last executing test programs: 6.518014887s ago: executing program 0 (id=569): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00'], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2, 0x0, 0x5}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000003b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 6.032268616s ago: executing program 0 (id=572): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000002640)=""/4103, 0x1007, 0xd34) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 5.939316793s ago: executing program 0 (id=575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a0000000109022200010000000009040000000e010000082403"], 0x0) 3.040285636s ago: executing program 1 (id=602): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2.883610129s ago: executing program 0 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x220c084, &(0x7f0000000880)=ANY=[], 0x9, 0x224, &(0x7f0000000380)="$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") 2.733565401s ago: executing program 1 (id=605): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r3, &(0x7f0000001300), 0x8f) 2.720995932s ago: executing program 2 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x80) 2.588228773s ago: executing program 2 (id=607): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 2.439468484s ago: executing program 1 (id=608): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.410843577s ago: executing program 3 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0xa47, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 1.158173907s ago: executing program 3 (id=611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x5c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.140169908s ago: executing program 0 (id=612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40095505, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.139013779s ago: executing program 2 (id=613): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f0000000080), 0x84, 0x49a, &(0x7f0000000940)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdr={{0x18, 0x29, 0x39, {0x33212f25b1bd33bf, 0x0, 0x2, 0x7}}}], 0x40}}], 0x1, 0x4040084) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getpriority(0x0, 0x0) waitid(0x1, r1, 0x0, 0x4, 0x0) 1.136272789s ago: executing program 1 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmat(r3, &(0x7f0000000000/0x3000)=nil, 0x7000) 1.024146378s ago: executing program 3 (id=616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="ed"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) syz_clone(0x49208000, 0x0, 0x0, 0x0, 0x0, 0x0) 976.601172ms ago: executing program 0 (id=617): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) tkill(r0, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) 789.508847ms ago: executing program 3 (id=618): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x120000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0xb, 0x800, 0x52b, 0xe99, 0x4, 0x9}) capget(&(0x7f0000000340)={0x19980330, r0}, &(0x7f00000001c0)={0x8, 0x3, 0x7, 0x4, 0x3}) syz_open_procfs(r0, &(0x7f0000000000)='net/packet\x00') getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/131, 0x83) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200e3ff5e6362152c28f7b502000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) memfd_secret(0x80000) 768.324769ms ago: executing program 3 (id=619): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r3, &(0x7f0000001300), 0x8f) 724.711022ms ago: executing program 3 (id=620): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x3, 0x0) fcntl$setpipe(r4, 0x4, 0xfffffffffffff000) 708.838733ms ago: executing program 2 (id=621): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x36) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 554.462086ms ago: executing program 2 (id=623): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0xb9, 0x6}, 'port0\x00', 0xd2, 0x20002, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x9, 0x0, 0x4, 0x9}) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000001040)=ANY=[@ANYBLOB="85007143f458325f0675b070b7fce54ae300008b00000000"], &(0x7f0000003240)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB="00000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x800}, {}, {}, {0x2a}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5, 0xe}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 502.39233ms ago: executing program 4 (id=625): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, 0x0, 0x0) 485.536021ms ago: executing program 2 (id=626): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffffffc) write$selinux_access(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:gpo_agent_exec_t:s0 unconf'], 0x46) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)={0x1a0, 0x1403, 0x10, 0x70bd27, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) 309.094636ms ago: executing program 4 (id=627): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x101, 0x4) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x80, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x4c58, 0x10000, 0x0, 0x1, 0xf7a6, 0x8, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) close(r1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) 275.227778ms ago: executing program 4 (id=628): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x300) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 247.199381ms ago: executing program 1 (id=629): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x2, 0x0, 0x1, 0x0}) socket$kcm(0x29, 0x2, 0x0) unshare(0x2c060000) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) 176.096746ms ago: executing program 4 (id=630): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 175.493566ms ago: executing program 1 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780), 0x10, 0x0}, 0x44001) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)="441f08d600270bcf724ef54e91e6ffbe002a5f89000000000000000000", 0x1d) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4dfd, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) r2 = socket(0x10, 0x803, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0xfffffffffffffe4a, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 15.542569ms ago: executing program 4 (id=631): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r3, &(0x7f0000001300), 0x8f) 0s ago: executing program 4 (id=632): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x810, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 21.399231][ T29] audit: type=1400 audit(1754391242.242:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.400068][ T3287] cgroup: Unknown subsys name 'net' [ 21.421932][ T29] audit: type=1400 audit(1754391242.242:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.449244][ T29] audit: type=1400 audit(1754391242.272:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.588456][ T3287] cgroup: Unknown subsys name 'cpuset' [ 21.594480][ T3287] cgroup: Unknown subsys name 'rlimit' [ 21.783236][ T29] audit: type=1400 audit(1754391242.622:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.806473][ T29] audit: type=1400 audit(1754391242.622:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.826901][ T29] audit: type=1400 audit(1754391242.622:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.847286][ T29] audit: type=1400 audit(1754391242.622:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.867524][ T29] audit: type=1400 audit(1754391242.632:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.874138][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.892258][ T29] audit: type=1400 audit(1754391242.632:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.924008][ T29] audit: type=1400 audit(1754391242.752:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.955957][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.984019][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 23.020635][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 23.105908][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.112988][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.120084][ T3299] bridge_slave_0: entered allmulticast mode [ 23.126482][ T3299] bridge_slave_0: entered promiscuous mode [ 23.136997][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.144053][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.151306][ T3300] bridge_slave_0: entered allmulticast mode [ 23.157634][ T3300] bridge_slave_0: entered promiscuous mode [ 23.167815][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 23.183601][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.190731][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.197852][ T3299] bridge_slave_1: entered allmulticast mode [ 23.204157][ T3299] bridge_slave_1: entered promiscuous mode [ 23.210344][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.217366][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.224456][ T3300] bridge_slave_1: entered allmulticast mode [ 23.230746][ T3300] bridge_slave_1: entered promiscuous mode [ 23.267970][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.280836][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 23.290430][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.304252][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.317518][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 23.329294][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.358203][ T3300] team0: Port device team_slave_0 added [ 23.378822][ T3299] team0: Port device team_slave_0 added [ 23.384935][ T3300] team0: Port device team_slave_1 added [ 23.406423][ T3299] team0: Port device team_slave_1 added [ 23.416811][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.423781][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.449673][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.460513][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.467560][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.474825][ T3303] bridge_slave_0: entered allmulticast mode [ 23.481197][ T3303] bridge_slave_0: entered promiscuous mode [ 23.495682][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.502703][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.528581][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.539392][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.546445][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.553581][ T3303] bridge_slave_1: entered allmulticast mode [ 23.559822][ T3303] bridge_slave_1: entered promiscuous mode [ 23.575404][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.582380][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.608329][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.633591][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.640606][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.666512][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.683470][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.707736][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.714827][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.721911][ T3308] bridge_slave_0: entered allmulticast mode [ 23.728347][ T3308] bridge_slave_0: entered promiscuous mode [ 