T29] audit: type=1326 audit(1754867874.335:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 48.999977][ T29] audit: type=1326 audit(1754867874.335:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 49.030133][ T3306] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.039500][ T4403] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.072447][ T4403] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.335: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 49.091428][ T4409] loop1: detected capacity change from 0 to 1024 [ 49.101865][ T4409] EXT4-fs: Ignoring removed orlov option [ 49.103974][ T4403] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.335: couldn't read orphan inode 11 (err -117) [ 49.107781][ T4409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.141142][ T4409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.182190][ T4403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.287931][ T4403] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.335: Invalid block bitmap block 0 in block_group 0 [ 49.301430][ T4422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.343'. [ 49.310365][ T4403] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.335: Failed to acquire dquot type 0 [ 49.335459][ T2648] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:6: Invalid inode table block 8589934593 in block_group 0 [ 49.353892][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.373619][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.414318][ T4429] loop4: detected capacity change from 0 to 1024 [ 49.427919][ T4427] netlink: 'syz.1.345': attribute type 21 has an invalid length. [ 49.442303][ T4429] EXT4-fs: Ignoring removed orlov option [ 49.455709][ T4427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.345'. [ 49.464727][ T4427] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 49.506231][ T4429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.539362][ T4437] loop3: detected capacity change from 0 to 512 [ 49.604704][ T4437] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.618105][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.716108][ T4437] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.349: Failed to acquire dquot type 0 [ 49.752768][ T4437] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 49.820533][ T4442] bridge0: entered promiscuous mode [ 49.830628][ T3312] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.855196][ T4442] bridge0: port 3(macsec1) entered blocking state [ 49.862705][ T4442] bridge0: port 3(macsec1) entered disabled state [ 49.871432][ T4442] macsec1: entered allmulticast mode [ 49.879837][ T4442] bridge0: entered allmulticast mode [ 49.892152][ T4442] macsec1: left allmulticast mode [ 49.897834][ T4442] bridge0: left allmulticast mode [ 49.943509][ T4442] bridge0: left promiscuous mode [ 50.018688][ T4452] loop3: detected capacity change from 0 to 1024 [ 50.020267][ T4455] loop4: detected capacity change from 0 to 1024 [ 50.035165][ T4452] EXT4-fs: Ignoring removed orlov option [ 50.048352][ T4455] EXT4-fs: Ignoring removed orlov option [ 50.088275][ T4452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.110053][ T4458] loop6: detected capacity change from 0 to 1024 [ 50.119159][ T4455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.143525][ T4458] EXT4-fs: Ignoring removed nobh option [ 50.156917][ T4458] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.168475][ T4458] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.356: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 50.175739][ T4465] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.357'. [ 50.188604][ T4458] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.356: couldn't read orphan inode 11 (err -117) [ 50.196003][ T4465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.357'. [ 50.229643][ T4455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.243785][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.249752][ T4456] pim6reg: entered allmulticast mode [ 50.261259][ T4456] pim6reg: left allmulticast mode [ 50.275890][ T4458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.303570][ T4458] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.356: Invalid block bitmap block 0 in block_group 0 [ 50.317881][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.318453][ T4458] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.356: Failed to acquire dquot type 0 [ 50.364769][ T4471] all: renamed from lo (while UP) [ 50.383676][ T31] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm kworker/u8:1: Invalid inode table block 8589934593 in block_group 0 [ 50.413551][ T4241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.441781][ T4477] loop6: detected capacity change from 0 to 