last executing test programs: 4.322852653s ago: executing program 1 (id=352): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000500)) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) getgid() getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff]) 3.133353848s ago: executing program 1 (id=367): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.938541748s ago: executing program 2 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x2005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x7683, &(0x7f0000000500)={0x0, 0xfffffffe, 0x0, 0x2, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x0) 2.888183509s ago: executing program 2 (id=371): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000540)='./control\x00', 0x60) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 2.844066819s ago: executing program 1 (id=373): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 2.843929779s ago: executing program 2 (id=374): unshare(0x2c020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0) 2.720568179s ago: executing program 1 (id=375): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 2.127702802s ago: executing program 3 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) unshare(0x22020600) 2.033255792s ago: executing program 4 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x2005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x7683, &(0x7f0000000500)={0x0, 0xfffffffe, 0x0, 0x2, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x0) 1.969636372s ago: executing program 2 (id=383): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x24040840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 1.965525892s ago: executing program 3 (id=384): creat(&(0x7f0000000100)='./file0\x00', 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x11442, 0x5, 0x0, 0x1, 0x9, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x204004, &(0x7f00000004c0)={[{@dioread_nolock}, {@i_version}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141842, 0x0) pwrite64(r1, &(0x7f00000007c0)='c', 0xfdef, 0xfecc) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 1.965066702s ago: executing program 4 (id=385): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.831041013s ago: executing program 1 (id=386): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000480)='\x00\x00', 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/87, 0x57}], 0x1) 1.679025143s ago: executing program 4 (id=387): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.291195595s ago: executing program 2 (id=388): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 1.275922075s ago: executing program 0 (id=389): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x80900, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001540)=@newtaction={0x14, 0x30, 0x12f, 0x4000}, 0x14}}, 0x0) 1.275678585s ago: executing program 3 (id=390): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9690a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="39a7", 0x2}], 0x1}}], 0x2, 0x4008440) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(0x3) 1.232350445s ago: executing program 0 (id=391): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.102500876s ago: executing program 0 (id=392): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.101497576s ago: executing program 3 (id=402): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x54) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@grpid}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") getxattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0) 1.050568436s ago: executing program 0 (id=393): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x5, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(0x0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 784.690077ms ago: executing program 1 (id=394): unshare(0x2c020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0) 745.657247ms ago: executing program 3 (id=395): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 561.931328ms ago: executing program 3 (id=396): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 561.450468ms ago: executing program 4 (id=397): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000600)={[{@dots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@nodots}, {@nodots}, {@fat=@errors_remount}, {@dots}, {@dots}, {@dots}, {@fat=@quiet}, {@fat=@nfs_stale_rw}, {@dots}, {@fat=@check_strict}, {@nodots}, {@fat=@showexec}, {@nodots}, {@dots}, {@fat=@gid}, {@dots}]}, 0xfd, 0x1f0, &(0x7f0000000240)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40018}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd91, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8004) 536.912448ms ago: executing program 0 (id=398): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) creat(&(0x7f0000000380)='./file0\x00', 0x0) 518.415588ms ago: executing program 0 (id=399): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x24040840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 280.061309ms ago: executing program 2 (id=400): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000500)) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) getgid() getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff]) 188.346009ms ago: executing program 4 (id=401): creat(&(0x7f0000000100)='./file0\x00', 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x11442, 0x5, 0x0, 0x1, 0x9, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x204004, &(0x7f00000004c0)={[{@dioread_nolock}, {@i_version}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141842, 0x0) pwrite64(r1, &(0x7f00000007c0)='c', 0xfdef, 0xfecc) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 0s ago: executing program 4 (id=403): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 23.945037][ T29] audit: type=1400 audit(1749009840.929:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.945648][ T3304] cgroup: Unknown subsys name 'net' [ 23.967776][ T29] audit: type=1400 audit(1749009840.929:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.996349][ T29] audit: type=1400 audit(1749009840.959:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.080579][ T3304] cgroup: Unknown subsys name 'cpuset' [ 24.086838][ T3304] cgroup: Unknown subsys name 'rlimit' [ 24.195473][ T29] audit: type=1400 audit(1749009841.179:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.219263][ T29] audit: type=1400 audit(1749009841.179:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.239850][ T29] audit: type=1400 audit(1749009841.179:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.253736][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.260194][ T29] audit: type=1400 audit(1749009841.179:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.289396][ T29] audit: type=1400 audit(1749009841.209:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.314368][ T29] audit: type=1400 audit(1749009841.209:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.317546][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.337745][ T29] audit: type=1400 audit(1749009841.249:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.444491][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 