23.735366][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.749056][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.756083][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.763246][ T3309] bridge_slave_0: entered allmulticast mode [ 23.769627][ T3309] bridge_slave_0: entered promiscuous mode [ 23.776081][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.783216][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.790308][ T3309] bridge_slave_1: entered allmulticast mode [ 23.796636][ T3309] bridge_slave_1: entered promiscuous mode [ 23.807419][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.814479][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.821583][ T3308] bridge_slave_1: entered allmulticast mode [ 23.827758][ T3308] bridge_slave_1: entered promiscuous mode [ 23.839427][ T3303] team0: Port device team_slave_0 added [ 23.850950][ T3300] hsr_slave_0: entered promiscuous mode [ 23.856894][ T3300] hsr_slave_1: entered promiscuous mode [ 23.882406][ T3303] team0: Port device team_slave_1 added [ 23.905434][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.916031][ T3299] hsr_slave_0: entered promiscuous mode [ 23.921921][ T3299] hsr_slave_1: entered promiscuous mode [ 23.927579][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 23.933312][ T3299] Cannot create hsr debugfs directory [ 23.943392][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.950427][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.976325][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.988156][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.000055][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.014224][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.021174][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.047070][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.058830][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.081314][ T3308] team0: Port device team_slave_0 added [ 24.107762][ T3308] team0: Port device team_slave_1 added [ 24.121269][ T3309] team0: Port device team_slave_0 added [ 24.136001][ T3309] team0: Port device team_slave_1 added [ 24.159252][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.166168][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.192054][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.213244][ T3303] hsr_slave_0: entered promiscuous mode [ 24.219228][ T3303] hsr_slave_1: entered promiscuous mode [ 24.224967][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 24.230688][ T3303] Cannot create hsr debugfs directory [ 24.236282][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.243304][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.269180][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.286680][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.293645][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.319569][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.351615][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.358568][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.384520][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.430484][ T3308] hsr_slave_0: entered promiscuous mode [ 24.436419][ T3308] hsr_slave_1: entered promiscuous mode [ 24.442206][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 24.447905][ T3308] Cannot create hsr debugfs directory [ 24.461827][ T3309] hsr_slave_0: entered promiscuous mode [ 24.467785][ T3309] hsr_slave_1: entered promiscuous mode [ 24.473713][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 24.479436][ T3309] Cannot create hsr debugfs directory [ 24.535137][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.551732][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.560206][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.580892][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.627685][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.636000][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.648819][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.657213][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.684377][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.699428][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.713047][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.721522][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.750444][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.769096][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.781088][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.791679][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.806617][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.834089][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.849018][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.855933][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.864672][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.874390][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.885704][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.898325][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.905395][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.916938][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923984][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.934325][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.954488][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.961602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.970536][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.977598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.024354][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.053468][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.074035][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.091795][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.105532][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.118766][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.125867][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.134437][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.141504][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.155801][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.164329][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.171375][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.179923][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.186936][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.200192][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.211075][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.218143][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.226739][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.233781][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.267262][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.282499][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.364017][ T3300] veth0_vlan: entered promiscuous mode [ 25.378568][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.396998][ T3300] veth1_vlan: entered promiscuous mode [ 25.439827][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.453513][ T3300] veth0_macvtap: entered promiscuous mode [ 25.465320][ T3300] veth1_macvtap: entered promiscuous mode [ 25.480354][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.487720][ T3299] veth0_vlan: entered promiscuous mode [ 25.500323][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.516547][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.524523][ T3299] veth1_vlan: entered promiscuous mode [ 25.538286][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.546980][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.561148][ T3299] veth0_macvtap: entered promiscuous mode [ 25.582295][ T3299] veth1_macvtap: entered promiscuous mode [ 25.596520][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.620199][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.631376][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.651055][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.653145][ T3308] veth0_vlan: entered promiscuous mode [ 25.674738][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.697218][ T3308] veth1_vlan: entered promiscuous mode [ 25.705860][ T110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.726720][ T3309] veth0_vlan: entered promiscuous mode [ 25.728153][ T3470] loop3: detected capacity change from 0 to 1024 [ 25.737980][ T110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.754174][ T3308] veth0_macvtap: entered promiscuous mode [ 25.754790][ T3470] ======================================================= [ 25.754790][ T3470] WARNING: The mand mount option has been deprecated and [ 25.754790][ T3470] and is ignored by this kernel. Remove the mand [ 25.754790][ T3470] option from the mount to silence this warning. [ 25.754790][ T3470] ======================================================= [ 25.761999][ T3309] veth1_vlan: entered promiscuous mode [ 25.802248][ T110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.813286][ T3303] veth0_vlan: entered promiscuous mode [ 25.820469][ T110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.830939][ T3470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.843332][ T3470] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.854726][ T3303] veth1_vlan: entered promiscuous mode [ 25.866120][ T3309] veth0_macvtap: entered promiscuous mode [ 25.873338][ T3308] veth1_macvtap: entered promiscuous mode [ 25.888857][ T3470] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 13) [ 25.893217][ T3303] veth0_macvtap: entered promiscuous mode [ 25.917317][ T3309] veth1_macvtap: entered promiscuous mode [ 25.927687][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.937185][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.947271][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.959343][ T3303] veth1_macvtap: entered promiscuous mode [ 25.966043][ T3470] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 25.978423][ T3470] EXT4-fs (loop3): This should not happen!! Data will be lost [ 25.978423][ T3470] [ 25.983138][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.995368][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.014057][ T3478] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.041058][ T3469] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.068006][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.094148][ T3469] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.110955][ T3478] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.145773][ T3478] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.185517][ T3478] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.188248][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.208133][ T3469] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.211435][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.224068][ T3469] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.235367][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.274449][ T3469] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.453448][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.594238][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.598748][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 