128 [ 50.457346][ T4477] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.474928][ T4482] loop3: detected capacity change from 0 to 1024 [ 50.478481][ T4480] loop1: detected capacity change from 0 to 1024 [ 50.482242][ T4482] EXT4-fs: Ignoring removed orlov option [ 50.499274][ T4483] loop4: detected capacity change from 0 to 1024 [ 50.506969][ T4477] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.509506][ T4480] EXT4-fs: Ignoring removed nobh option [ 50.530138][ T4480] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.542045][ T4480] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.373: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 50.561929][ T4480] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.373: couldn't read orphan inode 11 (err -117) [ 50.585930][ T4483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 50.595236][ T4482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.596614][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.616636][ T4483] System zones: 0-1, 3-36 [ 50.627696][ T4483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.669043][ T4480] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.373: Invalid block bitmap block 0 in block_group 0 [ 50.672913][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.684336][ T4480] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.373: Failed to acquire dquot type 0 [ 50.777337][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.792898][ T2648] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm kworker/u8:6: Invalid inode table block 8589934593 in block_group 0 [ 50.817661][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.931405][ T4499] loop1: detected capacity change from 0 to 4096 [ 50.938949][ T4499] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.952241][ T4499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.132098][ T4518] netlink: 'syz.5.377': attribute type 10 has an invalid length. [ 51.144440][ T4518] team0: Port device dummy0 added [ 51.153123][ T4518] netlink: 'syz.5.377': attribute type 10 has an invalid length. [ 51.161560][ T4518] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 51.174480][ T4518] team0: Failed to send options change via netlink (err -105) [ 51.183234][ T4518] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 51.193947][ T4518] team0: Port device dummy0 removed [ 51.209552][ T4518] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.260579][ T4528] loop6: detected capacity change from 0 to 1024 [ 51.277555][ T4528] EXT4-fs: Ignoring removed orlov option [ 51.288579][ T4528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.348901][ T4241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.715739][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.086706][ T4541] loop3: detected capacity change from 0 to 1024 [ 52.103085][ T4541] EXT4-fs: Ignoring removed nobh option [ 52.123111][ T4541] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.156899][ T4541] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.382: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 52.173344][ T4544] bridge0: entered promiscuous mode [ 52.187804][ T4541] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.382: couldn't read orphan inode 11 (err -117) [ 52.204556][ T4544] bridge0: port 3(macsec1) entered blocking state [ 52.207020][ T4541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.212501][ T4544] bridge0: port 3(macsec1) entered disabled state [ 52.246271][ T4544] macsec1: entered allmulticast mode [ 52.247531][ T4541] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.382: Invalid block bitmap block 0 in block_group 0 [ 52.252121][ T4544] bridge0: entered allmulticast mode [ 52.267333][ T4541] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.382: Failed to acquire dquot type 0 [ 52.318503][ T4544] macsec1: left allmulticast mode [ 52.324901][ T4544] bridge0: left allmulticast mode [ 52.341609][ T31] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm kworker/u8:1: Invalid inode table block 8589934593 in block_group 0 [ 52.357818][ T4544] bridge0: left promiscuous mode [ 52.357839][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.414223][ T4557] $Hÿ: renamed from bond0 (while UP) [ 52.432321][ T4557] $Hÿ: entered promiscuous mode [ 52.437396][ T4557] bond_slave_0: entered promiscuous mode [ 52.443175][ T4557] bond_slave_1: entered promiscuous mode [ 52.999175][ T4583] __nla_validate_parse: 2 callbacks suppressed [ 52.999191][ T4583] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.399'. [ 53.027444][ T4577] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.399'. [ 53.063129][ T4590] loop4: detected capacity change from 0 to 1024 [ 53.071065][ T4590] EXT4-fs: Ignoring removed nobh option [ 