25.502048][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 25.534815][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 25.548507][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.555639][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.562905][ T3314] bridge_slave_0: entered allmulticast mode [ 25.569616][ T3314] bridge_slave_0: entered promiscuous mode [ 25.580258][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 25.600785][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.607842][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.615024][ T3314] bridge_slave_1: entered allmulticast mode [ 25.621389][ T3314] bridge_slave_1: entered promiscuous mode [ 25.656951][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.678669][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 25.687945][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.718351][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.725539][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.732699][ T3318] bridge_slave_0: entered allmulticast mode [ 25.738959][ T3318] bridge_slave_0: entered promiscuous mode [ 25.753787][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.761255][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.768356][ T3323] bridge_slave_0: entered allmulticast mode [ 25.774787][ T3323] bridge_slave_0: entered promiscuous mode [ 25.781698][ T3314] team0: Port device team_slave_0 added [ 25.787394][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.794625][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.801838][ T3323] bridge_slave_1: entered allmulticast mode [ 25.808176][ T3323] bridge_slave_1: entered promiscuous mode [ 25.814297][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.821384][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.828555][ T3318] bridge_slave_1: entered allmulticast mode [ 25.834786][ T3318] bridge_slave_1: entered promiscuous mode [ 25.846803][ T3314] team0: Port device team_slave_1 added [ 25.889907][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.897052][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.923135][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.934838][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.945254][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.954606][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.961719][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.968913][ T3315] bridge_slave_0: entered allmulticast mode [ 25.975398][ T3315] bridge_slave_0: entered promiscuous mode [ 25.983662][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.990625][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.016593][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.028450][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.038452][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.047695][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.054801][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.062106][ T3315] bridge_slave_1: entered allmulticast mode [ 26.068609][ T3315] bridge_slave_1: entered promiscuous mode [ 26.107493][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.114803][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.122002][ T3321] bridge_slave_0: entered allmulticast mode [ 26.128217][ T3321] bridge_slave_0: entered promiscuous mode [ 26.135270][ T3323] team0: Port device team_slave_0 added [ 26.146413][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.156963][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.166195][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.173351][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.180557][ T3321] bridge_slave_1: entered allmulticast mode [ 26.186788][ T3321] bridge_slave_1: entered promiscuous mode [ 26.193458][ T3323] team0: Port device team_slave_1 added [ 26.204427][ T3318] team0: Port device team_slave_0 added [ 26.232530][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.242250][ T3318] team0: Port device team_slave_1 added [ 26.257339][ T3315] team0: Port device team_slave_0 added [ 26.263441][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.270430][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.296557][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.307769][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.317065][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.324052][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.351181][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.367687][ T3314] hsr_slave_0: entered promiscuous mode [ 26.373776][ T3314] hsr_slave_1: entered promiscuous mode [ 26.380207][ T3315] team0: Port device team_slave_1 added [ 26.407925][ T3321] team0: Port device team_slave_0 added [ 26.414052][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.421039][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.447462][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.476050][ T3321] team0: Port device team_slave_1 added [ 26.488026][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.495036][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.521075][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.532089][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.539195][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.565232][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.582284][ T3323] hsr_slave_0: entered promiscuous mode [ 26.588333][ T3323] hsr_slave_1: entered promiscuous mode [ 26.594217][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.601800][ T3323] Cannot create hsr debugfs directory [ 26.619044][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.626041][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.651938][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.677977][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.685002][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.711251][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.724461][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.731525][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.757637][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.793156][ T3318] hsr_slave_0: entered promiscuous mode [ 26.799314][ T3318] hsr_slave_1: entered promiscuous mode [ 26.805235][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.812834][ T3318] Cannot create hsr debugfs directory [ 26.844567][ T3315] hsr_slave_0: entered promiscuous mode [ 26.850727][ T3315] hsr_slave_1: entered promiscuous mode [ 26.856531][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.864128][ T3315] Cannot create hsr debugfs directory [ 26.880508][ T3321] hsr_slave_0: entered promiscuous mode [ 26.886282][ T3321] hsr_slave_1: entered promiscuous mode [ 26.892207][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.899772][ T3321] Cannot create hsr debugfs directory [ 