26.598760][ T29] audit: type=1400 audit(1754391247.432:125): avc: denied { open } for pid=3487 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.604142][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.609044][ T29] audit: type=1400 audit(1754391247.432:126): avc: denied { kernel } for pid=3487 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.701198][ T1687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.701929][ T29] audit: type=1400 audit(1754391247.532:127): avc: denied { map_read map_write } for pid=3487 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.738348][ T29] audit: type=1400 audit(1754391247.572:128): avc: denied { prog_run } for pid=3487 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.772419][ T29] audit: type=1400 audit(1754391247.612:129): avc: denied { cpu } for pid=3492 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.794217][ T29] audit: type=1400 audit(1754391247.612:130): avc: denied { create } for pid=3492 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.813352][ T29] audit: type=1400 audit(1754391247.612:131): avc: denied { setopt } for pid=3492 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.832676][ T1687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.862035][ T1687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.871487][ T1687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.880606][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.890932][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.910567][ T3498] loop4: detected capacity change from 0 to 512 [ 26.922745][ T29] audit: type=1400 audit(1754391247.762:132): avc: denied { allowed } for pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 26.953495][ T3498] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.966620][ T3498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 26.967322][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.987761][ T29] audit: type=1400 audit(1754391247.822:133): avc: denied { create } for pid=3499 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.008629][ T29] audit: type=1400 audit(1754391247.822:134): avc: denied { create } for pid=3499 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.037354][ T3498] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5: corrupted in-inode xattr: bad e_name length [ 27.051801][ T3498] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 27.065976][ T3498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.130291][ C1] hrtimer: interrupt took 37620 ns [ 27.201601][ T3513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 27.220476][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 27.388339][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.407204][ T3519] veth1_macvtap: left promiscuous mode [ 27.420116][ T3519] macsec0: entered allmulticast mode [ 27.431104][ T3521] loop4: detected capacity change from 0 to 128 [ 27.470045][ T3523] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.554659][ T3528] syz.4.15: attempt to access beyond end of device [ 27.554659][ T3528] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 27.597131][ T3528] syz.4.15: attempt to access beyond end of device [ 27.597131][ T3528] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 27.612544][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.619726][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.631655][ T3528] syz.4.15: attempt to access beyond end of device [ 27.631655][ T3528] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 27.658914][ T3528] syz.4.15: attempt to access beyond end of device [ 27.658914][ T3528] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 27.688880][ T3528] syz.4.15: attempt to access beyond end of device [ 27.688880][ T3528] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 27.713631][ T3528] syz.4.15: attempt to access beyond end of device [ 27.713631][ T3528] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 27.741245][ T3528] syz.4.15: attempt to access beyond end of device [ 27.741245][ T3528] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 27.760438][ T3528] syz.4.15: attempt to access beyond end of device [ 27.760438][ T3528] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 27.782778][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 27.806176][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 27.856986][ T3541] loop3: detected capacity change from 0 to 128 [ 27.904789][ T110] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.933101][ T110] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.956765][ T110] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.985924][ T110] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.018079][ T3534] syz.2.21 (3534) used greatest stack depth: 10752 bytes left [ 28.070142][ T3554] bond_slave_1: entered promiscuous mode [ 28.107748][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 28.140143][ T124] kworker/u8:5: attempt to access beyond end of device [ 28.140143][ T124] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 28.154958][ T3556] loop4: detected capacity change from 0 to 8192 [ 28.155171][ T3554] bond0: (slave bond_slave_1): Releasing backup interface [ 28.165779][ T124] kworker/u8:5: attempt to access beyond end of device [ 28.165779][ T124] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 28.184085][ T3554] bond_slave_1 (unregistering): left promiscuous mode [ 28.320110][ T3567] random: crng reseeded on system resumption [ 28.453588][ T3574] loop1: detected capacity change from 0 to 1024 [ 28.463389][ T3574] EXT4-fs: Ignoring removed orlov option [ 28.480622][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.525129][ T3579] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 28.536282][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.567083][ T3581] loop1: detected capacity change from 0 to 1024 [ 28.577480][ T3581] EXT4-fs: Ignoring removed orlov option [ 28.589559][ T3581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.623038][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.745801][ T3592] IPv6: Can't replace route, no match found [ 28.938705][ T3596] @: renamed from vlan0 [ 28.999927][ T3601] bridge_slave_0: left allmulticast mode [ 29.005770][ T3601] bridge_slave_0: left promiscuous mode [ 29.011682][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.020104][ T3601] bridge_slave_1: left allmulticast mode [ 29.025749][ T3601] bridge_slave_1: left promiscuous mode [ 29.031447][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.041893][ T3601] bond0: (slave bond_slave_0): Releasing backup interface [ 29.051003][ T3601] bond0: (slave bond_slave_1): Releasing backup interface [ 29.061313][ T3601] team0: Port device team_slave_0 removed [ 29.067812][ T3601] team0: Port device team_slave_1 removed [ 29.075018][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.083874][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.239630][ T3605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 29.249546][ T3605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 29.304287][ T3613] loop4: detected capacity change from 0 to 128 [ 29.330253][ T3614] netlink: 14 bytes leftover after parsing attributes in process `syz.2.48'. [ 29.766556][ T3628] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 29.766556][ T3628] program syz.1.55 not setting count and/or reply_len properly [ 29.832487][ T3635] serio: Serial port ptm0 [ 29.979845][ T3644] loop1: detected capacity change from 0 to 2048 [ 30.001687][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.029575][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.123629][ T3661] pim6reg: entered allmulticast mode [ 30.380163][ T3671] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.66'. [ 30.390005][ T3669] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.66'. [ 30.555316][ T3677] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 30.578343][ T3677] team0: Port device dummy0 added [ 30.585172][ T3677] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 30.595302][ T3677] team0: Port device dummy0 removed [ 30.602915][ T3677] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 30.623389][ T3677] syz.2.68 (3677) used greatest stack depth: 10472 bytes left [ 30.829161][ T3741] vlan2: entered allmulticast mode [ 31.603863][ T3753] loop0: detected capacity change from 0 to 512 [ 31.642668][ T3753] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 31.686114][ T3753] EXT4-fs (loop0): orphan cleanup on readonly fs [ 31.854219][ T3753] EXT4-fs (loop0): 1 orphan inode deleted [ 31.929021][ T3700] __quota_error: 171 callbacks suppressed [ 31.929035][ T3700] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 31.944632][ T3700] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 31.961026][ T3753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.043119][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 32.063629][ T29] audit: type=1400 audit(1754391252.902:306): avc: denied { bind } for pid=3767 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.118595][ T29] audit: type=1400 audit(1754391252.922:307): avc: denied { write } for pid=3767 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.186167][ T29] audit: type=1400 audit(1754391253.022:308): avc: denied { create } for pid=3771 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.242062][ T29] audit: type=1400 audit(1754391253.042:309): avc: denied { bind } for pid=3771 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.261096][ T29] audit: type=1400 audit(1754391253.052:310): avc: denied { write } for pid=3771 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.318084][ T29] audit: type=1400 audit(1754391253.142:311): avc: denied { shutdown } for pid=3773 comm="syz.4.80" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.339729][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.405166][ T29] audit: type=1400 audit(1754391253.242:312): avc: denied { write } for pid=3778 comm="syz.1.82" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.441846][ T29] audit: type=1400 audit(1754391253.282:313): avc: denied { read write } for pid=3778 comm="syz.1.82" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 32.465838][ T29] audit: type=1400 audit(1754391253.282:314): avc: denied { open } for pid=3778 comm="syz.1.82" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 32.568393][ T3795] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.484763][ T3963] loop0: detected capacity change from 0 to 1024 [ 33.502985][ T3961] loop4: detected capacity change from 0 to 1024 [ 33.516702][ T3961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 33.526137][ T3963] EXT4-fs: Invalid want_extra_isize 3 [ 33.532386][ T3961] System zones: 0-1, 3-36 [ 33.551029][ T3967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 33.568057][ T3969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 33.577631][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.698359][ T3975] loop0: detected capacity change from 0 to 128 [ 33.732395][ T3975] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.745792][ T3975] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.801740][ T3982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 33.849111][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.865456][ T3982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.892054][ T3984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.914399][ T3984] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 33.953890][ T3984] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 34.003517][ T3982] macvlan2: entered promiscuous mode [ 34.008879][ T3982] macvlan2: entered allmulticast mode [ 34.015572][ T3982] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 34.025418][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.126810][ T3993] loop4: detected capacity change from 0 to 128 [ 34.171100][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 34.364294][ T4015] serio: Serial port ptm0 [ 34.385316][ T4017] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 34.487521][ T4023] 9pnet: p9_errstr2errno: server reported unknown error [ 34.625422][ T4029] loop1: detected capacity change from 0 to 512 [ 34.649970][ T4029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.689361][ T4029] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.709262][ T4029] EXT4-fs (loop1): 1 truncate cleaned up [ 34.725055][ T4029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.753691][ T4029] EXT4-fs (loop1): shut down requested (0) [ 35.035579][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.108898][ T4039] loop1: detected capacity change from 0 to 128 [ 35.277777][ T4053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.285036][ T4053] IPv6: NLM_F_CREATE should be set when creating new route [ 35.340754][ T4055] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 35.443810][ T4050] mmap: syz.2.130 (4050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.865220][ T4079] capability: warning: `syz.4.141' uses deprecated v2 capabilities in a way that may be insecure [ 35.951829][ T4086] loop3: detected capacity change from 0 to 128 [ 35.966057][ T4086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.986841][ T4086] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.088127][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.306361][ T4095] loop0: detected capacity change from 0 to 128 [ 36.314270][ T4095] msdos: Bad value for 'fmask' [ 36.562988][ T4097] loop3: detected capacity change from 0 to 2048 [ 36.792002][ T4108] bridge1: entered promiscuous mode [ 36.812277][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 36.863087][ T4110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.102360][ T4110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.117604][ T4110] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 37.143092][ T4110] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 37.168351][ T4114] macvlan2: entered promiscuous mode [ 37.173688][ T4114] macvlan2: entered allmulticast mode [ 37.179493][ T4114] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 37.203962][ T4097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.384181][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 37.384193][ T29] audit: type=1326 audit(1754391258.222:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.448013][ T29] audit: type=1326 audit(1754391258.222:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.471297][ T29] audit: type=1326 audit(1754391258.262:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.494603][ T29] audit: type=1326 audit(1754391258.262:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.517991][ T29] audit: type=1326 audit(1754391258.262:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.541221][ T29] audit: type=1326 audit(1754391258.262:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.564537][ T29] audit: type=1326 audit(1754391258.262:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.588012][ T29] audit: type=1326 audit(1754391258.262:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.611284][ T29] audit: type=1326 audit(1754391258.262:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.634966][ T29] audit: type=1326 audit(1754391258.262:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 37.663796][ T4125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 37.694680][ T4125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 37.707242][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.758810][ T4125] bond2 (unregistering): Released all slaves [ 37.821101][ T4136] Zero length message leads to an empty skb [ 37.932515][ T4154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 38.048585][ T4167] lo speed is unknown, defaulting to 1000 [ 38.057639][ T4167] lo speed is unknown, defaulting to 1000 [ 38.065138][ T4161] loop0: detected capacity change from 0 to 512 [ 38.082344][ T4167] lo speed is unknown, defaulting to 1000 [ 38.092774][ T4167] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.100929][ T4161] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.111207][ T4167] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.138778][ T4167] lo speed is unknown, defaulting to 1000 [ 38.148819][ T4167] lo speed is unknown, defaulting to 1000 [ 38.154181][ T4161] EXT4-fs (loop0): 1 truncate cleaned up [ 38.160701][ T4161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.162528][ T4167] lo speed is unknown, defaulting to 1000 [ 38.181751][ T4167] lo speed is unknown, defaulting to 1000 [ 38.187888][ T4167] lo speed is unknown, defaulting to 1000 [ 38.188938][ T4161] EXT4-fs (loop0): shut down requested (0) [ 38.200680][ T4167] lo speed is unknown, defaulting to 1000 [ 38.281842][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.488754][ T4194] tipc: Started in network mode [ 38.493642][ T4194] tipc: Node identity 322db98e09e7, cluster identity 4711 [ 38.500871][ T4194] tipc: Enabled bearer , priority 0 [ 38.529070][ T4191] tipc: Resetting bearer [ 38.553098][ T4191] tipc: Disabling bearer [ 38.608611][ T4197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 38.757597][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.764942][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.803202][ T4204] bridge_slave_1: left allmulticast mode [ 38.808898][ T4204] bridge_slave_1: left promiscuous mode [ 38.814662][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.850401][ T4204] bridge_slave_0: left allmulticast mode [ 38.856100][ T4204] bridge_slave_0: left promiscuous mode [ 38.861822][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.969494][ T4211] lo speed is unknown, defaulting to 1000 [ 39.152698][ T4222] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 39.172819][ T4222] team0: Device hsr_slave_0 failed to register rx_handler [ 39.214821][ T4222] loop1: detected capacity change from 0 to 512 [ 39.259462][ T4222] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 39.298932][ T4222] EXT4-fs (loop1): 1 truncate cleaned up [ 39.309184][ T4233] loop3: detected capacity change from 0 to 512 [ 39.318135][ T4233] EXT4-fs: Ignoring removed nobh option [ 39.322966][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.361502][ T4233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.193: corrupted inode contents [ 39.393695][ T4233] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.193: mark_inode_dirty error [ 39.415689][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.430703][ T4233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.193: corrupted inode contents [ 39.461335][ T4233] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.193: mark_inode_dirty error [ 39.494831][ T4233] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.193: Failed to acquire dquot type 0 [ 39.500783][ T4242] loop4: detected capacity change from 0 to 1024 [ 39.508522][ T4233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.193: corrupted inode contents [ 39.525387][ T4233] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.193: mark_inode_dirty error [ 39.536956][ T4233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.193: corrupted inode contents [ 39.549109][ T4242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.564171][ T4242] ext4: Unknown parameter 'mask' [ 39.570505][ T4233] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.193: mark_inode_dirty error [ 39.583898][ T4233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.193: corrupted inode contents [ 39.598790][ T4233] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 39.613477][ T4242] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 39.639263][ T4242] bridge0: entered promiscuous mode [ 39.648319][ T4242] bridge0: port 3(macvlan2) entered blocking state [ 39.654838][ T4242] bridge0: port 3(macvlan2) entered disabled state [ 39.671562][ T4233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.193: corrupted inode contents [ 39.687250][ T4242] macvlan2: entered allmulticast mode [ 39.692697][ T4242] bridge0: entered allmulticast mode [ 39.701704][ T4233] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.193: mark_inode_dirty error [ 39.713208][ T4233] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 39.725432][ T4242] macvlan2: left allmulticast mode [ 39.730640][ T4242] bridge0: left allmulticast mode [ 39.736127][ T4242] bridge0: left promiscuous mode [ 39.743269][ T4233] EXT4-fs (loop3): 1 truncate cleaned up [ 39.754613][ T4233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.773770][ T4233] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.848451][ T4233] syz.3.193 (4233) used greatest stack depth: 9760 bytes left [ 39.887786][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.900355][ T4251] loop4: detected capacity change from 0 to 512 [ 39.911617][ T4251] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.950289][ T4251] EXT4-fs (loop4): 1 truncate cleaned up [ 39.981193][ T4258] wg2: entered promiscuous mode [ 39.986080][ T4258] wg2: entered allmulticast mode [ 40.002596][ T4251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.070176][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.090338][ T4262] vlan2: entered allmulticast mode [ 40.264105][ T4278] veth0_vlan: entered allmulticast mode [ 40.378043][ T4286] wg2: entered promiscuous mode [ 40.382910][ T4286] wg2: entered allmulticast mode [ 40.461778][ T4296] pim6reg1: entered promiscuous mode [ 40.467137][ T4296] pim6reg1: entered allmulticast mode [ 40.548163][ T4307] loop3: detected capacity change from 0 to 512 [ 40.600789][ T4307] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 40.616155][ T4307] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.622617][ T4307] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.224: Bad quota inum: 4294967295, type: 0 [ 40.667298][ T4307] EXT4-fs (loop3): Remounting filesystem read-only [ 40.673883][ T4307] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=4294967295). Please run e2fsck to fix. [ 40.689304][ T4307] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 40.696423][ T4307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.823680][ T4325] loop1: detected capacity change from 0 to 1024 [ 40.854910][ T4327] loop0: detected capacity change from 0 to 512 [ 40.868190][ T4327] EXT4-fs: Ignoring removed nobh option [ 40.881723][ T4325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.896196][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.233: corrupted inode contents [ 40.918217][ T4325] ext4: Unknown parameter 'mask' [ 40.923959][ T4327] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.233: mark_inode_dirty error [ 40.940818][ T4325] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 40.953292][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.233: corrupted inode contents [ 40.966202][ T4327] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.233: mark_inode_dirty error [ 40.979244][ T4325] bridge0: entered promiscuous mode [ 40.988583][ T4325] bridge0: port 3(macvlan2) entered blocking state [ 40.995102][ T4325] bridge0: port 3(macvlan2) entered disabled state [ 41.025073][ T4325] macvlan2: entered allmulticast mode [ 41.030486][ T4325] bridge0: entered allmulticast mode [ 41.046252][ T4325] macvlan2: left allmulticast mode [ 41.051435][ T4325] bridge0: left allmulticast mode [ 41.056959][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.068277][ T4325] bridge0: left promiscuous mode [ 41.078761][ T4327] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.233: Failed to acquire dquot type 0 [ 41.109970][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.233: corrupted inode contents [ 41.122675][ T4327] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.233: mark_inode_dirty error [ 41.134636][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.233: corrupted inode contents [ 41.147335][ T4327] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.233: mark_inode_dirty error [ 41.159507][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.233: corrupted inode contents [ 41.171485][ T4327] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 41.182294][ T4327] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.233: corrupted inode contents [ 41.194228][ T4327] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.233: mark_inode_dirty error [ 41.205825][ T4327] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 41.215424][ T4327] EXT4-fs (loop0): 1 truncate cleaned up [ 41.222124][ T4327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.235118][ T4327] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.280675][ T4346] gtp0: entered promiscuous mode [ 41.353431][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.366417][ T4351] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.375365][ T4351] vhci_hcd: invalid port number 253 [ 41.380628][ T4351] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 41.583420][ T4369] tipc: Started in network mode [ 41.588403][ T4369] tipc: Node identity ac14140f, cluster identity 4711 [ 41.626160][ T4369] tipc: New replicast peer: 255.255.255.83 [ 41.632025][ T4369] tipc: Enabled bearer , priority 10 [ 41.771331][ T4373] lo speed is unknown, defaulting to 1000 [ 42.066136][ T4396] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 42.076748][ T4396] team0: Port device dummy0 added [ 42.086819][ T4396] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 42.115456][ T4396] team0: Port device dummy0 removed [ 42.130387][ T4396] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.325397][ T4394] loop4: detected capacity change from 0 to 128 [ 42.326210][ T4392] lo speed is unknown, defaulting to 1000 [ 42.355466][ T4394] msdos: Bad value for 'fmask' [ 42.440904][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 42.440917][ T29] audit: type=1400 audit(1754391263.282:728): avc: denied { mounton } for pid=4407 comm="syz.3.262" path="/35/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.526482][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 42.535298][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 42.561359][ T29] audit: type=1326 audit(1754391263.402:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.585952][ T29] audit: type=1326 audit(1754391263.412:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.609281][ T29] audit: type=1326 audit(1754391263.412:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.632481][ T29] audit: type=1326 audit(1754391263.412:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.655706][ T29] audit: type=1326 audit(1754391263.412:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.679056][ T3406] tipc: Node number set to 2886997007 [ 42.705516][ T29] audit: type=1326 audit(1754391263.522:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.728773][ T29] audit: type=1326 audit(1754391263.542:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.752079][ T29] audit: type=1326 audit(1754391263.542:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.775363][ T29] audit: type=1326 audit(1754391263.542:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 42.800936][ T4425] loop1: detected capacity change from 0 to 512 [ 42.807577][ T4425] journal_path: Non-blockdev passed as './bus' [ 42.808457][ T4427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'. [ 42.813807][ T4425] EXT4-fs: error: could not find journal device path [ 42.829446][ T4427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'. [ 42.839611][ T4427] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 42.886367][ T4431] netlink: 14 bytes leftover after parsing attributes in process `syz.1.271'. [ 42.896119][ T4431] hsr_slave_0: left promiscuous mode [ 42.902234][ T4431] hsr_slave_1: left promiscuous mode [ 42.917085][ T4433] netlink: 96 bytes leftover after parsing attributes in process `syz.3.272'. [ 43.043741][ T4445] IPv6: sit1: Disabled Multicast RS [ 43.217408][ T4442] loop1: detected capacity change from 0 to 128 [ 43.252622][ T4442] msdos: Bad value for 'fmask' [ 43.343414][ T4461] pim6reg1: entered promiscuous mode [ 43.348738][ T4461] pim6reg1: entered allmulticast mode [ 43.356246][ T4462] loop4: detected capacity change from 0 to 512 [ 43.378433][ T4462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.405661][ T4458] infiniband syz2: set down [ 43.410195][ T4458] infiniband syz2: added syzkaller0 [ 43.821426][ T4458] RDS/IB: syz2: added [ 43.833067][ T4458] smc: adding ib device syz2 with port count 1 [ 43.839385][ T4458] smc: ib device syz2 port 1 has pnetid [ 43.857684][ T4462] IPv6: Can't replace route, no match found [ 43.910405][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 43.919229][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 43.989002][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.008741][ T4478] wireguard0: entered promiscuous mode [ 44.016018][ T3717] smc: removing ib device syz2 [ 44.056310][ T4481] syz.4.289 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.130199][ T4483] loop0: detected capacity change from 0 to 512 [ 44.163583][ T4486] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 44.179771][ T4483] EXT4-fs (loop0): too many log groups per flexible block group [ 44.184122][ T4486] SELinux: failed to load policy [ 44.187493][ T4483] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 44.199852][ T4486] : renamed from bond0 (while UP) [ 44.227845][ T4483] EXT4-fs (loop0): mount failed [ 44.333131][ T4496] loop3: detected capacity change from 0 to 164 [ 44.431061][ T2991] udevd[2991]: worker [3288] terminated by signal 33 (Unknown signal 33) [ 44.449229][ T2991] udevd[2991]: worker [3288] failed while handling '/devices/virtual/block/loop3' [ 44.450182][ T4496] process 'syz.3.293' launched './file0' with NULL argv: empty string added [ 44.509305][ T4502] netlink: 'syz.0.296': attribute type 39 has an invalid length. [ 44.563422][ T4496] bio_check_eod: 109 callbacks suppressed [ 44.563437][ T4496] syz.3.293: attempt to access beyond end of device [ 44.563437][ T4496] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.607090][ T4496] syz.3.293: attempt to access beyond end of device [ 44.607090][ T4496] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.780403][ T4522] loop0: detected capacity change from 0 to 512 [ 44.927706][ T4527] loop4: detected capacity change from 0 to 32768 [ 45.015318][ T4522] lo speed is unknown, defaulting to 1000 [ 45.045105][ T4522] loop0: detected capacity change from 0 to 512 [ 45.056453][ T4522] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.067350][ T4522] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.303: Failed to acquire dquot type 1 [ 45.081992][ T4522] EXT4-fs (loop0): 1 truncate cleaned up [ 45.088362][ T4522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.199796][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.277604][ T4541] lo speed is unknown, defaulting to 1000 [ 45.403575][ T4544] loop0: detected capacity change from 0 to 2048 [ 45.434747][ T4544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.842105][ T4552] bridge_slave_0: left allmulticast mode [ 45.847782][ T4552] bridge_slave_0: left promiscuous mode [ 45.853579][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.879600][ T4552] bridge_slave_1: left allmulticast mode [ 45.885267][ T4552] bridge_slave_1: left promiscuous mode [ 45.891014][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.911767][ T4552] : (slave bond_slave_0): Releasing backup interface [ 45.922013][ T4552] : (slave bond_slave_1): Releasing backup interface [ 45.946095][ T4552] team0: Port device team_slave_0 removed [ 45.962376][ T4552] team0: Port device team_slave_1 removed [ 45.984031][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.991433][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.015425][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.022833][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.126953][ T4563] lo speed is unknown, defaulting to 1000 [ 46.146790][ T4566] IPv4: Oversized IP packet from 127.202.26.0 [ 46.177829][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 46.201527][ T4568] hsr_slave_0: left promiscuous mode [ 46.222034][ T4568] hsr_slave_1: left promiscuous mode [ 46.261141][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.342679][ T4576] tipc: Started in network mode [ 46.347560][ T4576] tipc: Node identity ac14140f, cluster identity 4711 [ 46.378064][ T4576] tipc: New replicast peer: 255.255.255.83 [ 46.383941][ T4576] tipc: Enabled bearer , priority 10 [ 46.761018][ T4635] loop1: detected capacity change from 0 to 512 [ 46.773584][ T4635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 46.788188][ T4635] System zones: 1-12 [ 46.792525][ T4635] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.326: invalid block [ 46.804501][ T4635] EXT4-fs (loop1): Remounting filesystem read-only [ 46.811942][ T4635] EXT4-fs (loop1): 1 truncate cleaned up [ 46.818536][ T4635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.883220][ T4653] sctp: [Deprecated]: syz.1.326 (pid 4653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.883220][ T4653] Use struct sctp_sack_info instead [ 47.083305][ T4691] loop2: detected capacity change from 0 to 2048 [ 47.102660][ T4691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.106977][ T4730] siw: device registration error -23 [ 48.125050][ T3388] tipc: Node number set to 2886997007 [ 48.131496][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.243657][ T4732] loop1: detected capacity change from 0 to 8192 [ 48.259948][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 