last executing test programs: 3.99889812s ago: executing program 2 (id=552): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.930536842s ago: executing program 2 (id=555): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r2, 0x0) 3.820309184s ago: executing program 2 (id=558): openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcff1", 0x28) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 2.889739033s ago: executing program 2 (id=566): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) 1.648684197s ago: executing program 0 (id=598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.627272898s ago: executing program 1 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) 1.581163119s ago: executing program 0 (id=600): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 1.550094269s ago: executing program 3 (id=601): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec", 0x21}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bd", 0x4}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.49925691s ago: executing program 1 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x0) 1.49871107s ago: executing program 4 (id=603): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000008}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 1.49812672s ago: executing program 1 (id=604): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000c80)=[{&(0x7f00000005c0)=""/6, 0x6}], 0x1}}], 0x48}, 0x0) 1.49699719s ago: executing program 4 (id=616): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1.401873902s ago: executing program 0 (id=605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x4db, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 1.401521732s ago: executing program 1 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.398719172s ago: executing program 3 (id=621): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x1b) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') unlinkat(r1, &(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) 1.326593173s ago: executing program 0 (id=610): socket(0x18, 0x4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 1.326289404s ago: executing program 3 (id=611): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000000)="66fe1ff6b94d79bc", 0x8, 0x7}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) 1.290842714s ago: executing program 0 (id=612): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x0, 0x16c}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) 1.203364476s ago: executing program 1 (id=614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x9, 0xc) splice(r3, 0x0, r6, 0x0, 0x80, 0x7) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.184320927s ago: executing program 4 (id=615): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 1.168525977s ago: executing program 0 (id=617): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r5, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 1.099337538s ago: executing program 3 (id=618): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.00762125s ago: executing program 3 (id=619): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 312.396974ms ago: executing program 2 (id=620): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec", 0x21}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bd", 0x4}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 312.027174ms ago: executing program 4 (id=622): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 283.768564ms ago: executing program 1 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0x0) 283.236104ms ago: executing program 3 (id=623): mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZzW3r7MZX5/ZJLZ+bc4TzT26fn3NNz5gZQWYPpP7WI/RExnUT0J/OLZZ2RFQ4uPO/Bnx+dTR9J1Ouv/Z5Ekh3Ln59kX/uyk3si4scfktjXsbLemblrF8enpiavZvvDs5emh2fmrh2+cGn8/OT5ycujL4yeOH7s+ImRI21d1/WCY6dvvvt+/ydjb37z1V/JyLe/jCVxMl7Onrj0OjbLYAw2vifJyqK+E5tdWUk6sp+TpS9x0lliQKxL/vp1RcQT0R8d8fDF64+PXyk1OGBL1ZOIOlBRifyHisr7Afl7++Xvg2ul9EqA7XD/1MIAwMr871wYG4yextjA7gdJLB3WSSKivZG5Znsi4u6dsZvn7ozdjC0ahwOKzd+IiCeL8j9p5P9A9MRAI/9rTfmf9gvOZF/T46+2Wf/yoWL5D9tnIf97Vs3/aJH/by3J/7fbrH/w4eY7vU3539vuJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMlNqH9w2f7Kv//X7m1CNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+EavG4i4fyPiqcL5v8li+58UtP/p74PpR6xj37O3zrQqWzv/ga1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63qbzf/3WICNi5t/3evnv8DydL79cysv46jc531VmXt9v+7k9cbt5zpzo59MD47e3Ukojs53ZEebTo+uv6Y4XGU50OeL2n+H3pm9fG/ov5/b0TML/u/kz+a1xTn/v9336+t4tH/h/Kk+T+xrvZ//Rujtwa+b1X/o7X/xxpt/aHsiPE/WPBFnqbdzccL0rGzqGi74wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0EtIvZEUhta3K7VhoYi+iLif7G7NnVlZva5c1feuzyRljU+/7+Wf9Jv/8J+kn/+/8CS/dFl+0cjYm9EfN7R29gfOntlaqLsiwcAAAAAAAAAAAAAAAAAAIAdoq/F+v/Ubx1lRwdsuc6yAwBKU5D/P5URB7D9tP9QXfIfqkv+Q3XJf6gu+Q/VJf+huuQ/VNc68z/JHgAAAAAAwM6098Dtn5OImH+xt/FIdWdlXaVGBmy1WtkBAKVxix+oLlP/oLrW+x7/5BbFAZRnrfm8PS1P2shM4OmzGzgZAAAAAAAAAAAAACrn4H7r/6GqrP+H6rL+H6orX/9/oOQ4gO3nPT4Qa6zkL1z/v+ZZAAAAAAAAAAAAAMBmmpm7dnF8amryqo03dkYY27lRr9evpz8FOyWef/lGPhV+p8SzbCNf6/doZ5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//030lBw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 282.561264ms ago: executing program 4 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0x5, 0x19}, {0x1, 0xfff1}, {0x3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 724.17µs ago: executing program 2 (id=625): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x37, 0x97, 0x8f, 0x8, 0x403, 0xf850, 0xef03, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x0, 0x14, 0x3d, 0xec}}]}}]}}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e25, 0x2, @remote, 0x6}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x44) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) 0s ago: executing program 4 (id=636): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) flistxattr(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 33.183510][ T29] audit: type=1400 audit(1749911714.561:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.184702][ T3298] cgroup: Unknown subsys name 'net' [ 33.206311][ T29] audit: type=1400 audit(1749911714.561:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.233701][ T29] audit: type=1400 audit(1749911714.591:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.388718][ T3298] cgroup: Unknown subsys name 'cpuset' [ 33.395033][ T3298] cgroup: Unknown subsys name 'rlimit' [ 33.585953][ T29] audit: type=1400 audit(1749911714.961:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.610106][ T29] audit: type=1400 audit(1749911714.961:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.630717][ T29] audit: type=1400 audit(1749911714.961:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.639793][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.651186][ T29] audit: type=1400 audit(1749911714.971:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.680299][ T29] audit: type=1400 audit(1749911714.971:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.705504][ T29] audit: type=1400 audit(1749911714.971:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.719379][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.728807][ T29] audit: type=1400 audit(1749911715.041:71): avc: denied { relabelto } for pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.884882][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 34.940383][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 34.949375][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 34.987935][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.016455][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.023642][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.031009][ T3307] bridge_slave_0: entered allmulticast mode [ 35.037693][ T3307] bridge_slave_0: entered promiscuous mode [ 35.060757][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.067955][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.075253][ T3307] bridge_slave_1: entered allmulticast mode [ 35.081796][ T3307] bridge_slave_1: entered promiscuous mode [ 35.124426][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.131666][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.138978][ T3308] bridge_slave_0: entered allmulticast mode [ 35.145585][ T3308] bridge_slave_0: entered promiscuous mode [ 35.154217][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.161473][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.168685][ T3308] bridge_slave_1: entered allmulticast mode [ 35.175085][ T3308] bridge_slave_1: entered promiscuous mode [ 35.197484][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.206795][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.213921][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.221258][ T3314] bridge_slave_0: entered allmulticast mode [ 35.227811][ T3314] bridge_slave_0: entered promiscuous mode [ 35.237067][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.244223][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.251532][ T3314] bridge_slave_1: entered allmulticast mode [ 35.258089][ T3314] bridge_slave_1: entered promiscuous mode [ 35.269932][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.277056][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.284315][ T3318] bridge_slave_0: entered allmulticast mode [ 35.290841][ T3318] bridge_slave_0: entered promiscuous mode [ 35.299062][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.320798][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.335077][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.342262][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.349496][ T3318] bridge_slave_1: entered allmulticast mode [ 35.355947][ T3318] bridge_slave_1: entered promiscuous mode [ 35.373302][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.383573][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.408898][ T3307] team0: Port device team_slave_0 added [ 35.418413][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.435629][ T3308] team0: Port device team_slave_0 added [ 35.447067][ T3307] team0: Port device team_slave_1 added [ 35.464030][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.473549][ T3308] team0: Port device team_slave_1 added [ 35.485376][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.500618][ T3314] team0: Port device team_slave_0 added [ 35.515376][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.535361][ T3314] team0: Port device team_slave_1 added [ 35.548944][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.556155][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.582463][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.598783][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.605977][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.631984][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.651947][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.658995][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.685133][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.696521][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.703555][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.729585][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.741334][ T3318] team0: Port device team_slave_0 added [ 35.749858][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.756822][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.782995][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.796340][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.803438][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.829819][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.841145][ T3318] team0: Port device team_slave_1 added [ 35.867688][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.874682][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.900856][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.931629][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.939866][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.966021][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.987673][ T3308] hsr_slave_0: entered promiscuous mode [ 35.993901][ T3308] hsr_slave_1: entered promiscuous mode [ 36.020165][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.027477][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.034636][ T3312] bridge_slave_0: entered allmulticast mode [ 36.041208][ T3312] bridge_slave_0: entered promiscuous mode [ 36.048154][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.055299][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.062570][ T3312] bridge_slave_1: entered allmulticast mode [ 36.069101][ T3312] bridge_slave_1: entered promiscuous mode [ 36.088244][ T3314] hsr_slave_0: entered promiscuous mode [ 36.094276][ T3314] hsr_slave_1: entered promiscuous mode [ 36.100304][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.107930][ T3314] Cannot create hsr debugfs directory [ 36.120739][ T3307] hsr_slave_0: entered promiscuous mode [ 36.126941][ T3307] hsr_slave_1: entered promiscuous mode [ 36.132972][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.140580][ T3307] Cannot create hsr debugfs directory [ 36.153317][ T3318] hsr_slave_0: entered promiscuous mode [ 36.159404][ T3318] hsr_slave_1: entered promiscuous mode [ 36.165266][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.172962][ T3318] Cannot create hsr debugfs directory [ 36.199245][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.209858][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.281260][ T3312] team0: Port device team_slave_0 added [ 36.304808][ T3312] team0: Port device team_slave_1 added [ 36.335823][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.342854][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.368971][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.394373][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.401468][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.427487][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.511646][ T3312] hsr_slave_0: entered promiscuous mode [ 36.517875][ T3312] hsr_slave_1: entered promiscuous mode [ 36.523773][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.531421][ T3312] Cannot create hsr debugfs directory [ 36.539158][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.552968][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.564593][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.578458][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.605813][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.620524][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.630669][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.639543][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.696271][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.707350][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.716757][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.725928][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.792166][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.802842][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.816514][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.832715][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.841808][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.859845][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.868463][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.883880][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.892395][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.899542][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.909604][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.916767][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.925759][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.937830][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.951980][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.959149][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.969584][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.978376][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.991761][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.004371][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.011493][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.024447][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.050081][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.057239][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.069040][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.076180][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.106120][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.157130][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.193743][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.213657][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.226268][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.260043][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.276202][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.283340][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.296424][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.303980][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.315478][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.330898][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.338324][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.351732][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.361966][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.369093][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.380535][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.555564][ T3314] veth0_vlan: entered promiscuous mode [ 37.585671][ T3314] veth1_vlan: entered promiscuous mode [ 37.594863][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.603680][ T3318] veth0_vlan: entered promiscuous mode [ 37.614155][ T3308] veth0_vlan: entered promiscuous mode [ 37.623009][ T3318] veth1_vlan: entered promiscuous mode [ 37.635206][ T3308] veth1_vlan: entered promiscuous mode [ 37.651156][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.662860][ T3314] veth0_macvtap: entered promiscuous mode [ 37.687803][ T3314] veth1_macvtap: entered promiscuous mode [ 37.706137][ T3318] veth0_macvtap: entered promiscuous mode [ 37.715764][ T3318] veth1_macvtap: entered promiscuous mode [ 37.724993][ T3308] veth0_macvtap: entered promiscuous mode [ 37.742391][ T3308] veth1_macvtap: entered promiscuous mode [ 37.752485][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.765413][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.777352][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.786188][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.802400][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.811357][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.820187][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.829231][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.844321][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.858769][ T3318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.867630][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.876388][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.885216][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.900349][ T3312] veth0_vlan: entered promiscuous mode [ 37.913385][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.924897][ T3307] veth0_vlan: entered promiscuous mode [ 37.941108][ T3312] veth1_vlan: entered promiscuous mode [ 37.948650][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.957537][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.966331][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.975175][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.002589][ T3307] veth1_vlan: entered promiscuous mode [ 38.014721][ T3312] veth0_macvtap: entered promiscuous mode [ 38.032247][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.050772][ T3312] veth1_macvtap: entered promiscuous mode [ 38.059972][ T3307] veth0_macvtap: entered promiscuous mode [ 38.072251][ T3307] veth1_macvtap: entered promiscuous mode [ 38.102113][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.126377][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.146922][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.159066][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.176252][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.185158][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.193959][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.202777][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.230472][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 38.230487][ T29] audit: type=1400 audit(1749911719.601:99): avc: denied { create } for pid=3486 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.232895][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.236707][ T29] audit: type=1400 audit(1749911719.611:100): avc: denied { open } for pid=3488 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.256024][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.264790][ T29] audit: type=1400 audit(1749911719.611:101): avc: denied { kernel } for pid=3488 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.283923][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.320819][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.329711][ T29] audit: type=1400 audit(1749911719.681:102): avc: denied { bind } for pid=3486 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.349475][ T29] audit: type=1400 audit(1749911719.681:103): avc: denied { listen } for pid=3486 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.369067][ T29] audit: type=1400 audit(1749911719.681:104): avc: denied { connect } for pid=3486 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.388493][ T29] audit: type=1400 audit(1749911719.701:105): avc: denied { accept } for pid=3486 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.407951][ T29] audit: type=1400 audit(1749911719.701:106): avc: denied { write } for pid=3486 comm="syz.4.7" path="socket:[3690]" dev="sockfs" ino=3690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.430949][ T29] audit: type=1400 audit(1749911719.701:107): avc: denied { read } for pid=3486 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.454491][ T29] audit: type=1400 audit(1749911719.771:108): avc: denied { read } for pid=3488 comm="syz.2.8" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.592729][ T3502] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 38.664034][ T3505] loop0: detected capacity change from 0 to 2048 [ 38.731194][ T3516] syz.2.16 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.896973][ T3533] loop1: detected capacity change from 0 to 512 [ 38.921890][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.935306][ T3519] syz.0.17 (3519) used greatest stack depth: 10192 bytes left [ 38.943952][ T3533] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.009862][ T3542] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 39.017708][ T3542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 39.027172][ T3542] dummy0: entered promiscuous mode [ 39.033010][ T3542] bridge0: port 3(dummy0) entered blocking state [ 39.039702][ T3542] bridge0: port 3(dummy0) entered disabled state [ 39.046573][ T3542] dummy0: entered allmulticast mode [ 39.053218][ T3542] bridge0: port 3(dummy0) entered blocking state [ 39.059793][ T3542] bridge0: port 3(dummy0) entered forwarding state [ 39.296940][ T3550] loop4: detected capacity change from 0 to 128 [ 39.306797][ T3550] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.319868][ T3550] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.431487][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.456581][ T3554] ======================================================= [ 39.456581][ T3554] WARNING: The mand mount option has been deprecated and [ 39.456581][ T3554] and is ignored by this kernel. Remove the mand [ 39.456581][ T3554] option from the mount to silence this warning. [ 39.456581][ T3554] ======================================================= [ 39.546854][ T3560] loop4: detected capacity change from 0 to 512 [ 39.590251][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.606114][ T3560] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.632571][ T3566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 39.760829][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.779691][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.800149][ T3576] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 39.835121][ T3578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 39.864270][ T3576] team0: Port device dummy0 added [ 39.875608][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 39.894074][ T3576] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 39.903130][ T3576] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 39.914324][ T3576] team0: Failed to send options change via netlink (err -105) [ 39.922067][ T3576] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 39.937841][ T3576] team0: Port device dummy0 removed [ 39.953920][ T3576] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.970419][ T3578] team0 (unregistering): Port device team_slave_0 removed [ 39.979968][ T3578] team0 (unregistering): Port device team_slave_1 removed [ 39.981250][ T3588] loop3: detected capacity change from 0 to 512 [ 40.006061][ T3588] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.019225][ T3588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.038809][ T3585] tipc: Started in network mode [ 40.043789][ T3585] tipc: Node identity 421402b342af, cluster identity 4711 [ 40.051109][ T3585] tipc: Enabled bearer , priority 0 [ 40.061854][ T3588] EXT4-fs (loop3): 1 orphan inode deleted [ 40.067682][ T3588] EXT4-fs (loop3): 1 truncate cleaned up [ 40.074471][ T3588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.099357][ T3584] tipc: Resetting bearer [ 40.119665][ T3584] tipc: Disabling bearer [ 40.140921][ T3594] process 'syz.2.44' launched '/dev/fd/4' with NULL argv: empty string added [ 40.238403][ T3599] pim6reg1: entered promiscuous mode [ 40.243868][ T3599] pim6reg1: entered allmulticast mode [ 40.264636][ T3601] veth0: entered promiscuous mode [ 40.270705][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 40.479799][ T3603] loop0: detected capacity change from 0 to 512 [ 40.486504][ T3603] EXT4-fs: Ignoring removed bh option [ 40.493738][ T3603] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.503100][ T3603] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 40.512484][ T3603] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 40.522435][ T3603] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 40.531104][ T3603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.556379][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.693206][ T3612] loop0: detected capacity change from 0 to 128 [ 40.702271][ T3613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.710430][ T3612] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.725270][ T3612] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.751176][ T3613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.778283][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.832286][ T3613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.861321][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.913936][ T3613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.963632][ T3622] serio: Serial port ttyS3 [ 40.968286][ T3620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'. [ 40.985875][ T3613] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.028029][ T3613] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.048999][ T3629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'. [ 41.050134][ T3613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.057958][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 41.082033][ T3613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.094690][ T3629] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 41.552250][ T3679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 41.870880][ C1] hrtimer: interrupt took 57607 ns [ 41.949818][ T3699] cgroup: fork rejected by pids controller in /syz1 [ 42.137782][ T3884] loop0: detected capacity change from 0 to 2048 [ 42.201689][ T3884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.214142][ T3884] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.241924][ T3884] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.91: bg 0: block 345: padding at end of block bitmap is not set [ 42.326604][ T3891] loop3: detected capacity change from 0 to 512 [ 42.393536][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.402736][ T3891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.449995][ T3891] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 42.474652][ T3891] System zones: 0-2, 18-18, 34-34 [ 42.482416][ T3891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.495072][ T3891] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.534093][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.654161][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.674606][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.808683][ T4043] loop3: detected capacity change from 0 to 512 [ 42.877951][ T4043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.897576][ T4043] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.026853][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.258513][ T4106] loop3: detected capacity change from 0 to 512 [ 43.274091][ T4106] EXT4-fs: Ignoring removed bh option [ 43.322277][ T4106] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.331482][ T4106] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 43.365778][ T4106] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 43.385846][ T4106] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 43.435505][ T4106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.585754][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.594418][ T4126] netlink: '+}[@': attribute type 13 has an invalid length. [ 43.661797][ T4130] loop3: detected capacity change from 0 to 256 [ 43.706831][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 43.706850][ T29] audit: type=1400 audit(1749911725.081:346): avc: denied { mount } for pid=4129 comm="syz.3.108" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.748984][ T4126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.015246][ T29] audit: type=1400 audit(1749911725.391:347): avc: denied { write } for pid=4194 comm="syz.4.110" name="tcp6" dev="proc" ino=4026532576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.057500][ T4199] wg2: entered promiscuous mode [ 44.062532][ T4199] wg2: entered allmulticast mode [ 44.102157][ T29] audit: type=1326 audit(1749911725.481:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.125711][ T29] audit: type=1326 audit(1749911725.481:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.149672][ T29] audit: type=1326 audit(1749911725.481:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.172954][ T29] audit: type=1326 audit(1749911725.481:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.196247][ T29] audit: type=1326 audit(1749911725.481:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.219641][ T29] audit: type=1326 audit(1749911725.481:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.242966][ T29] audit: type=1326 audit(1749911725.481:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.266295][ T29] audit: type=1326 audit(1749911725.481:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 44.312830][ T4206] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 44.405835][ T4223] loop2: detected capacity change from 0 to 1024 [ 44.437589][ T4223] EXT4-fs: Ignoring removed nobh option [ 44.487138][ T4223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.540608][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.571552][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 44.598330][ T4244] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 44.606040][ T4244] netlink: 'syz.4.128': attribute type 2 has an invalid length. [ 44.627587][ T4242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 44.641155][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 44.776773][ T4258] capability: warning: `syz.2.135' uses deprecated v2 capabilities in a way that may be insecure [ 45.442899][ T4284] loop3: detected capacity change from 0 to 1024 [ 45.471557][ T2998] udevd[2998]: worker [3301] terminated by signal 33 (Unknown signal 33) [ 45.481523][ T4284] EXT4-fs: Ignoring removed nobh option [ 45.487743][ T4284] EXT4-fs: Ignoring removed nobh option [ 45.524798][ T4284] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 45.555918][ T4284] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.143: inode #4294967295: comm syz.3.143: iget: illegal inode # [ 45.631394][ T4284] EXT4-fs (loop3): no journal found [ 45.636878][ T4284] EXT4-fs (loop3): can't get journal size [ 45.659854][ T4284] EXT4-fs (loop3): failed to initialize system zone (-22) [ 45.674868][ T4284] EXT4-fs (loop3): mount failed [ 45.759464][ T4300] loop4: detected capacity change from 0 to 512 [ 45.806687][ T4300] EXT4-fs: Ignoring removed bh option [ 45.817244][ T4300] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.859529][ T4300] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.925562][ T4300] EXT4-fs (loop4): 1 truncate cleaned up [ 45.947870][ T4300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.069900][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.352567][ T4281] syz.3.143 (4281) used greatest stack depth: 6952 bytes left [ 46.370058][ T4333] loop0: detected capacity change from 0 to 128 [ 46.402201][ T4333] syz.0.164: attempt to access beyond end of device [ 46.402201][ T4333] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 46.460764][ T4340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.167'. [ 46.471432][ T31] kworker/u8:1: attempt to access beyond end of device [ 46.471432][ T31] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 46.552208][ T4323] loop1: detected capacity change from 0 to 512 [ 46.559898][ T4323] EXT4-fs: inline encryption not supported [ 46.568748][ T4323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.568953][ T4346] netlink: 96 bytes leftover after parsing attributes in process `syz.0.170'. [ 46.649437][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 46.681089][ T4358] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 46.825893][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 46.962963][ T4376] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.017250][ T4380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4380 comm=syz.4.187 [ 47.063305][ T4386] loop2: detected capacity change from 0 to 512 [ 47.070528][ T4386] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 47.080893][ T4386] EXT4-fs (loop2): invalid journal inode [ 47.151390][ T4400] loop2: detected capacity change from 0 to 512 [ 47.182128][ T4400] EXT4-fs (loop2): 1 orphan inode deleted [ 47.194204][ T4404] loop1: detected capacity change from 0 to 512 [ 47.198763][ T4400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.214368][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 47.227214][ T4400] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.238179][ T4408] veth1_to_bond: entered allmulticast mode [ 47.240086][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.256832][ T4404] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.259008][ T4408] veth1_to_bond: left allmulticast mode [ 47.391791][ T4413] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.197: corrupted inode contents [ 47.427194][ T4413] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm syz.1.197: mark_inode_dirty error [ 47.455759][ T4413] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.197: corrupted inode contents [ 47.467726][ T4400] mmap: syz.2.195 (4400) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.481832][ T4413] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.197: mark_inode_dirty error [ 47.494092][ T4413] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.197: mark inode dirty (error -117) [ 47.508159][ T4413] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 47.535534][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.612304][ T4423] loop0: detected capacity change from 0 to 1024 [ 47.620322][ T4422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.632482][ T4422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.642887][ T4423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.715521][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.846864][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 47.940511][ T4433] loop3: detected