27.032691][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.052443][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.062866][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.073595][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.093472][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.103246][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.112320][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.123445][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.160066][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.175719][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.184710][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.199146][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.231977][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.242773][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.251660][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.265010][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.276218][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.285784][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.307284][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.321685][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.328716][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.340303][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.347424][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.356795][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.365721][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.374838][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.383587][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.392973][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.408585][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.415689][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.445742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.452919][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.475132][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.498955][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.520476][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.527558][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.542809][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.549981][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.575644][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.594858][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.625479][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.644392][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.664560][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.671688][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.680985][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.688039][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.702843][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.721930][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.734591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.741727][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.763451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.770580][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.787982][ T3314] veth0_vlan: entered promiscuous mode [ 27.816786][ T3314] veth1_vlan: entered promiscuous mode [ 27.861713][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.874160][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.896017][ T3314] veth0_macvtap: entered promiscuous mode [ 27.934220][ T3314] veth1_macvtap: entered promiscuous mode [ 27.944029][ T3323] veth0_vlan: entered promiscuous mode [ 27.960840][ T3323] veth1_vlan: entered promiscuous mode [ 27.968150][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.991412][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.019022][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.027550][ T3323] veth0_macvtap: entered promiscuous mode [ 28.036375][ T3323] veth1_macvtap: entered promiscuous mode [ 28.048013][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.056804][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.065611][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.074430][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.101276][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.119229][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.131652][ T3318] veth0_vlan: entered promiscuous mode [ 28.154017][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.163896][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.177435][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.186278][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.195130][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.212945][ T3318] veth1_vlan: entered promiscuous mode [ 28.248429][ T3318] veth0_macvtap: entered promiscuous mode [ 28.267838][ T3318] veth1_macvtap: entered promiscuous mode [ 28.280519][ T3321] veth0_vlan: entered promiscuous mode [ 28.291971][ T3315] veth0_vlan: entered promiscuous mode [ 28.306280][ T3321] veth1_vlan: entered promiscuous mode [ 28.326839][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.340439][ T3315] veth1_vlan: entered promiscuous mode [ 28.357223][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.381530][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.390467][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.399241][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.408003][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.434558][ T3321] veth0_macvtap: entered promiscuous mode [ 28.475007][ T3321] veth1_macvtap: entered promiscuous mode [ 28.483971][ C1] hrtimer: interrupt took 45974 ns [ 28.502607][ T3459] loop1: detected capacity change from 0 to 512 [ 28.509615][ T3315] veth0_macvtap: entered promiscuous mode [ 28.523188][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.532955][ T3315] veth1_macvtap: entered promiscuous mode [ 28.547066][ T3459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 28.554350][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.560425][ T3463] sd 0:0:1:0: device reset [ 28.567343][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.577964][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.589388][ T3459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.589686][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.610813][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.619604][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.628538][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.651219][ T3459] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.666613][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.675453][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.684306][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.693100][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.740808][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.906093][ T3306] udevd[3306]: failed to send result of seq 7362 to main daemon: Connection refused [ 28.980258][ T3484] udevd[3484]: failed to send result of seq 7363 to main daemon: Transport endpoint is not connected [ 29.000298][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 29.000314][ T29] audit: type=1326 audit(1749009845.989:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 29.035807][ T29] audit: type=1400 