48.259959][ T29] audit: type=1326 audit(1754391269.102:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.299196][ T29] audit: type=1326 audit(1754391269.132:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.322701][ T29] audit: type=1326 audit(1754391269.132:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.330112][ T4732] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 48.346140][ T29] audit: type=1326 audit(1754391269.132:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.374630][ T29] audit: type=1326 audit(1754391269.132:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.384704][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.421934][ T29] audit: type=1326 audit(1754391269.172:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.445112][ T29] audit: type=1326 audit(1754391269.172:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.468368][ T29] audit: type=1326 audit(1754391269.172:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.491945][ T29] audit: type=1326 audit(1754391269.172:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.515219][ T29] audit: type=1326 audit(1754391269.172:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 48.546044][ T4744] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.339'. [ 48.597337][ T4750] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.340'. [ 48.718799][ T4750] loop1: detected capacity change from 0 to 8192 [ 48.880618][ T4766] loop1: detected capacity change from 0 to 8192 [ 48.963171][ T4777] loop4: detected capacity change from 0 to 512 [ 48.970125][ T4777] EXT4-fs: Ignoring removed orlov option [ 48.978778][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.350'. [ 48.987697][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.350'. [ 49.014760][ T4781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.027159][ T4777] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.351: Attempting to read directory block (0) that is past i_size (256) [ 49.041731][ T4777] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 49.059271][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.102896][ T4781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.115332][ T4777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.192969][ T4781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.227710][ T4796] tipc: New replicast peer: 255.255.255.83 [ 49.233599][ T4796] tipc: Enabled bearer , priority 10 [ 49.250759][ T4786] can0: slcan on ttyS3. [ 49.271816][ T4781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.298078][ T4786] can0 (unregistered): slcan off ttyS3. [ 49.326841][ T3691] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.339515][ T3700] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.351134][ T3700] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.369671][ T3700] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.387444][ T4803] tipc: Started in network mode [ 49.392420][ T4803] tipc: Node identity 4206817cef8d, cluster identity 4711 [ 49.399646][ T4803] tipc: Enabled bearer , priority 0 [ 49.409886][ T4803] tipc: Disabling bearer [ 49.475629][ T4809] loop1: detected capacity change from 0 to 512 [ 49.499623][ T4809] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 49.507777][ T4809] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.514125][ T4809] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.364: Bad quota inum: 4294967295, type: 0 [ 49.526781][ T4809] EXT4-fs (loop1): Remounting filesystem read-only [ 49.533354][ T4809] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=4294967295). Please run e2fsck to fix. [ 49.548992][ T4809] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 49.611497][ T4809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.841551][ T4824] loop2: detected capacity change from 0 to 128 [ 49.860570][ T4824] syz.2.369: attempt to access beyond end of device [ 49.860570][ T4824] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 49.896722][ T4824] syz.2.369: attempt to access beyond end of device [ 49.896722][ T4824] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 49.923720][ T4824] syz.2.369: attempt to access beyond end of device [ 49.923720][ T4824] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 49.947577][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 49.968280][ T4824] syz.2.369: attempt to access beyond end of device [ 49.968280][ T4824] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 49.991277][ T4824] syz.2.369: attempt to access beyond end of device [ 49.991277][ T4824] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 50.013252][ T4824] syz.2.369: attempt to access beyond end of device [ 50.013252][ T4824] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 50.045906][ T4824] syz.2.369: attempt to access beyond end of device [ 50.045906][ T4824] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 50.071849][ T4824] syz.2.369: attempt to access beyond end of device [ 50.071849][ T4824] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 50.086375][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.099621][ T4824] syz.2.369: attempt to access beyond end of device [ 50.099621][ T4824] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 50.153211][ T4831] loop4: detected capacity change from 0 to 512 [ 50.180831][ T4831] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.212688][ T4836] loop1: detected capacity change from 0 to 1024 [ 50.220491][ T4831] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.233405][ T4831] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.372: iget: bad i_size value: 38620345925642 [ 50.247288][ T4836] EXT4-fs: Ignoring removed orlov option [ 50.254979][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.267649][ T4839] netlink: 'syz.2.375': attribute type 3 has an invalid length. [ 50.271352][ T4831] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.372: couldn't read orphan inode 15 (err -117) [ 50.275560][ T4840] tipc: Enabled bearer , priority 0 [ 50.290106][ T4831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.318924][ T4836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 50.327794][ T4836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.374'. [ 50.336699][ T4836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 50.346663][ T4836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.374'. [ 50.374640][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.387491][ T4833] tipc: Resetting bearer [ 50.393721][ T4845] loop0: detected capacity change from 0 to 512 [ 50.413939][ T4845] EXT4-fs: Ignoring removed bh option [ 50.419369][ T4845] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.432732][ T4833] tipc: Disabling bearer [ 50.438560][ T4845] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.447286][ T4845] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 50.458351][ T4845] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.480146][ T4845] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.495306][ T4845] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.377: Failed to acquire dquot type 1 [ 50.507586][ T4845] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.377: Invalid block bitmap block 0 in block_group 0 [ 50.552902][ T4845] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.377: Invalid block bitmap block 0 in block_group 0 [ 50.597107][ T4845] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.377: Invalid block bitmap block 0 in block_group 0 [ 50.623581][ T4845] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.377: Failed to acquire dquot type 1 [ 50.641054][ T4845] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.377: Failed to acquire dquot type 1 [ 50.667749][ T4845] EXT4-fs (loop0): 1 orphan inode deleted [ 50.675358][ T4845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.725951][ T4845] SELinux: ebitmap: truncated map [ 50.737169][ T4845] SELinux: failed to load policy [ 50.753331][ T4845] syz.0.377 (4845) used greatest stack depth: 9072 bytes left [ 50.763818][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.787668][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.815641][ T4864] serio: Serial port ptm0 [ 50.825430][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 50.876030][ T4862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4862 comm=syz.4.384 [ 51.251176][ T4879] wg2: left promiscuous mode [ 51.255890][ T4879] wg2: left allmulticast mode [ 51.310887][ T4879] wg2: entered promiscuous mode [ 51.316097][ T4879] wg2: entered allmulticast mode [ 51.528127][ T4877] loop4: detected capacity change from 0 to 2048 [ 51.653814][ T4877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.939653][ T4892] syzkaller0: entered promiscuous mode [ 51.945158][ T4892] syzkaller0: entered allmulticast mode [ 52.056226][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.086206][ T4901] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.397'. [ 52.129338][ T4901] loop0: detected capacity change from 0 to 8192 [ 52.187779][ T4905] netlink: 7 bytes leftover after parsing attributes in process `syz.0.399'. [ 52.518293][ T4922] loop2: detected capacity change from 0 to 512 [ 52.525281][ T4922] EXT4-fs: Ignoring removed oldalloc option [ 52.541078][ T4922] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.407: Parent and EA inode have the same ino 15 [ 52.560417][ T4922] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.407: Parent and EA inode have the same ino 15 [ 52.577850][ T4922] EXT4-fs (loop2): 1 orphan inode deleted [ 52.584166][ T4922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.584699][ T4920] tipc: Enabled bearer , priority 0 [ 52.611944][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.630331][ T4919] tipc: Resetting bearer [ 52.644856][ T4919] tipc: Disabling bearer [ 52.674937][ T4939] loop2: detected capacity change from 0 to 512 [ 52.689681][ T4939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.702406][ T4939] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.734383][ T4948] ªªªªª: renamed from vlan1 (while UP) [ 52.742852][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.811255][ T4961] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 52.964463][ T4975] loop4: detected capacity change from 0 to 256 [ 52.996611][ T4979] loop4: detected capacity change from 0 to 512 [ 53.003165][ T4979] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.009124][ T4981] bridge1: entered allmulticast mode [ 53.015648][ T4979] EXT4-fs (loop4): failed to initialize system zone (-117) [ 53.023031][ T4979] EXT4-fs (loop4): mount failed [ 53.043160][ T4985] veth5: entered promiscuous mode [ 53.052254][ T4985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4985 comm=syz.2.431 [ 53.435613][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 53.435627][ T29] audit: type=1326 audit(1754391274.272:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1eaeb69 code=0x7ffc0000 [ 53.466639][ T29] audit: type=1326 audit(1754391274.272:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1eaeb69 code=0x7ffc0000 [ 53.489999][ T29] audit: type=1326 audit(1754391274.282:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe3a1eaeb69 code=0x7ffc0000 [ 