53.078401][ T4590] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.091218][ T4590] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 53.112182][ T4590] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.402: couldn't read orphan inode 11 (err -117) [ 53.128783][ T4590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.141719][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 53.141767][ T29] audit: type=1326 audit(1754867878.605:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ee67ad550 code=0x7ffc0000 [ 53.149646][ T4590] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.402: Invalid block bitmap block 0 in block_group 0 [ 53.174098][ T29] audit: type=1326 audit(1754867878.605:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f1ee67ad937 code=0x7ffc0000 [ 53.193330][ T4590] Quota error (device loop4): write_blk: dquota write failed [ 53.207979][ T29] audit: type=1326 audit(1754867878.605:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ee67ad550 code=0x7ffc0000 [ 53.208013][ T29] audit: type=1326 audit(1754867878.605:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 53.208038][ T29] audit: type=1326 audit(1754867878.605:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 53.215414][ T4590] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 53.238729][ T29] audit: type=1326 audit(1754867878.615:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 53.269053][ T4590] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.402: Failed to acquire dquot type 0 [ 53.330595][ T29] audit: type=1326 audit(1754867878.795:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 53.354038][ T29] audit: type=1326 audit(1754867878.795:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee67aebe9 code=0x7ffc0000 [ 53.426284][ T59] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:4: Invalid inode table block 8589934593 in block_group 0 [ 53.460331][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.471112][ T4603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.478349][ T4603] IPv6: NLM_F_CREATE should be set when creating new route [ 53.523810][ T4601] bridge0: entered promiscuous mode [ 53.547520][ T4601] bridge0: port 3(macsec1) entered blocking state [ 53.554392][ T4601] bridge0: port 3(macsec1) entered disabled state [ 53.563745][ T4601] macsec1: entered allmulticast mode [ 53.573302][ T4601] bridge0: entered allmulticast mode [ 53.584909][ T4601] macsec1: left allmulticast mode [ 53.591348][ T4601] bridge0: left allmulticast mode [ 53.602004][ T4601] bridge0: left promiscuous mode [ 53.653538][ T4609] bridge: RTM_NEWNEIGH with invalid ether address [ 53.692020][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 53.941892][ T4623] loop4: detected capacity change from 0 to 1024 [ 53.988771][ T4627] loop3: detected capacity change from 0 to 1764 [ 53.995992][ T4623] EXT4-fs: Ignoring removed orlov option [ 54.038608][ T4623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.185173][ T4631] loop3: detected capacity change from 0 to 8192 [ 54.223882][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.347822][ T4631] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 54.348332][ T4637] loop4: detected capacity change from 0 to 1024 [ 54.355424][ T4631] FAT-fs (loop3): Filesystem has been set read-only [ 54.374930][ T4637] EXT4-fs: Ignoring removed nobh option [ 54.409070][ T4637] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.454466][ T4637] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.419: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 54.474016][ T4646] openvswitch: netlink: Message has 6 unknown bytes. [ 54.484478][ T4637] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.419: couldn't read orphan inode 11 (err -117) [ 54.505156][ T4637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.578467][ T4652] sd 0:0:1:0: device reset [ 54.606693][ T4637] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.419: Invalid block bitmap block 0 in block_group 0 [ 54.615703][ T4650] bridge0: entered promiscuous mode [ 54.640640][ T4637] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.419: Failed to acquire dquot type 0 [ 54.661617][ T4650] bridge0: port 3(macsec1) entered blocking state [ 54.672506][ T4650] bridge0: port 3(macsec1) entered disabled state [ 54.681106][ T4650] macsec1: entered allmulticast mode [ 54.687363][ T4650] bridge0: entered allmulticast mode [ 54.711575][ T4650] macsec1: left allmulticast mode [ 54.717612][ T4650] bridge0: left allmulticast mode [ 54.723673][ T51] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:3: Invalid inode table block 8589934593 in block_group 0 [ 54.752376][ T4650] bridge0: left promiscuous mode [ 54.881326][ T4665] loop6: detected capacity change from 0 to 1764 [ 