audit(1749009845.989:164): avc: denied { accept } for pid=3477 comm="syz.4.5" lport=59796 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.058728][ T29] audit: type=1326 audit(1749009846.019:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 29.081843][ T29] audit: type=1326 audit(1749009846.019:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3480 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 29.092238][ T3489] syz.4.13 uses obsolete (PF_INET,SOCK_PACKET) [ 29.110173][ T29] audit: type=1400 audit(1749009846.069:167): avc: denied { create } for pid=3488 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.172431][ T29] audit: type=1400 audit(1749009846.099:168): avc: denied { create } for pid=3488 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.192268][ T29] audit: type=1400 audit(1749009846.119:169): avc: denied { create } for pid=3495 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 29.211541][ T29] audit: type=1400 audit(1749009846.119:170): avc: denied { create } for pid=3493 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.230835][ T29] audit: type=1400 audit(1749009846.119:171): avc: denied { setopt } for pid=3495 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 29.250531][ T29] audit: type=1400 audit(1749009846.119:172): avc: denied { connect } for pid=3495 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 29.365974][ T3555] loop4: detected capacity change from 0 to 1024 [ 29.432224][ T3555] ======================================================= [ 29.432224][ T3555] WARNING: The mand mount option has been deprecated and [ 29.432224][ T3555] and is ignored by this kernel. Remove the mand [ 29.432224][ T3555] option from the mount to silence this warning. [ 29.432224][ T3555] ======================================================= [ 29.604244][ T3555] EXT4-fs (loop4): inodes count not valid: 32 vs 1312 [ 29.634273][ T3562] loop3: detected capacity change from 0 to 1024 [ 29.647588][ T3562] EXT4-fs: Ignoring removed bh option [ 29.653154][ T3562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.724770][ T3562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.818736][ T3572] loop0: detected capacity change from 0 to 512 [ 29.843024][ T3572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.863253][ T3572] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.889636][ T3570] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3570 comm=syz.1.23 [ 30.080067][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.091879][ T3572] syz.0.22 (3572) used greatest stack depth: 10120 bytes left [ 30.109597][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.317865][ T3600] loop1: detected capacity change from 0 to 512 [ 30.325967][ T3600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.337001][ T3600] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.32: invalid block [ 30.350851][ T3600] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.32: invalid indirect mapped block 4294967295 (level 1) [ 30.357791][ T3607] loop2: detected capacity change from 0 to 512 [ 30.365127][ T3600] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.32: invalid indirect mapped block 4294967295 (level 1) [ 30.386517][ T3600] EXT4-fs (loop1): 2 truncates cleaned up [ 30.392984][ T3600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.423432][ T3607] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 30.467475][ T3607] EXT4-fs (loop2): mount failed [ 30.496357][ T3615] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.1.32: path /6/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 30.642176][ T3622] SELinux: failed to load policy [ 30.795275][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.826967][ T3632] loop1: detected capacity change from 0 to 128 [ 31.095924][ T3638] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 31.218011][ T3650] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 31.234828][ T3648] loop1: detected capacity change from 0 to 4096 [ 31.269264][ T3648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.480803][ T3661] netlink: 'syz.2.55': attribute type 3 has an invalid length. [ 31.511908][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.626965][ T10] IPVS: starting estimator thread 0... [ 31.729852][ T3676] IPVS: using max 2784 ests per chain, 139200 per kthread [ 31.895658][ T3699] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 31.913095][ T3703] netlink: 'syz.2.71': attribute type 10 has an invalid length. [ 31.920988][ T3703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 31.933611][ T3699] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 31.945604][ T3703] team0: Port device geneve1 added [ 32.003659][ T3711] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.033010][ T3717] loop2: detected capacity change from 0 to 512 [ 32.043256][ T3717] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 32.054076][ T3719] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.069405][ T3721] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.79'. [ 32.079040][ T3717] EXT4-fs (loop2): invalid journal inode [ 32.085061][ T3717] EXT4-fs (loop2): can't get journal size [ 32.098961][ T3717] EXT4-fs (loop2): 1 truncate cleaned up [ 32.105270][ T3717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.114205][ T3727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 32.122749][ T3728] TCP: out of memory -- consider tuning tcp_mem [ 32.161405][ T3727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3727 comm=syz.0.82 [ 32.194911][ T3734] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 32.203232][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 32.203549][ T3732] netlink: 340 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.234996][ T3734] team0: Port device team_slave_1 removed [ 32.274568][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.321662][ T3744] capability: warning: `syz.0.89' uses deprecated v2 capabilities in a way that may be insecure [ 32.371496][ T3748] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 32.378097][ T3748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 32.385799][ T3748] vhci_hcd vhci_hcd.0: Device attached [ 32.476586][ T3749] vhci_hcd: connection closed [ 32.546974][ T3503] vhci_hcd: stop threads [ 32.556062][ T3503] vhci_hcd: release socket [ 32.560604][ T3503] vhci_hcd: disconnect device [ 32.614145][ T3764] loop0: detected capacity change from 0 to 128 [ 32.626355][ T3764] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.750483][ T3779] veth0: entered promiscuous mode [ 32.763825][ T3779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 33.163715][ T3804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 33.260068][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 33.346756][ T3827] lo speed is unknown, defaulting to 1000 [ 33.363446][ T3827] lo speed is unknown, defaulting to 1000 [ 33.373984][ T3827] lo speed is unknown, defaulting to 1000 [ 33.380466][ T3827] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.388138][ T3827] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.418748][ T3827] lo speed is unknown, defaulting to 1000 [ 33.450256][ T3827] lo speed is unknown, defaulting to 1000 [ 33.458404][ T3827] lo speed is unknown, defaulting to 1000 [ 33.464699][ T3827] lo speed is unknown, defaulting to 1000 [ 33.481602][ T3827] lo speed is unknown, defaulting to 1000 [ 33.490873][ T3827] lo speed is unknown, defaulting to 1000 [ 33.531143][ T3844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 33.563172][ T3852] loop0: detected capacity change from 0 to 1024 [ 33.589052][ T3855] loop1: detected capacity change from 0 to 1024 [ 33.590840][ T3852] EXT4-fs: Ignoring removed bh option [ 33.597222][ T3855] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.611937][ T3855] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.619942][ T3852] EXT4-fs: inline encryption not supported [ 33.623750][ T3855] JBD2: no valid journal superblock found [ 33.633290][ T3855] EXT4-fs (loop1): Could not load journal inode [ 33.635525][ T3852] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.652252][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 33.665290][ T3852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 33.698144][ T3852] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.111: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.752779][ T3855] SELinux: syz.1.113 (3855) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 33.817263][ T3877] pim6reg1: entered promiscuous mode [ 33.822771][ T3877] pim6reg1: entered allmulticast mode [ 33.834894][ T3852] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.111: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.860850][ T3852] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.111: Failed to acquire dquot type 0 [ 33.885674][ T3852] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 33.924363][ T3852] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.111: mark_inode_dirty error [ 33.951075][ T3852] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 33.973544][ T3852] EXT4-fs (loop0): 1 orphan inode deleted [ 33.986577][ T3852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.999585][ T3560] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:67: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.059406][ T3560] __quota_error: 177 callbacks suppressed [ 34.059425][ T3560] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 34.074694][ T3560] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:67: Failed to release dquot type 0 [ 34.104773][ T3852] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm syz.0.111: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.116552][ T29] audit: type=1400 audit(1749009851.099:347): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 34.151706][ T3852] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 34.175030][ T3911] atomic_op ffff88811c3ccd28 conn xmit_atomic 0000000000000000 [ 34.188049][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.204172][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 34.249452][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 34.270321][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 34.371717][ T29] audit: type=1400 audit(1749009851.359:348): avc: denied { create } for pid=3939 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.515325][ T3960] Zero length message leads to an empty skb [ 34.561939][ T3967] tipc: Started in network mode [ 34.566886][ T3967] tipc: Node identity ac14140f, cluster identity 4711 [ 34.581445][ T3967] tipc: New replicast peer: 10.1.1.2 [ 34.587122][ T3967] tipc: Enabled bearer , priority 10 [ 34.871054][ T4002] loop0: detected capacity change from 0 to 256 [ 34.888200][ T4002] FAT-fs (loop0): bogus number of FAT sectors [ 34.894383][ T4002] FAT-fs (loop0): Can't find a valid FAT filesystem [ 34.905613][ T4005] loop1: detected capacity change from 0 to 512 [ 34.923154][ T4005] EXT4-fs: Ignoring removed nobh option [ 34.939455][ T4005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.021417][ T4005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.054486][ T4008] pim6reg1: entered promiscuous mode [ 35.059898][ T4008] pim6reg1: entered allmulticast mode [ 35.085653][ T4005] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.114864][ T4013] lo speed is unknown, defaulting to 1000 [ 35.152997][ T29] audit: type=1400 audit(1749009852.139:349): avc: denied { remove_name } for pid=4004 comm="syz.1.136" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.175630][ T29] audit: type=1400 audit(1749009852.139:350): avc: denied { rename } for pid=4004 comm="syz.1.136" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.218760][ T29] audit: type=1400 audit(1749009852.199:351): avc: denied { mounton } for pid=4019 comm="syz.2.140" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 35.249687][ T29] audit: type=1400 audit(1749009852.229:352): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.259191][ T4013] process 'syz.0.138' launched './file0' with NULL argv: empty string added [ 35.278636][ T29] audit: type=1400 audit(1749009852.259:353): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.305296][ T29] audit: type=1400 audit(1749009852.259:354): avc: denied { execute_no_trans } for pid=4012 comm="syz.0.138" path="/31/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.348127][ T4026] syzkaller0: entered allmulticast mode [ 35.372707][ T4028] bridge_slave_0: left allmulticast mode [ 35.378440][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.437920][ T4037] loop4: detected capacity change from 0 to 1024 [ 35.471683][ T4037] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 35.481521][ T4037] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 35.493535][ T4035] infiniband syz0: set active [ 35.494991][ T4039] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 35.498550][ T4035] infiniband syz0: added veth0_virt_wifi [ 35.501506][ T4037] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 35.526909][ T4037] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.147: unexpected bad inode w/o EXT4_IGET_BAD [ 35.531284][ T4035] RDS/IB: syz0: added [ 35.541004][ T4039] SELinux: failed to load policy [ 35.549445][ T4035] smc: adding ib device syz0 with port count 1 [ 35.555729][ T4035] smc: ib device syz0 port 1 has pnetid [ 35.562536][ T4037] EXT4-fs (loop4): Remounting filesystem read-only [ 35.569135][ T4037] EXT4-fs (loop4): no journal found [ 35.574451][ T4037] EXT4-fs (loop4): can't get journal size [ 35.590260][ T4037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.613211][ T4042] lo speed is unknown, defaulting to 1000 [ 35.648441][ T4049] IPVS: Error joining to the multicast group [ 35.698531][ T4054] loop2: detected capacity change from 0 to 512 [ 35.709787][ T3390] tipc: Node number set to 2886997007 [ 35.710277][ T4054] EXT4-fs: Ignoring removed orlov option [ 35.731736][ T4054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.732881][ T4056] loop3: detected capacity change from 0 to 512 [ 35.747029][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.760070][ T4054] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.767272][ T4054] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.152: bg 0: block 248: padding at end of block