53.513398][ T29] audit: type=1326 audit(1754391274.282:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1eaeb69 code=0x7ffc0000 [ 53.536726][ T29] audit: type=1326 audit(1754391274.292:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fe3a1eaeb69 code=0x7ffc0000 [ 53.560019][ T29] audit: type=1326 audit(1754391274.292:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a1eaeb69 code=0x7ffc0000 [ 53.649137][ T5010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5010 comm=syz.1.441 [ 53.824998][ T29] audit: type=1400 audit(1754391274.662:1213): avc: denied { read } for pid=5020 comm="syz.1.445" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.901906][ T29] audit: type=1400 audit(1754391274.742:1214): avc: denied { read write } for pid=5028 comm="syz.1.446" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.925469][ T29] audit: type=1400 audit(1754391274.742:1215): avc: denied { open } for pid=5028 comm="syz.1.446" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.963271][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.970586][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.030651][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.070588][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.102863][ T5025] veth0_vlan: left allmulticast mode [ 54.123941][ T29] audit: type=1326 audit(1754391274.962:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6d5eb69 code=0x7ffc0000 [ 54.124360][ T3716] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.229125][ T3716] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.238300][ T3716] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.259966][ T3716] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.270571][ T5042] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 54.292048][ T5042] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 54.324154][ T5042] veth7: entered promiscuous mode [ 54.330561][ T5042] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 54.740146][ T5057] __nla_validate_parse: 7 callbacks suppressed [ 54.740163][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.456'. [ 54.822504][ T5063] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.458'. [ 54.849548][ T5063] loop1: detected capacity change from 0 to 256 [ 54.884483][ T5057] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5057 comm=syz.3.456 [ 54.951117][ T5072] 9pnet_fd: Insufficient options for proto=fd [ 54.959531][ T5072] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 54.967338][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 54.977763][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 55.294933][ T5091] bridge0: entered allmulticast mode [ 55.387792][ T5097] sch_fq: defrate 4294967295 ignored. [ 55.448731][ T5105] netlink: 'syz.4.480': attribute type 27 has an invalid length. [ 55.483348][ T5107] usb usb1: check_ctrlrecip: process 5107 (+}[@) requesting ep 01 but needs 81 [ 55.510203][ T5107] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 55.595275][ T3701] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.614270][ T3701] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.624705][ T3701] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.634154][ T3701] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.661493][ T5117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.733161][ T5124] loop2: detected capacity change from 0 to 128 [ 55.742825][ T5117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.771851][ T5124] syz.2.486: attempt to access beyond end of device [ 55.771851][ T5124] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 55.808214][ T5117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.820504][ T3716] kworker/u8:41: attempt to access beyond end of device [ 55.820504][ T3716] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 55.866093][ T5117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.907713][ T5131] loop2: detected capacity change from 0 to 512 [ 55.920171][ T5131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.930551][ T5131] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.489: bad orphan inode 13 [ 55.941423][ T5131] ext4_test_bit(bit=12, block=18) = 1 [ 55.946829][ T5131] is_bad_inode(inode)=0 [ 55.950963][ T3716] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.951150][ T3716] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.959227][ T5131] NEXT_ORPHAN(inode)=2130706432 [ 55.972222][ T5131] max_ino=32 [ 55.975411][ T5131] i_nlink=1 [ 55.978950][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.014486][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.029117][ T5134] tipc: Enabled bearer , priority 0 [ 56.043714][ T5133] tipc: Resetting bearer [ 56.070207][ T5133] tipc: Disabling bearer [ 56.083594][ T3716] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.101421][ T3716] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.171352][ T5143] : renamed from erspan0 [ 56.178740][ T5144] loop1: detected capacity change from 0 to 512 [ 56.185328][ T5144] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.193773][ T5140] lo speed is unknown, defaulting to 1000 [ 56.206592][ T5144] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 56.226160][ T5144] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.238122][ T5144] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.254173][ T5144] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.493: Invalid block bitmap block 0 in block_group 0 [ 56.294938][ T5144] EXT4-fs (loop1): Remounting filesystem read-only [ 56.304987][ T5144] EXT4-fs (loop1): 1 orphan inode deleted [ 56.311877][ T5144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.360945][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.427817][ T5160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.500'. [ 56.449387][ T5160] lo speed is unknown, defaulting to 1000 [ 56.548901][ T5174] loop0: detected capacity change from 0 to 1024 [ 56.555714][ T5174] EXT4-fs: Ignoring removed nobh option [ 56.561352][ T5174] EXT4-fs: Ignoring removed bh option [ 56.566065][ T5172] loop1: detected capacity change from 0 to 8192 [ 56.580494][ T5174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.580755][ T5172] netlink: 'syz.1.505': attribute type 10 has an invalid length. [ 56.615176][ T5172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.620105][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.633894][ T5172] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.916220][ T5193] netlink: 304 bytes leftover after parsing attributes in process `syz.2.513'. [ 56.925628][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 57.139110][ T5207] netlink: 'syz.0.518': attribute type 7 has an invalid length. [ 57.146744][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 57.437228][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.464910][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.553017][ T5220] geneve2: entered promiscuous mode [ 57.571753][ T3707] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.577631][ T5220] loop2: detected capacity change from 0 to 512 [ 57.594122][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 57.604549][ T5220] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.605772][ T3707] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.618351][ T5220] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.525: bg 0: block 248: padding at end of block bitmap is not set [ 57.635087][ T5220] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.525: Failed to acquire dquot type 1 [ 57.644088][ T3707] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.654967][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 57.664836][ T5220] EXT4-fs (loop2): 1 truncate cleaned up [ 57.672162][ T5220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.688453][ T3707] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.717041][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.864255][ T5239] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.880021][ T5237] netlink: 44 bytes leftover after parsing attributes in process `syz.2.534'. [ 57.891892][ T5241] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.943932][ T5239] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.979530][ T5241] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.011777][ T5239] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.060759][ T5241] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.099506][ T5239] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.140387][ T5241] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.156827][ T5255] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 58.169880][ T5255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.185864][ T5255] bond1: (slave gretap1): making interface the new active one [ 58.194048][ T5255] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 58.210819][ T5255] vlan1: entered allmulticast mode [ 58.215947][ T5255] bond1: entered allmulticast mode [ 58.221086][ T5255] gretap1: entered allmulticast mode [ 58.226801][ T5255] bond1: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 58.248235][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.258946][ T3686] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.269466][ T3686] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.284013][ T3686] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.358886][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 58.908842][ T5274] loop0: detected capacity change from 0 to 1024 [ 58.915871][ T5274] EXT4-fs: Ignoring removed bh option [ 58.929627][ T5274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.944372][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 58.944387][ T29] audit: type=1400 audit(1754391279.792:1599): avc: denied { map } for pid=5273 comm="syz.0.547" path="/119/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.972917][ T29] audit: type=1400 audit(1754391279.792:1600): avc: denied { execute } for pid=5273 comm="syz.0.547" path="/119/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.100812][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.553893][ T3715] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.564031][ T3715] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.575569][ T3686] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.586455][ T3686] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.757872][ T5302] __nla_validate_parse: 4 callbacks suppressed [ 59.757888][ T5302] netlink: 10 bytes leftover after parsing attributes in process `syz.3.555'. [ 59.773071][ T5302] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 59.777432][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.556'. [ 59.795936][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 59.809192][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 59.831527][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 59.846295][ T5306] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 59.871163][ T5309] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.558'. [ 59.896065][ T29] audit: type=1400 audit(1754391280.732:1601): avc: denied { append } for pid=5310 comm="syz.3.559" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.937450][ T5313] bridge: RTM_NEWNEIGH with invalid ether address [ 59.960026][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 59.968934][ T5315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.981044][ T5315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.065143][ T5320] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.079008][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 60.089130][ T5322] hsr_slave_0: left promiscuous mode [ 60.094748][ T5322] hsr_slave_1: left promiscuous mode [ 60.150161][ T5320] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.170124][ T5327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.566'. [ 60.179065][ T5327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.566'. [ 60.183036][ T5329] loop0: detected capacity change from 0 to 512 [ 60.188183][ T5327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.566'. [ 60.195087][ T29] audit: type=1400 audit(1754391281.012:1602): avc: denied { listen } for pid=5326 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.234838][ T5327] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.245618][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.259103][ T5329] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.349760][ T5320] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.540817][ T5320] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.030634][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.275647][ T29] audit: type=1326 audit(1754391282.112:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6d5eb69 code=0x7ffc0000 [ 61.304386][ T5338] capability: warning: `syz.2.570' uses 32-bit capabilities (legacy support in use) [ 61.327296][ T29] audit: type=1326 audit(1754391282.142:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f85c6d5eb69 code=0x7ffc0000 [ 61.350560][ T29] audit: type=1326 audit(1754391282.142:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85c6d91425 code=0x7ffc0000 [ 61.373933][ T29] audit: type=1326 audit(1754391282.142:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6d5eb69 code=0x7ffc0000 [ 61.397288][ T29] audit: type=1326 audit(1754391282.142:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6d5eb69 code=0x7ffc0000 [ 61.420612][ T29] audit: type=1326 audit(1754391282.142:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f85c6d5eb69 code=0x7ffc0000 [ 61.798358][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.806805][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.770847][ T5372] loop2: detected capacity change from 0 to 1024 [ 62.790597][ T5372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.802814][ T5372] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.826238][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.911148][ T5388] loop2: detected capacity change from 0 to 512 [ 62.918370][ T5386] lo speed is unknown, defaulting to 1000 [ 62.933961][ T5388] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.589: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 62.953029][ T5388] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.589: Bad quota inode: 3, type: 0 [ 62.964364][ T5388] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 62.980014][ T5388] EXT4-fs (loop2): mount failed [ 62.998969][ T5393] loop4: detected capacity change from 0 to 512 [ 63.009806][ T5393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.028212][ T5393] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.041329][ T5393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.043306][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.061733][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.078035][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.086768][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.784610][ T5413] lo speed is unknown, defaulting to 1000 [ 64.100976][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 64.101003][ T29] audit: type=1400 audit(1754391284.942:1684): avc: denied { create } for pid=5420 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 64.128785][ T5421] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 64.136853][ T29] audit: type=1400 audit(1754391284.972:1685): avc: denied { write } for pid=5420 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 64.171031][ T5421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.179089][ T5421] bond2: (slave bond3): making interface the new active one [ 64.186723][ T5421] bond2: (slave bond3): Enslaving as an active interface with an up link [ 64.206620][ T5421] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 64.219385][ T5421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.244857][ T29] audit: type=1326 audit(1754391285.082:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 64.281962][ T29] audit: type=1326 audit(1754391285.112:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 64.305299][ T29] audit: type=1326 audit(1754391285.112:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 64.328668][ T29] audit: type=1326 audit(1754391285.112:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 64.351958][ T29] audit: type=1326 audit(1754391285.112:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 64.375292][ T29] audit: type=1326 audit(1754391285.112:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 64.398567][ T29] audit: type=1326 audit(1754391285.112:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bee8feb69 code=0x7ffc0000 [ 64.577350][ T5430] loop1: detected capacity change from 0 to 512 [ 64.609626][ T5430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.628815][ T5430] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.693572][ T5415] 9pnet_fd: p9_fd_create_tcp (5415): problem connecting socket to 127.0.0.1 [ 64.773187][ T29] audit: type=1400 audit(1754391285.612:1693): avc: denied { ioctl } for pid=5429 comm="syz.1.602" path="/125/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.828161][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.904273][ T5440] loop0: detected capacity change from 0 to 256 [ 66.423309][ T5457] __nla_validate_parse: 1 callbacks suppressed [ 66.423324][ T5457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'. [ 66.431419][ T5454] loop2: detected capacity change from 0 to 512 [ 66.459083][ T5457] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5457 comm=syz.3.611 [ 66.479429][ T5454] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 66.487411][ T5454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 66.503696][ T5454] System zones: 1-12 [ 66.507701][ T5454] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 66.517227][ T5454] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 66.558343][ T5454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.584553][ T5454] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 3: comm syz.2.613: lblock 0 mapped to illegal pblock 3 (length 1) [ 66.607958][ T5454] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.613: error -117 reading directory block [ 66.671271][ T5464] random: crng reseeded on system resumption [ 66.702694][ T5464] lo speed is unknown, defaulting to 1000 [ 66.750809][ T5463] loop4: detected capacity change from 0 to 2048 [ 66.787325][ T5463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.837534][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.847889][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.062768][ T5495] loop4: detected capacity change from 0 to 128 [ 67.069250][ T5497] loop2: detected capacity change from 0 to 512 [ 67.076920][ T5495] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.077276][ T5497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.093571][ T5495] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.238479][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.306045][ T5505] loop4: detected capacity change from 0 to 1024 [ 67.319772][ T5505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.341328][ T5505] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 67.375455][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.452524][ T5514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 67.461440][ T5514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 67.470339][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 67.554111][ T5500] ================================================================== [ 67.562209][ T5500] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 67.570037][ T5500] [ 67.572348][ T5500] write to 0xffffea000478fc18 of 8 bytes by task 5497 on cpu 0: [ 67.579968][ T5500] __filemap_remove_folio+0x1a5/0x2a0 [ 67.585347][ T5500] folio_unmap_invalidate+0x1dd/0x360 [ 67.590755][ T5500] invalidate_inode_pages2_range+0x27c/0x3d0 [ 67.596737][ T5500] filemap_invalidate_pages+0x16d/0x1a0 [ 67.602274][ T5500] kiocb_invalidate_pages+0x6e/0x80 [ 67.607464][ T5500] __iomap_dio_rw+0x5d4/0x1250 [ 67.612223][ T5500] iomap_dio_rw+0x40/0x90 [ 67.616546][ T5500] ext4_file_write_iter+0xad9/0xf00 [ 67.621740][ T5500] iter_file_splice_write+0x5ef/0x970 [ 67.627104][ T5500] direct_splice_actor+0x153/0x2a0 [ 67.632208][ T5500] splice_direct_to_actor+0x30f/0x680 [ 67.637572][ T5500] do_splice_direct+0xda/0x150 [ 67.642327][ T5500] do_sendfile+0x380/0x650 [ 67.646736][ T5500] __x64_sys_sendfile64+0x105/0x150 [ 67.651940][ T5500] x64_sys_call+0x2bb0/0x2ff0 [ 67.656616][ T5500] do_syscall_64+0xd2/0x200 [ 67.661110][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.666999][ T5500] [ 67.669315][ T5500] read to 0xffffea000478fc18 of 8 bytes by task 5500 on cpu 1: [ 67.676841][ T5500] folio_mapping+0xa1/0x120 [ 67.681346][ T5500] folio_wait_writeback+0x43/0x140 [ 67.686460][ T5500] file_write_and_wait_range+0x20b/0x2c0 [ 67.692100][ T5500] generic_buffers_fsync_noflush+0x45/0x120 [ 67.697987][ T5500] ext4_sync_file+0x1ab/0x690 [ 67.702668][ T5500] vfs_fsync_range+0x10d/0x130 [ 67.707432][ T5500] ext4_buffered_write_iter+0x34f/0x3c0 [ 67.712987][ T5500] ext4_file_write_iter+0xdbf/0xf00 [ 67.718186][ T5500] iter_file_splice_write+0x5ef/0x970 [ 67.723549][ T5500] direct_splice_actor+0x153/0x2a0 [ 67.728649][ T5500] splice_direct_to_actor+0x30f/0x680 [ 67.734009][ T5500] do_splice_direct+0xda/0x150 [ 67.738761][ T5500] do_sendfile+0x380/0x650 [ 67.743179][ T5500] __x64_sys_sendfile64+0x105/0x150 [ 67.748377][ T5500] x64_sys_call+0x2bb0/0x2ff0 [ 67.753050][ T5500] do_syscall_64+0xd2/0x200 [ 67.757552][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.763439][ T5500] [ 67.765751][ T5500] value changed: 0xffff888106e3a998 -> 0x0000000000000000 [ 67.772839][ T5500] [ 67.775149][ T5500] Reported by Kernel Concurrency Sanitizer on: [ 67.781301][ T5500] CPU: 1 UID: 0 PID: 5500 Comm: syz.2.626 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 67.793275][ T5500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.803327][ T5500] ================================================================== [ 67.835497][ T5518] loop4: detected capacity change from 0 to 4096 [ 67.843168][ T5518] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.857759][ T5518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.012627][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.061503][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.