54.957242][ T4668] loop1: detected capacity change from 0 to 2048 [ 54.964947][ T4670] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.000056][ T4668] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.029207][ T4670] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.046372][ T4674] netlink: 96 bytes leftover after parsing attributes in process `syz.4.435'. [ 55.088380][ T4670] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.098787][ T4676] loop1: detected capacity change from 0 to 8192 [ 55.168837][ T4670] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.225112][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.243890][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.252280][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.259406][ T4676] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 55.260965][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.268154][ T4676] FAT-fs (loop1): Filesystem has been set read-only [ 55.341749][ T4684] loop1: detected capacity change from 0 to 1024 [ 55.348767][ T4684] EXT4-fs: inline encryption not supported [ 55.354797][ T4684] EXT4-fs: Ignoring removed bh option [ 55.432145][ T4693] loop1: detected capacity change from 0 to 1024 [ 55.441308][ T4693] EXT4-fs: Ignoring removed orlov option [ 55.461787][ T4695] loop4: detected capacity change from 0 to 1024 [ 55.468987][ T4695] EXT4-fs: Ignoring removed nobh option [ 55.497145][ T4695] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.509337][ T4695] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.441: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 55.529539][ T4695] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.441: couldn't read orphan inode 11 (err -117) [ 55.548744][ T4695] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.441: Invalid block bitmap block 0 in block_group 0 [ 55.563447][ T4695] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.441: Failed to acquire dquot type 0 [ 55.589685][ T31] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:1: Invalid inode table block 8589934593 in block_group 0 [ 55.734669][ T4704] loop4: detected capacity change from 0 to 1764 [ 55.763303][ T4703] bridge0: entered promiscuous mode [ 55.795303][ T4703] bridge0: port 3(macsec1) entered blocking state [ 55.803223][ T4703] bridge0: port 3(macsec1) entered disabled state [ 55.819482][ T4703] macsec1: entered allmulticast mode [ 55.825480][ T4703] bridge0: entered allmulticast mode [ 55.840477][ T4703] macsec1: left allmulticast mode [ 55.847729][ T4703] bridge0: left allmulticast mode [ 55.867577][ T4703] bridge0: left promiscuous mode [ 55.962135][ T4703] syz.3.442 (4703) used greatest stack depth: 9928 bytes left [ 55.987517][ T4707] syz_tun: entered allmulticast mode [ 56.034011][ T4713] bond1: entered promiscuous mode [ 56.039271][ T4713] bond1: entered allmulticast mode [ 56.046996][ T4713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.062423][ T4713] bond1 (unregistering): Released all slaves [ 56.259829][ T4732] ip6gre1: entered allmulticast mode [ 56.274219][ T4738] loop4: detected capacity change from 0 to 128 [ 56.301195][ T4738] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.408055][ T4743] bridge0: entered promiscuous mode [ 56.422754][ T4743] bridge0: port 3(macsec1) entered blocking state [ 56.429814][ T4743] bridge0: port 3(macsec1) entered disabled state [ 56.437494][ T4743] macsec1: entered allmulticast mode [ 56.443193][ T4743] bridge0: entered allmulticast mode [ 56.459298][ T4743] macsec1: left allmulticast mode [ 56.464970][ T4743] bridge0: left allmulticast mode [ 56.476476][ T4743] bridge0: left promiscuous mode [ 56.503300][ T4755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.510685][ T4755] IPv6: NLM_F_CREATE should be set when creating new route [ 56.567873][ T4757] loop6: detected capacity change from 0 to 1024 [ 56.653750][ T4757] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.466: Allocating blocks 449-513 which overlap fs metadata [ 56.675189][ T4756] EXT4-fs (loop6): pa ffff88810550b2a0: logic 48, phys. 177, len 21 [ 56.683261][ T4756] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 56.813167][ T4770] loop6: detected capacity change from 0 to 8192 [ 56.901909][ T4787] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 56.914613][ T4788] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 56.922356][ T4788] netlink: 'syz.4.476': attribute type 4 has an invalid length. [ 56.930097][ T4788] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.476'. [ 56.939526][ T4787] bond0: (slave dummy0): Releasing backup interface [ 56.952976][ T4790] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 56.961649][ T4788] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 56.969395][ T4788] netlink: 'syz.4.476': attribute type 4 has an invalid length. [ 56.974319][ T4787] team0: Port device dummy0 added [ 56.977060][ T4788] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.476'. [ 56.992910][ T4770] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 57.000594][ T4770] FAT-fs (loop6): Filesystem has been set read-only [ 57.012772][ T4790] team0: Port device dummy0 removed [ 57.041938][ T4790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.052369][ T4792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 57.123862][ T4797] loop1: detected capacity change from 0 to 128 [ 57.189041][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 57.324047][ T4813] bridge: RTM_NEWNEIGH with invalid ether address [ 57.380465][ T4817] netlink: 'syz.5.489': attribute type 12 has an invalid length. [ 57.513828][ T4822] loop5: detected capacity change from 0 to 8192 [ 57.676996][ T4835] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 57.684594][ T4835] FAT-fs (loop5): Filesystem has been set read-only [ 57.917029][ T4864] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 57.957776][ T4864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.982944][ T4864] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 57.992493][ T4864] bond1: (slave batadv1): making interface the new active one [ 58.001307][ T4864] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 58.079069][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 58.091894][ T4873] bridge0: entered promiscuous mode [ 58.098908][ T4873] bridge0: port 3(macvlan2) entered blocking state [ 58.105598][ T4873] bridge0: port 3(macvlan2) entered disabled state [ 58.112458][ T4873] macvlan2: entered allmulticast mode [ 58.117945][ T4873] bridge0: entered allmulticast mode [ 58.123833][ T4873] macvlan2: left allmulticast mode [ 58.129060][ T4873] bridge0: left allmulticast mode [ 58.134745][ T4873] bridge0: left promiscuous mode [ 58.238328][ T4880] ªªªªªª: renamed from vlan0 (while UP) [ 58.258478][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 58.258491][ T29] audit: type=1400 audit(1754867883.725:1604): avc: denied { sqpoll } for pid=4881 comm="syz.5.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.454625][ T29] audit: type=1326 audit(1754867883.915:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcce8a25ba7 code=0x7ffc0000 [ 58.477954][ T29] audit: type=1326 audit(1754867883.915:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcce89cadd9 code=0x7ffc0000 [ 58.501232][ T29] audit: type=1326 audit(1754867883.915:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcce8a25ba7 code=0x7ffc0000 [ 58.524540][ T29] audit: type=1326 audit(1754867883.915:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcce89cadd9 code=0x7ffc0000 [ 58.548041][ T29] audit: type=1326 audit(1754867883.915:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8a2ebe9 code=0x7ffc0000 [ 58.681225][ T29] audit: type=1326 audit(1754867884.005:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce8a2ebe9 code=0x7ffc0000 [ 58.705316][ T29] audit: type=1326 audit(1754867884.005:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8a2ebe9 code=0x7ffc0000 [ 58.729043][ T29] audit: type=1326 audit(1754867884.005:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8a2ebe9 code=0x7ffc0000 [ 58.752518][ T29] audit: type=1326 audit(1754867884.005:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce8a2ebe9 code=0x7ffc0000 [ 58.960208][ T4953] loop6: detected capacity change from 0 to 1024 [ 59.019240][ T4953] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.521: Allocating blocks 385-513 which overlap fs metadata [ 59.038996][ T4953] EXT4-fs (loop6): pa ffff88810550b3f0: logic 16, phys. 129, len 24 [ 59.047076][ T4953] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 59.114015][ T4964] loop6: detected capacity change from 0 to 128 [ 59.188142][ T4970] bio_check_eod: 11465 callbacks suppressed [ 59.188155][ T4970] syz.6.524: attempt to access beyond end of device [ 59.188155][ T4970] loop6: rw=2049, sector=145, nr_sectors = 32 limit=128 [ 59.214255][ T4870] syz.4.512 (4870) used greatest stack depth: 8072 bytes left [ 59.228879][ T4970] syz.6.524: attempt to access beyond end of device [ 59.228879][ T4970] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 59.244402][ T4970] syz.6.524: attempt to access beyond end of device [ 59.244402][ T4970] loop6: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 59.270327][ T4970] syz.6.524: attempt to access beyond end of device [ 59.270327][ T4970] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 59.289411][ T4975] loop5: detected capacity change from 0 to 1024 [ 59.296096][ T4975] ext4: Unknown parameter 'measure' [ 59.307700][ T4970] syz.6.524: attempt to access