capacity change from 0 to 512 [ 47.948266][ T4433] EXT4-fs: Ignoring removed nobh option [ 48.017632][ T4433] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 48.026618][ T4433] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.207: attempt to clear invalid blocks 2 len 1 [ 48.044106][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.053088][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.062875][ T4436] SELinux: failed to load policy [ 48.068543][ T4433] EXT4-fs (loop3): Remounting filesystem read-only [ 48.076117][ T4433] EXT4-fs (loop3): 1 truncate cleaned up [ 48.082696][ T4433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.112970][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.527320][ T4463] vhci_hcd: invalid port number 236 [ 48.532724][ T4463] vhci_hcd: invalid port number 236 [ 48.583708][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.657911][ T4479] wg2: entered promiscuous mode [ 48.662857][ T4479] wg2: entered allmulticast mode [ 48.693276][ T4483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 48.718585][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 48.958521][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 48.958544][ T29] audit: type=1326 audit(1749911730.341:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 48.988215][ T29] audit: type=1326 audit(1749911730.341:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.012207][ T29] audit: type=1326 audit(1749911730.391:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.035713][ T29] audit: type=1326 audit(1749911730.391:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.059200][ T29] audit: type=1326 audit(1749911730.391:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.083583][ T29] audit: type=1326 audit(1749911730.391:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.106914][ T29] audit: type=1326 audit(1749911730.391:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.130267][ T29] audit: type=1326 audit(1749911730.391:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.153927][ T29] audit: type=1326 audit(1749911730.391:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.177534][ T29] audit: type=1326 audit(1749911730.391:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6804fe929 code=0x7ffc0000 [ 49.250398][ T4475] capability: warning: `syz.1.228' uses 32-bit capabilities (legacy support in use) [ 49.452305][ T4525] pimreg: entered allmulticast mode [ 49.472322][ T4525] pimreg: left allmulticast mode [ 49.610209][ T4539] wg2: left promiscuous mode [ 49.614949][ T4539] wg2: left allmulticast mode [ 49.626331][ T4539] wg2: entered promiscuous mode [ 49.631361][ T4539] wg2: entered allmulticast mode [ 49.645652][ T4541] loop4: detected capacity change from 0 to 256 [ 49.766381][ T4556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.850678][ T4551] bond1: entered promiscuous mode [ 49.855926][ T4551] bond1: entered allmulticast mode [ 49.862626][ T4551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.912562][ T4551] bond1 (unregistering): Released all slaves [ 49.923047][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.938778][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.204710][ T4576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.271'. [ 50.228187][ T4578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 50.339689][ T4591] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 50.339689][ T4591] The task syz.1.274 (4591) triggered the difference, watch for misbehavior. [ 50.415410][ T4595] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.432261][ T4591] loop1: detected capacity change from 0 to 256 [ 50.439221][ T4591] vfat: Unknown parameter 'shortname' [ 50.468573][ T4595] Zero length message leads to an empty skb [ 50.494199][ T4598] loop4: detected capacity change from 0 to 2048 [ 50.505016][ T4600] netlink: 596 bytes leftover after parsing attributes in process `syz.3.283'. [ 50.524466][ T4598] EXT4-fs: Ignoring removed bh option [ 50.539684][ T4598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.566900][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.574412][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.581908][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.589389][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.596972][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.604546][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.612005][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.619567][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.627006][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.634614][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.636601][ T4598] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 50.642053][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.642057][ T4598] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.650375][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.658015][ T4598] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.666656][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.673981][ T4598] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.673981][ T4598] [ 50.674001][ T4598] EXT4-fs (loop4): Total free blocks count 0 [ 50.686192][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.693599][ T4598] EXT4-fs (loop4): Free/Dirty block details [ 50.703301][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.703332][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.709377][ T4598] EXT4-fs (loop4): free_blocks=2415919104 [ 50.716764][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.722657][ T4598] EXT4-fs (loop4): dirty_blocks=16 [ 50.730087][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.737487][ T4598] EXT4-fs (loop4): Block reservation details [ 50.737500][ T4598] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 50.775583][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.783051][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.790509][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.797966][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.805398][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.813043][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.820586][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.828058][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.835663][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.843118][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.850560][ T36] hid-generic 0006:0000:0000.0002: unknown main item tag 0x0 [ 50.867708][ T36] hid-generic 0006:0000:0000.0002: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 50.878830][ T4598] netlink: 'syz.4.282': attribute type 10 has an invalid length. [ 50.887090][ T4598] netlink: 152 bytes leftover after parsing attributes in process `syz.4.282'. [ 50.915501][ T4612] loop0: detected capacity change from 0 to 512 [ 50.940463][ T4612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.954272][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.963620][ T4612] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.011567][ T4620] loop4: detected capacity change from 0 to 512 [ 51.040840][ T4620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.059478][ T4620] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.075066][ T4629] loop2: detected capacity change from 0 to 128 [ 51.095168][ T4629] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.118697][ T4629] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.169123][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.221866][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.396438][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.468202][ T4653] netlink: 'syz.1.302': attribute type 12 has an invalid length. [ 51.481653][ T4655] loop2: detected capacity change from 0 to 1024 [ 51.493564][ T4655] EXT4-fs: inline encryption not supported [ 51.500917][ T4655] EXT4-fs: Ignoring removed bh option [ 51.522223][ T4655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.587777][ T4655] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.303: Allocating blocks 497-513 which overlap fs metadata [ 51.607430][ T4655] EXT4-fs (loop2): Remounting filesystem read-only [ 51.642340][ T4671] IPv6: Can't replace route, no match found [ 51.688163][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.736817][ T4683] netlink: 'syz.2.315': attribute type 12 has an invalid length. [ 51.786919][ T4686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 51.849796][ T4690] loop3: detected capacity change from 0 to 2048 [ 51.862978][ T4690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.883376][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 51.905253][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 52.053109][ T4707] loop1: detected capacity change from 0 to 1024 [ 52.105017][ T4707] EXT4-fs: inline encryption not supported [ 52.105360][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.111044][ T4707] EXT4-fs: Ignoring removed bh option [ 52.129997][ T4709] IPv6: Can't replace route, no match found [ 52.178310][ T4707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.198636][ T4715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.280358][ T4715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.308397][ T4707] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.324: Allocating blocks 497-513 which overlap fs metadata [ 52.402708][ T4731] netlink: 'syz.4.329': attribute type 12 has an invalid length. [ 52.460905][ T4707] EXT4-fs (loop1): Remounting filesystem read-only [ 52.470046][ T4715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.531373][ T4715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.597449][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.621464][ T4755] loop2: detected capacity change from 0 to 1024 [ 52.642377][ T4715] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.676148][ T4715] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.698020][ T4755] EXT4-fs: Ignoring removed bh option [ 52.703478][ T4755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.729923][ T4715] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.745486][ T4755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.762907][ T4715] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.835790][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 53.098717][ T4783] loop4: detected capacity change from 0 to 128 [ 53.166998][ T4783] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.212322][ T4783] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.682081][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.014252][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 54.104318][ T4811] loop2: detected capacity change from 0 to 1024 [ 54.191597][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 54.191612][ T29] audit: type=1400 audit(1749911735.571:785): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.221909][ T4176] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.250266][ T4811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.277627][ T4811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.546318][ T4829] loop2: detected capacity change from 0 to 128 [ 54.626893][ T4834] loop1: detected capacity change from 0 to 128 [ 54.645376][ T4834] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.670024][ T4834] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.751006][ T29] audit: type=1326 audit(1749911736.131:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.774897][ T29] audit: type=1326 audit(1749911736.131:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.776960][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.808046][ T29] audit: type=1326 audit(1749911736.181:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.831621][ T29] audit: type=1326 audit(1749911736.181:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.855148][ T29] audit: type=1326 audit(1749911736.181:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.878514][ T29] audit: type=1326 audit(1749911736.181:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.901806][ T29] audit: type=1326 audit(1749911736.181:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.925215][ T29] audit: type=1326 audit(1749911736.181:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 54.948701][ T29] audit: type=1326 audit(1749911736.181:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2fb06e929 code=0x7ffc0000 [ 55.014044][ T4845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.067092][ T4851] futex_wake_op: syz.3.358 tries to shift op by -1; fix this program [ 55.665013][ T4877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.940979][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 55.950282][ T4902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.957825][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.965550][ T4902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.973168][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.694862][ T4921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.791309][ T3395] hid-generic 0000:0000:30303000.0003: unknown main item tag 0x3 [ 56.835710][ T3395] hid-generic 0000:0000:30303000.0003: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 56.895467][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 57.095496][ T4941] loop0: detected capacity change from 0 to 512 [ 57.118293][ T4941] EXT4-fs: Ignoring removed bh option [ 57.129459][ T4941] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.138732][ T4941] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 57.163449][ T4943] netlink: 100 bytes leftover after parsing attributes in process `syz.2.389'. [ 57.166266][ T4924] hid-generic 0000:0000:30303000.0003: pid 4924 passed too large report [ 57.173836][ T4941] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 57.191207][ T4941] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 57.200923][ T4941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.238042][ T4947] loop2: detected capacity change from 0 to 512 [ 57.246043][ T4947] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.269346][ T4947] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 57.277654][ T4947] System zones: 0-2, 18-18, 34-34 [ 57.285155][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.299132][ T4947] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.299409][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.344826][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.393903][ T4957] ref_ctr increment failed for inode: 0x16f offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888108dbcac0 [ 57.405745][ T4955] uprobe: syz.0.395:4955 failed to unregister, leaking uprobe [ 57.418349][ T4959] loop1: detected capacity change from 0 to 2048 [ 57.425294][ T4959] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.438552][ T4959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.554360][ T4969] loop0: detected capacity change from 0 to 2048 [ 57.569545][ T4969] EXT4-fs (loop0): failed to initialize system zone (-117) [ 57.582815][ T4969] EXT4-fs (loop0): mount failed [ 57.614715][ T4966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.396: bg 0: block 234: padding at end of block bitmap is not set [ 57.629275][ T4966] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 57.641819][ T4966] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.641819][ T4966] [ 57.660112][ T4748] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 57.673071][ T4748] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.673071][ T4748] [ 57.682867][ T4748] EXT4-fs (loop1): Total free blocks count 0 [ 57.689077][ T4748] EXT4-fs (loop1): Free/Dirty block details [ 57.695003][ T4748] EXT4-fs (loop1): free_blocks=0 [ 57.700242][ T4748] EXT4-fs (loop1): dirty_blocks=4096 [ 57.705556][ T4748] EXT4-fs (loop1): Block reservation details [ 57.815911][ T4983] netlink: 216 bytes leftover after parsing attributes in process `syz.3.406'. [ 58.269866][ T4997] wg2: entered promiscuous mode [ 58.274791][ T4997] wg2: entered allmulticast mode [ 58.346814][ T5001] loop4: detected capacity change from 0 to 2048 [ 58.404448][ T3381] hid-generic 0000:0000:30303000.0004: unknown main item tag 0x3 [ 58.418227][ T5001] loop4: p1 < > p3 [ 58.428028][ T5001] loop4: p3 size 134217728 extends beyond EOD, truncated [ 58.445899][ T3381] hid-generic 0000:0000:30303000.0004: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 58.492876][ T5007] loop3: detected capacity change from 0 to 2048 [ 58.527595][ T5007] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.597812][ T5007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.646014][ T5019] loop1: detected capacity change from 0 to 2048 [ 58.685791][ T5019] Alternate GPT is invalid, using primary GPT. [ 58.686398][ T5026] hid-generic 0000:0000:30303000.0004: pid 5026 passed too large report [ 58.692162][ T5019] loop1: p1 p2 p3 [ 58.712015][ T5027] loop4: detected capacity change from 0 to 1024 [ 58.732760][ T5027] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.758590][ T5027] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.784715][ T5027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.803967][ T5027] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.419: bg 0: block 10: padding at end of block bitmap is not set [ 58.829198][ T5027] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.419: Failed to acquire dquot type 0 [ 58.858108][ T5027] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.419: Failed to acquire dquot type 0 [ 58.877744][ T5027] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.419: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.891412][ T5027] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.419: Failed to acquire dquot type 0 [ 58.903061][ T5027] EXT4-fs (loop4): 1 orphan inode deleted [ 58.913489][ T5027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.059198][ T5030] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.415: bg 0: block 234: padding at end of block bitmap is not set [ 59.074966][ T5030] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 59.087332][ T5030] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.087332][ T5030] [ 59.103527][ T4742] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 59.116468][ T4742] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.116468][ T4742] [ 59.126213][ T4742] EXT4-fs (loop3): Total free blocks count 0 [ 59.132262][ T4742] EXT4-fs (loop3): Free/Dirty block details [ 59.138208][ T4742] EXT4-fs (loop3): free_blocks=0 [ 59.143199][ T4742] EXT4-fs (loop3): dirty_blocks=4096 [ 59.148594][ T4742] EXT4-fs (loop3): Block reservation details [ 59.309067][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 59.309085][ T29] audit: type=1326 audit(1749911740.691:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.347871][ T29] audit: type=1326 audit(1749911740.691:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.371259][ T29] audit: type=1326 audit(1749911740.691:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.394669][ T29] audit: type=1326 audit(1749911740.691:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.417928][ T29] audit: type=1326 audit(1749911740.691:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.441233][ T29] audit: type=1326 audit(1749911740.691:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.464874][ T29] audit: type=1326 audit(1749911740.691:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.488308][ T29] audit: type=1326 audit(1749911740.691:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.511691][ T29] audit: type=1326 audit(1749911740.691:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.535167][ T29] audit: type=1326 audit(1749911740.691:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29de2e929 code=0x7ffc0000 [ 59.596240][ T5087] loop0: detected capacity change from 0 to 128 [ 59.623602][ T5087] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.659538][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.670802][ T5087] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.708406][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.729988][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 59.738978][ T5101] netlink: 212 bytes leftover after parsing attributes in process `syz.1.429'. [ 59.781973][ T5104] wg2: entered promiscuous mode [ 59.786989][ T5104] wg2: entered allmulticast mode [ 59.913403][ T3475] hid-generic 0000:0000:30303000.0005: unknown main item tag 0x3 [ 59.922060][ T3475] hid-generic 0000:0000:30303000.0005: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 60.003749][ T5140] loop1: detected capacity change from 0 to 1024 [ 60.031443][ T5140] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.196870][ T5159] hid-generic 0000:0000:30303000.0005: pid 5159 passed too large report [ 60.293678][ T5166] 9p: Unknown Cache mode or invalid value PL [ 60.386534][ T5174] netlink: 332 bytes leftover after parsing attributes in process `syz.4.439'. [ 60.444896][ T5174] netlink: 'syz.4.439': attribute type 9 has an invalid length. [ 60.453961][ T5174] netlink: 108 bytes leftover after parsing attributes in process `syz.4.439'. [ 60.464355][ T5174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.439'. [ 60.993413][ T5233] netlink: '+}[@': attribute type 13 has an invalid length. [ 61.053910][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.061310][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.182604][ T5233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.193083][ T5233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.228983][ T5233] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.238151][ T5233] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.247055][ T5233] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.256451][ T5233] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.319397][ T5254] tipc: Started in network mode [ 61.324537][ T5254] tipc: Node identity ac14140f, cluster identity 4711 [ 61.333987][ T5254] tipc: New replicast peer: 0.0.255.255 [ 61.339765][ T5254] tipc: Enabled bearer , priority 10 [ 61.416238][ T5263] pim6reg1: entered promiscuous mode [ 61.421716][ T5263] pim6reg1: entered allmulticast mode [ 61.779624][ T5282] syzkaller0: entered promiscuous mode [ 61.785201][ T5282] syzkaller0: entered allmulticast mode [ 62.256709][ T5314] pim6reg1: entered promiscuous mode [ 62.262225][ T5314] pim6reg1: entered allmulticast mode [ 62.455734][ T5322] netlink: 'syz.1.488': attribute type 13 has an invalid length. [ 62.457459][ T3475] tipc: Node number set to 2886997007 [ 62.510465][ T5322] gretap0: refused to change device tx_queue_len [ 62.516913][ T5322] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.962239][ T5343] loop0: detected capacity change from 0 to 128 [ 63.000365][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 63.035531][ T5343] syz.0.496: attempt to access beyond end of device [ 63.035531][ T5343] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.049038][ T5343] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 63.235963][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.501'. [ 63.503646][ T5369] loop3: detected capacity change from 0 to 512 [ 63.542860][ T5369] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.736023][ T5386] loop1: detected capacity change from 0 to 128 [ 63.805898][ T5386] syz.1.515: attempt to access beyond end of device [ 63.805898][ T5386] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 63.932481][ T5397] loop2: detected capacity change from 0 to 128 [ 63.967464][ T5397] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 64.027842][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 64.045884][ T5397] FAT-fs (loop2): FAT read failed (blocknr 128) [ 64.484230][ T5413] loop2: detected capacity change from 0 to 1024 [ 64.498774][ T5413] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 64.544268][ T5413] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 64.672914][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 64.672928][ T29] audit: type=1326 audit(1749911746.051:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5c96a58e7 code=0x7ffc0000 [ 64.756841][ T29] audit: type=1326 audit(1749911746.081:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5c964ab19 code=0x7ffc0000 [ 64.780179][ T29] audit: type=1326 audit(1749911746.081:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5c96a58e7 code=0x7ffc0000 [ 64.803604][ T29] audit: type=1326 audit(1749911746.081:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5c964ab19 code=0x7ffc0000 [ 64.826883][ T29] audit: type=1326 audit(1749911746.081:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c96ae929 code=0x7ffc0000 [ 64.850598][ T29] audit: type=1326 audit(1749911746.081:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c96ae929 code=0x7ffc0000 [ 64.873986][ T29] audit: type=1326 audit(1749911746.081:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c96ae929 code=0x7ffc0000 [ 64.897426][ T29] audit: type=1326 audit(1749911746.081:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c96ae929 code=0x7ffc0000 [ 64.920907][ T29] audit: type=1326 audit(1749911746.081:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5c96a58e7 code=0x7ffc0000 [ 64.944299][ T29] audit: type=1326 audit(1749911746.081:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5c964ab19 code=0x7ffc0000 [ 65.075330][ T5443] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.161403][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 65.170312][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 65.223058][ T5454] loop3: detected capacity change from 0 to 512 [ 65.247285][ T5454] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 65.265026][ T5454] EXT4-fs (loop3): invalid journal inode [ 65.436065][ T5467] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.509655][ T5467] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.555681][ T5467] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.609938][ T5467] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.667336][ T5467] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.689416][ T5467] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.715658][ T5467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.742408][ T5467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.933365][ T5476] loop0: detected capacity change from 0 to 512 [ 65.990382][ T5478] 9pnet_virtio: no channels available for device 127.0.0.1 [ 65.998602][ T5476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.010125][ T5473] loop2: detected capacity change from 0 to 8192 [ 66.034478][ T5478] loop1: detected capacity change from 0 to 1024 [ 66.059384][ T5476] EXT4-fs (loop0): 1 truncate cleaned up [ 66.621320][ T5491] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.636517][ T5491] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 66.649127][ T5491] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.649127][ T5491] [ 66.658839][ T5491] EXT4-fs (loop1): Total free blocks count 0 [ 66.664884][ T5491] EXT4-fs (loop1): Free/Dirty block details [ 66.670940][ T5491] EXT4-fs (loop1): free_blocks=68451041280 [ 66.676794][ T5491] EXT4-fs (loop1): dirty_blocks=16400 [ 66.682239][ T5491] EXT4-fs (loop1): Block reservation details [ 66.688304][ T5491] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 66.722905][ T4739] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 66.735719][ T4739] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.735719][ T4739] [ 66.906549][ T5514] loop1: detected capacity change from 0 to 512 [ 66.919639][ T5514] EXT4-fs (loop1): 1 orphan inode deleted [ 66.926105][ T5514] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.938538][ T4739] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 1 [ 67.177783][ T5519] loop2: detected capacity change from 0 to 2048 [ 67.192657][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 67.260900][ T5528] loop3: detected capacity change from 0 to 512 [ 67.280110][ T5528] EXT4-fs (loop3): 1 orphan inode deleted [ 67.286699][ T5528] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.297523][ T4739] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 1 [ 67.628207][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 67.669977][ T5554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.678641][ T5554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.710144][ T5559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 67.733596][ T5559] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 67.863392][ T5566] loop3: detected capacity change from 0 to 128 [ 67.888904][ T5566] syz.3.585: attempt to access beyond end of device [ 67.888904][ T5566] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 67.913311][ T998] kworker/u8:6: attempt to access beyond end of device [ 67.913311][ T998] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 68.052712][ T5577] loop3: detected capacity change from 0 to 1024 [ 68.109145][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 68.210314][ T5597] loop3: detected capacity change from 0 to 512 [ 68.229701][ T5597] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.270552][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 68.300800][ T5605] loop1: detected capacity change from 0 to 128 [ 68.318790][ T5604] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.607: corrupted inode contents [ 68.330865][ T5604] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm syz.3.607: mark_inode_dirty error [ 68.342526][ T5604] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.607: corrupted inode contents [ 68.343559][ T5605] syz.1.597: attempt to access beyond end of device [ 68.343559][ T5605] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 68.358126][ T5604] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.607: mark_inode_dirty error [ 68.409678][ T5604] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.607: mark inode dirty (error -117) [ 68.422539][ T5604] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 68.433194][ T4743] kworker/u8:41: attempt to access beyond end of device [ 68.433194][ T4743] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 68.484703][ T5611] netlink: 596 bytes leftover after parsing attributes in process `syz.1.599'. [ 68.500359][ T5614] syzkaller1: entered promiscuous mode [ 68.506047][ T5614] syzkaller1: entered allmulticast mode [ 68.576383][ T5625] loop4: detected capacity change from 0 to 512 [ 68.590416][ T5625] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.665106][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 68.720327][ T5632] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.616: corrupted inode contents [ 68.759035][ T5632] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm syz.4.616: mark_inode_dirty error [ 68.788616][ T5632] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.616: corrupted inode contents [ 68.810408][ T5632] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.616: mark_inode_dirty error [ 68.823903][ T5632] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.616: mark inode dirty (error -117) [ 68.837353][ T5632] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 68.992770][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 69.049428][ T5660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.619'. [ 69.736893][ T3318] EXT4-fs unmount: 19 callbacks suppressed [ 69.736913][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.751790][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 69.751809][ T29] audit: type=1400 audit(1749911751.131:1255): avc: denied { execute } for pid=5661 comm="syz.4.622" path="/123/cpu.stat" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.797711][ T29] audit: type=1400 audit(1749911751.181:1256): avc: denied { read } for pid=5666 comm="syz.1.631" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.798123][ T5667] loop3: detected capacity change from 0 to 1024 [ 69.819046][ T29] audit: type=1400 audit(1749911751.181:1257): avc: denied { open } for pid=5666 comm="syz.1.631" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.856286][ T29] audit: type=1400 audit(1749911751.201:1258): avc: denied { mounton } for pid=5665 comm="syz.3.623" path="/151/bus" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.867356][ T5667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.878749][ T29] audit: type=1400 audit(1749911751.231:1259): avc: denied { create } for pid=5666 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.911468][ T29] audit: type=1400 audit(1749911751.231:1260): avc: denied { read write } for pid=5666 comm="syz.1.631" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.935020][ T29] audit: type=1400 audit(1749911751.231:1261): avc: denied { open } for pid=5666 comm="syz.1.631" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.958296][ T29] audit: type=1400 audit(1749911751.231:1262): avc: denied { create } for pid=5669 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.978273][ T29] audit: type=1400 audit(1749911751.231:1263): avc: denied { ioctl } for pid=5666 comm="syz.1.631" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.003146][ T29] audit: type=1400 audit(1749911751.231:1264): avc: denied { name_bind } for pid=5669 comm="syz.2.620" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.087632][ T5678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.096203][ T5678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.106676][ T5678] SELinux: failed to load policy [ 70.456129][ T5667] ================================================================== [ 70.464290][ T5667] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 70.471560][ T5667] [ 70.473910][ T5667] write to 0xffff888106b869a4 of 4 bytes by task 5674 on cpu 0: [ 70.481565][ T5667] xas_set_mark+0x12b/0x140 [ 70.486124][ T5667] __folio_start_writeback+0x1dd/0x440 [ 70.491812][ T5667] ext4_bio_write_folio+0x5ad/0x9f0 [ 70.497036][ T5667] mpage_submit_folio+0xe4/0x170 [ 70.502029][ T5667] mpage_process_page_bufs+0x39b/0x4a0 [ 70.507536][ T5667] mpage_prepare_extent_to_map+0x741/0xaa0 [ 70.513396][ T5667] ext4_do_writepages+0xa1a/0x21c0 [ 70.518554][ T5667] ext4_writepages+0x176/0x300 [ 70.523366][ T5667] do_writepages+0x1c6/0x310 [ 70.528014][ T5667] filemap_write_and_wait_range+0x144/0x340 [ 70.533965][ T5667] filemap_invalidate_pages+0xa4/0x1a0 [ 70.539488][ T5667] kiocb_invalidate_pages+0x6e/0x80 [ 70.544740][ T5667] __iomap_dio_rw+0x5d4/0x1250 [ 70.549536][ T5667] iomap_dio_rw+0x40/0x90 [ 70.553894][ T5667] ext4_file_write_iter+0xad9/0xf00 [ 70.559116][ T5667] iter_file_splice_write+0x5ef/0x970 [ 70.564560][ T5667] direct_splice_actor+0x156/0x2a0 [ 70.569714][ T5667] splice_direct_to_actor+0x312/0x680 [ 70.575133][ T5667] do_splice_direct+0xda/0x150 [ 70.579929][ T5667] do_sendfile+0x380/0x650 [ 70.584377][ T5667] __x64_sys_sendfile64+0x105/0x150 [ 70.589606][ T5667] x64_sys_call+0xb39/0x2fb0 [ 70.594216][ T5667] do_syscall_64+0xd2/0x200 [ 70.598740][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.604656][ T5667] [ 70.606997][ T5667] read to 0xffff888106b869a4 of 4 bytes by task 5667 on cpu 1: [ 70.614558][ T5667] xas_find_marked+0x5dc/0x620 [ 70.619342][ T5667] find_get_entry+0x5d/0x380 [ 70.623972][ T5667] filemap_get_folios_tag+0x92/0x210 [ 70.629315][ T5667] mpage_prepare_extent_to_map+0x320/0xaa0 [ 70.635237][ T5667] ext4_do_writepages+0x6ea/0x21c0 [ 70.640368][ T5667] ext4_writepages+0x176/0x300 [ 70.645162][ T5667] do_writepages+0x1c6/0x310 [ 70.649771][ T5667] file_write_and_wait_range+0x156/0x2c0 [ 70.655450][ T5667] generic_buffers_fsync_noflush+0x45/0x120 [ 70.661378][ T5667] ext4_sync_file+0x1ab/0x690 [ 70.666097][ T5667] vfs_fsync_range+0x10a/0x130 [ 70.670881][ T5667] ext4_buffered_write_iter+0x34f/0x3c0 [ 70.676474][ T5667] ext4_file_write_iter+0xdbf/0xf00 [ 70.681702][ T5667] iter_file_splice_write+0x5ef/0x970 [ 70.687108][ T5667] direct_splice_actor+0x156/0x2a0 [ 70.692251][ T5667] splice_direct_to_actor+0x312/0x680 [ 70.697654][ T5667] do_splice_direct+0xda/0x150 [ 70.702449][ T5667] do_sendfile+0x380/0x650 [ 70.706886][ T5667] __x64_sys_sendfile64+0x105/0x150 [ 70.712108][ T5667] x64_sys_call+0xb39/0x2fb0 [ 70.716743][ T5667] do_syscall_64+0xd2/0x200 [ 70.721264][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.727181][ T5667] [ 70.729522][ T5667] value changed: 0x0a000021 -> 0x04000021 [ 70.735257][ T5667] [ 70.737589][ T5667] Reported by Kernel Concurrency Sanitizer on: [ 70.743774][ T5667] CPU: 1 UID: 0 PID: 5667 Comm: syz.3.623 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 70.756122][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.766292][ T5667] ================================================================== [ 70.888912][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.