bitmap is not set [ 35.782300][ T4054] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.152: Failed to acquire dquot type 1 [ 35.798224][ T4054] EXT4-fs (loop2): 1 truncate cleaned up [ 35.806828][ T4054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.823456][ T4056] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.841026][ T4056] EXT4-fs (loop3): mount failed [ 35.857212][ T4054] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 35.883265][ T4063] loop1: detected capacity change from 0 to 512 [ 35.890180][ T4063] EXT4-fs: Ignoring removed nobh option [ 35.899347][ T4063] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 35.910955][ T4063] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 35.921098][ T4063] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.156: Corrupt directory, running e2fsck is recommended [ 35.937086][ T4063] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 35.946821][ T4063] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.156: corrupted in-inode xattr: invalid ea_ino [ 35.961398][ T4054] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 35.971965][ T4054] ext4 filesystem being remounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.985428][ T4063] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.156: couldn't read orphan inode 15 (err -117) [ 35.997978][ T4063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.015771][ T4063] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 36.027538][ T4063] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 36.037698][ T4063] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.156: Corrupt directory, running e2fsck is recommended [ 36.055266][ T4063] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 36.067050][ T4063] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 36.077246][ T4063] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.156: Corrupt directory, running e2fsck is recommended [ 36.092632][ T4063] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 36.104191][ T4063] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 36.114306][ T4063] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.156: Corrupt directory, running e2fsck is recommended [ 36.130636][ T4063] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 36.144081][ T4063] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.156: path /29/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 36.166332][ T4063] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 8: comm syz.1.156: path /29/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 36.195202][ T4054] syz.2.152 (4054) used greatest stack depth: 9304 bytes left [ 36.209598][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.265747][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.277639][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.414666][ T4075] bridge0: entered promiscuous mode [ 36.451625][ T4075] bridge0: port 3(macvlan2) entered blocking state [ 36.460902][ T4075] bridge0: port 3(macvlan2) entered disabled state [ 36.472364][ T4075] macvlan2: entered allmulticast mode [ 36.478905][ T4075] bridge0: entered allmulticast mode [ 36.514344][ T4075] macvlan2: left allmulticast mode [ 36.522457][ T4075] bridge0: left allmulticast mode [ 36.541911][ T4075] bridge0: left promiscuous mode [ 36.719958][ T4103] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 36.803006][ T4111] loop4: detected capacity change from 0 to 128 [ 36.995808][ T4121] loop0: detected capacity change from 0 to 128 [ 37.015267][ T4121] batadv_slave_0: entered promiscuous mode [ 37.023272][ T4121] __nla_validate_parse: 6 callbacks suppressed [ 37.023289][ T4121] netlink: 76 bytes leftover after parsing attributes in process `syz.0.178'. [ 37.039699][ T4121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.053153][ T4121] batadv_slave_0 (unregistering): left promiscuous mode [ 37.078148][ T4121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.221412][ T4134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.182'. [ 37.253073][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 37.313140][ T4138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.392335][ T4138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.460133][ T4144] lo speed is unknown, defaulting to 1000 [ 37.548289][ T4138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.612350][ T4138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.688873][ T4138] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.713070][ T4138] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.732780][ T4138] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.753779][ T4138] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.155943][ T4169] Set syz1 is full, maxelem 65536 reached [ 38.353427][ T4203] loop3: detected capacity change from 0 to 128 [ 38.367204][ T4202] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.375288][ T4202] FAT-fs (loop3): Filesystem has been set read-only [ 38.384102][ T4202] syz.3.209: attempt to access beyond end of device [ 38.384102][ T4202] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 38.398048][ T4202] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.405986][ T4202] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.423478][ T4203] syz.3.209: attempt to access beyond end of device [ 38.423478][ T4203] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 38.436808][ T4203] Buffer I/O error on dev loop3, logical block 2065, async page read [ 38.446041][ T4203] syz.3.209: attempt to access beyond end of device [ 38.446041][ T4203] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 38.459312][ T4203] Buffer I/O error on dev loop3, logical block 2066, async page read [ 38.468917][ T4203] syz.3.209: attempt to access beyond end of device [ 38.468917][ T4203] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 38.482322][ T4203] Buffer I/O error on dev loop3, logical block 2067, async page read [ 38.492595][ T4203] syz.3.209: attempt to access beyond end of device [ 38.492595][ T4203] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 38.505849][ T4203] Buffer I/O error on dev loop3, logical block 2068, async page read [ 38.515308][ T4203] syz.3.209: attempt to access beyond end of device [ 38.515308][ T4203] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 38.528592][ T4203] Buffer I/O error on dev loop3, logical block 2069, async page read [ 38.539325][ T4203] syz.3.209: attempt to access beyond end of device [ 38.539325][ T4203] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 38.552760][ T4203] Buffer I/O error on dev loop3, logical block 2070, async page read [ 38.562614][ T4203] syz.3.209: attempt to access beyond end of device [ 38.562614][ T4203] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 38.575905][ T4203] Buffer I/O error on dev loop3, logical block 2071, async page read [ 38.584625][ T4203] syz.3.209: attempt to access beyond end of device [ 38.584625][ T4203] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 38.588554][ T4209] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 38.597799][ T4203] Buffer I/O error on dev loop3, logical block 