beyond end of device [ 59.307700][ T4970] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 59.322890][ T4970] syz.6.524: attempt to access beyond end of device [ 59.322890][ T4970] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 59.348780][ T4964] syz.6.524: attempt to access beyond end of device [ 59.348780][ T4964] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 59.362858][ T4970] syz.6.524: attempt to access beyond end of device [ 59.362858][ T4970] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 59.383423][ T4964] syz.6.524: attempt to access beyond end of device [ 59.383423][ T4964] loop6: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 59.399002][ T4964] syz.6.524: attempt to access beyond end of device [ 59.399002][ T4964] loop6: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 59.739682][ T4992] loop6: detected capacity change from 0 to 8192 [ 59.852456][ T4997] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 0) [ 59.860935][ T4997] FAT-fs (loop6): Filesystem has been set read-only [ 59.867637][ T4997] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 60.029401][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.541'. [ 60.053232][ T5007] loop6: detected capacity change from 0 to 256 [ 60.122706][ T5007] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 60.132858][ T5007] FAT-fs (loop6): Filesystem has been set read-only [ 60.140250][ T5007] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 60.152441][ T5007] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 60.165269][ T5007] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 60.179812][ T5013] loop5: detected capacity change from 0 to 128 [ 60.316305][ T5021] loop6: detected capacity change from 0 to 512 [ 60.326054][ T5021] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.335633][ T5021] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 60.426227][ T5021] EXT4-fs (loop6): 1 truncate cleaned up [ 60.971290][ T5029] ================================================================== [ 60.979400][ T5029] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 60.987660][ T5029] [ 60.989985][ T5029] write to 0xffff88810afc60f4 of 4 bytes by task 5021 on cpu 1: [ 60.997609][ T5029] xas_set_mark+0x12b/0x140 [ 61.002125][ T5029] __folio_start_writeback+0x1dd/0x440 [ 61.007590][ T5029] ext4_bio_write_folio+0x5ad/0x9f0 [ 61.012794][ T5029] mpage_process_page_bufs+0x4a1/0x620 [ 61.018282][ T5029] mpage_prepare_extent_to_map+0x786/0xc00 [ 61.024090][ T5029] ext4_do_writepages+0xa05/0x2750 [ 61.029215][ T5029] ext4_writepages+0x176/0x300 [ 61.033987][ T5029] do_writepages+0x1c3/0x310 [ 61.038589][ T5029] file_write_and_wait_range+0x156/0x2c0 [ 61.044229][ T5029] generic_buffers_fsync_noflush+0x45/0x120 [ 61.050147][ T5029] ext4_sync_file+0x1ab/0x690 [ 61.054861][ T5029] vfs_fsync_range+0x10d/0x130 [ 61.059625][ T5029] ext4_buffered_write_iter+0x34f/0x3c0 [ 61.065195][ T5029] ext4_file_write_iter+0xdbf/0xf00 [ 61.070450][ T5029] iter_file_splice_write+0x666/0x9e0 [ 61.075824][ T5029] direct_splice_actor+0x153/0x2a0 [ 61.080937][ T5029] splice_direct_to_actor+0x30f/0x680 [ 61.086325][ T5029] do_splice_direct+0xda/0x150 [ 61.091087][ T5029] do_sendfile+0x380/0x650 [ 61.095511][ T5029] __x64_sys_sendfile64+0x105/0x150 [ 61.100823][ T5029] x64_sys_call+0x2bb0/0x2ff0 [ 61.105525][ T5029] do_syscall_64+0xd2/0x200 [ 61.110045][ T5029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.115940][ T5029] [ 61.118264][ T5029] read to 0xffff88810afc60f4 of 4 bytes by task 5029 on cpu 0: [ 61.125800][ T5029] filemap_write_and_wait_range+0xfc/0x340 [ 61.131614][ T5029] filemap_invalidate_pages+0xa4/0x1a0 [ 61.137090][ T5029] kiocb_invalidate_pages+0x6e/0x80 [ 61.142295][ T5029] __iomap_dio_rw+0x5d4/0x1250 [ 61.147059][ T5029] iomap_dio_rw+0x40/0x90 [ 61.151402][ T5029] ext4_file_write_iter+0xad9/0xf00 [ 61.156732][ T5029] iter_file_splice_write+0x666/0x9e0 [ 61.162141][ T5029] direct_splice_actor+0x153/0x2a0 [ 61.167273][ T5029] splice_direct_to_actor+0x30f/0x680 [ 61.172660][ T5029] do_splice_direct+0xda/0x150 [ 61.177438][ T5029] do_sendfile+0x380/0x650 [ 61.181885][ T5029] __x64_sys_sendfile64+0x105/0x150 [ 61.187102][ T5029] x64_sys_call+0x2bb0/0x2ff0 [ 61.191810][ T5029] do_syscall_64+0xd2/0x200 [ 61.196336][ T5029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.202268][ T5029] [ 61.204601][ T5029] value changed: 0x0a000021 -> 0x04000021 [ 61.210323][ T5029] [ 61.212655][ T5029] Reported by Kernel Concurrency Sanitizer on: [ 61.218836][ T5029] CPU: 0 UID: 0 PID: 5029 Comm: syz.6.547 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 61.229445][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.239514][ T5029] ==================================================================