2072, async page read [ 38.598039][ T4203] syz.3.209: attempt to access beyond end of device [ 38.598039][ T4203] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 38.627190][ T4203] Buffer I/O error on dev loop3, logical block 2065, async page read [ 38.645696][ T4203] Buffer I/O error on dev loop3, logical block 2066, async page read [ 38.730084][ T4225] 9pnet: p9_errstr2errno: server reported unknown error [ 38.806148][ T4236] loop3: detected capacity change from 0 to 128 [ 38.825439][ T4236] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.845457][ T4236] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.874288][ T4241] pim6reg1: entered promiscuous mode [ 38.879678][ T4241] pim6reg1: entered allmulticast mode [ 39.322331][ T4275] loop2: detected capacity change from 0 to 512 [ 39.377286][ T4275] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.390422][ T4275] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.439463][ T4275] EXT4-fs (loop2): 1 truncate cleaned up [ 39.455872][ T4275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.506116][ T4271] loop1: detected capacity change from 0 to 512 [ 39.524974][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 39.524992][ T29] audit: type=1400 audit(1749009856.509:462): avc: denied { watch watch_reads } for pid=4274 comm="syz.2.236" path="/54/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.580986][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.588336][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.654500][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.671142][ T4271] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.702120][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.758147][ T29] audit: type=1400 audit(1749009856.739:463): avc: denied { read } for pid=4284 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.803806][ T4287] loop4: detected capacity change from 0 to 1024 [ 39.817722][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 39.820436][ T4287] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.837624][ T4287] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.862206][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.870754][ T4287] JBD2: no valid journal superblock found [ 39.876999][ T4287] EXT4-fs (loop4): Could not load journal inode [ 39.910374][ T4287] sd 0:0:1:0: device reset [ 39.913407][ T29] audit: type=1326 audit(1749009856.889:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161125e969 code=0x7ffc0000 [ 39.938134][ T29] audit: type=1326 audit(1749009856.889:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161125e969 code=0x7ffc0000 [ 39.961905][ T29] audit: type=1326 audit(1749009856.889:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f161125d2d0 code=0x7ffc0000 [ 39.986011][ T29] audit: type=1326 audit(1749009856.899:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161125e969 code=0x7ffc0000 [ 40.009481][ T29] audit: type=1326 audit(1749009856.899:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161125e969 code=0x7ffc0000 [ 40.032831][ T29] audit: type=1326 audit(1749009856.899:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f161125e969 code=0x7ffc0000 [ 40.059827][ T29] audit: type=1326 audit(1749009856.899:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161125e969 code=0x7ffc0000 [ 40.083266][ T29] audit: type=1326 audit(1749009856.899:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161125e969 code=0x7ffc0000 [ 40.164087][ T4297] loop2: detected capacity change from 0 to 512 [ 40.179276][ T4297] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.187260][ T4297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 40.195431][ T4297] System zones: 1-12 [ 40.199429][ T4297] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 40.199429][ T4297] [ 40.210177][ T4297] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 40.219665][ T4297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.241077][ T4297] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 40.304930][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.456939][ T4308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.490770][ T4313] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 40.503661][ T4313] syz_tun: entered promiscuous mode [ 40.517867][ T4313] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 40.578772][ T4319] loop2: detected capacity change from 0 to 128 [ 40.598710][ T4319] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.615431][ T4319] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.702290][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.853253][ T4337] syz.2.259 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.857640][ T4336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.260'. [ 40.885548][ T4337] tipc: Started in network mode [ 40.890561][ T4337] tipc: Node identity 8, cluster identity 4711 [ 40.896754][ T4337] tipc: Node number set to 8 [ 41.791274][ T4365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.890793][ T4365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.037084][ T4368] syzkaller0: entered promiscuous mode [ 42.042723][ T4368] syzkaller0: entered allmulticast mode [ 42.074284][ T4365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.161659][ T4365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.228806][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.268952][ T4380] loop1: detected capacity change from 0 to 256 [ 42.275150][ T4365] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.291850][ T4365] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.294956][ T4380] netlink: 'syz.1.276': attribute type 13 has an invalid length. [ 42.304100][ T4365] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.325225][ T4365] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.403358][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.410594][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.499441][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.511241][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.571777][ T4380] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.580725][ T4380] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.589881][ T4380] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.598774][ T4380] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.652533][ T36] lo speed is unknown, defaulting to 1000 [ 42.658325][ T36] s…z0: Port: 1 Link DOWN [ 42.737033][ T4404] bridge: RTM_NEWNEIGH with invalid ether address [ 42.860902][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 42.941307][ T4424] loop1: detected capacity change from 0 to 2048 [ 43.024236][ T4375] syz.2.275 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 43.038422][ T4375] CPU: 0 UID: 0 PID: 4375 Comm: syz.2.275 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 43.038515][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.038529][ T4375] Call Trace: [ 43.038538][ T4375] [ 43.038547][ T4375] __dump_stack+0x1d/0x30 [ 43.038573][ T4375] dump_stack_lvl+0xe8/0x140 [ 43.038593][ T4375] dump_stack+0x15/0x1b [ 43.038612][ T4375] dump_header+0x81/0x220 [ 43.038640][ T4375] oom_kill_process+0x334/0x3f0 [ 43.038770][ T4375] out_of_memory+0x979/0xb80 [ 43.038806][ T4375] try_charge_memcg+0x5e6/0x9e0 [ 43.038838][ T4375] obj_cgroup_charge_pages+0xa6/0x150 [ 43.038945][ T4375] __memcg_kmem_charge_page+0x9f/0x170 [ 43.038980][ T4375] __alloc_frozen_pages_noprof+0x188/0x360 [ 43.039029][ T4375] alloc_pages_mpol+0xb3/0x250 [ 43.039058][ T4375] alloc_pages_noprof+0x90/0x130 [ 43.039085][ T4375] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 43.039162][ T4375] __kvmalloc_node_noprof+0x312/0x4f0 [ 43.039188][ T4375] ? ip_set_alloc+0x1f/0x30 [ 43.039215][ T4375] ? ip_set_alloc+0x1f/0x30 [ 43.039243][ T4375] ? __kmalloc_cache_noprof+0x189/0x320 [ 43.039276][ T4375] ip_set_alloc+0x1f/0x30 [ 43.039361][ T4375] hash_netiface_create+0x282/0x740 [ 43.039388][ T4375] ? __pfx_hash_netiface_create+0x10/0x10 [ 43.039468][ T4375] ip_set_create+0x3c9/0x960 [ 43.039505][ T4375] ? __nla_parse+0x40/0x60 [ 43.039526][ T4375] nfnetlink_rcv_msg+0x4c6/0x590 [ 43.039604][ T4375] ? selinux_capable+0x1f9/0x270 [ 43.039642][ T4375] netlink_rcv_skb+0x123/0x220 [ 43.039674][ T4375] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 43.039705][ T4375] nfnetlink_rcv+0x16b/0x1690 [ 43.039799][ T4375] ? __kfree_skb+0x109/0x150 [ 43.039826][ T4375] ? nlmon_xmit+0x4f/0x60 [ 43.039859][ T4375] ? consume_skb+0x49/0x150 [ 43.039881][ T4375] ? nlmon_xmit+0x4f/0x60 [ 43.039908][ T4375] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 43.039944][ T4375] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 43.040023][ T4375] ? __dev_queue_xmit+0x182/0x1fb0 [ 43.040050][ T4375] ? sg_build_indirect+0x3a5/0x450 [ 43.040074][ T4375] ? ref_tracker_free+0x37d/0x3e0 [ 43.040106][ T4375] ? __netlink_deliver_tap+0x4dc/0x500 [ 43.040150][ T4375] netlink_unicast+0x59e/0x670 [ 43.040177][ T4375] netlink_sendmsg+0x58b/0x6b0 [ 43.040212][ T4375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.040295][ T4375] __sock_sendmsg+0x145/0x180 [ 43.040329][ T4375] ____sys_sendmsg+0x31e/0x4e0 [ 43.040359][ T4375] ___sys_sendmsg+0x17b/0x1d0 [ 43.040392][ T4375] __x64_sys_sendmsg+0xd4/0x160 [ 43.040500][ T4375] x64_sys_call+0x2999/0x2fb0 [ 43.040527][ T4375] do_syscall_64+0xd2/0x200 [ 43.040561][ T4375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.040587][ T4375] ? clear_bhb_loop+0x40/0x90 [ 43.040606][ T4375] ? clear_bhb_loop+0x40/0x90 [ 43.040634][ T4375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.040686][ T4375] RIP: 0033:0x7fd5f437e969 [ 43.040701][ T4375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.040726][ T4375] RSP: 002b:00007fd5f29e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.040751][ T4375] RAX: ffffffffffffffda RBX: 00007fd5f45a5fa0 RCX: 00007fd5f437e969 [ 43.040766][ T4375] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 43.040808][ T4375] RBP: 00007fd5f4400ab1 R08: 0000000000000000 R09: 0000000000000000 [ 43.040823][ T4375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.040837][ T4375] R13: 0000000000000000 R14: 00007fd5f45a5fa0 R15: 00007ffd6d216c48 [ 43.040856][ T4375] [ 43.392337][ T4375] memory: usage 307200kB, limit 307200kB, failcnt 182 [ 43.399138][ T4375] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 43.407101][ T4375] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 43.414532][ T4375] Memory cgroup stats for /syz2: [ 43.415137][ T4375] cache 0 [ 43.423122][ T4375] rss 0 [ 43.426154][ T4375] shmem 0 [ 43.429232][ T4375] mapped_file 0 [ 43.432710][ T4375] dirty 0 [ 43.435626][ T4375] writeback 0 [ 43.438971][ T4375] workingset_refault_anon 48 [ 43.443696][ T4375] workingset_refault_file 66 [ 43.448288][ T4375] swap 204800 [ 43.451571][ T4375] swapcached 4096 [ 43.455196][ T4375] nr_memmap_boot_pages 13028 [ 43.459874][ T4375] pgpgin 13027 [ 43.463227][ T4375] pglazyfree 17374 [ 43.467001][ T4375] pgfault 30 [ 43.470271][ T4375] a_other 0 [ 43.473413][ T4375] inactive_anon 4096 [ 43.477292][ T4375] active_anon 0 [ 43.480783][ T4375] inactive_file 0 [ 43.484420][ T4375] active_file 0 [ 43.487918][ T4375] hierarchical_memory_limit 314572800 [ 43.493337][ T4375] hierarchical_memsw_limit 9223372036854771712 [ 43.499490][ T4375] total_cache 0 [ 43.502996][ T4375] total_rss 0 [ 43.506267][ T4375] total_shmem 0 [ 43.509778][ T4375] total_mapped_file 0 [ 43.513812][ T4375] total_dirty 0 [ 43.517282][ T4375] total_writeback 0 [ 43.521107][ T4375] total_workingset_refault_anon 48 [ 43.526270][ T4375] total_workingset_refault_file 66 [ 43.531460][ T4375] total_swap 204800 [ 43.535269][ T4375] total_swapcached 4096 [ 43.539457][ T4375] total_nr_memmap_boot_pages 13028 [ 43.544601][ T4375] total_pgpgin 13027 [ 43.548484][ T4375] total_pglazyfree 17374 [ 43.552820][ T4375] total_pgfault 30 [ 43.556528][ T4375] total_a_other 0 [ 43.560151][ T4375] total_inactive_anon 4096 [ 43.564565][ T4375] total_active_anon 0 [ 43.568542][ T4375] total_inactive_file 0 [ 43.572776][ T4375] total_active_file 0 [ 43.576756][ T4375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.275,pid=4374,uid=0 [ 43.591386][ T4375] Memory cgroup out of memory: Killed process 4374 (syz.2.275) total-vm:95796kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 43.696315][ T4445] loop3: detected capacity change from 0 to 256 [ 43.728350][ T4448] loop3: detected capacity change from 0 to 128 [ 43.784405][ T4448] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.792336][ T4448] FAT-fs (loop3): Filesystem has been set read-only [ 43.822642][ T4448] bio_check_eod: 7 callbacks suppressed [ 43.822658][ T4448] syz.3.302: attempt to access beyond end of device [ 43.822658][ T4448] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 43.852017][ T4448] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.859948][ T4448] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.878016][ T4448] syz.3.302: attempt to access beyond end of device [ 43.878016][ T4448] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.903747][ T4448] syz.3.302: attempt to access beyond end of device [ 43.903747][ T4448] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.945731][ T4448] syz.3.302: attempt to access beyond end of device [ 43.945731][ T4448] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.971618][ T4448] syz.3.302: attempt to access beyond end of device [ 43.971618][ T4448] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.209072][ T4375] syz.2.275 (4375) used greatest stack depth: 6952 bytes left [ 44.327792][ T4436] Set syz1 is full, maxelem 65536 reached [ 44.434022][ T4475] netlink: 'syz.1.313': attribute type 4 has an invalid length. [ 44.476940][ T4475] netlink: 'syz.1.313': attribute type 4 has an invalid length. [ 44.535582][ T4483] netlink: 'syz.3.317': attribute type 39 has an invalid length. [ 44.544611][ T3391] lo speed is unknown, defaulting to 1000 [ 44.550492][ T3391] s…z0: Port: 1 Link ACTIVE [ 44.569429][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 44.569446][ T29] audit: type=1326 audit(1749009861.549:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.607952][ T29] audit: type=1326 audit(1749009861.589:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.631360][ T29] audit: type=1326 audit(1749009861.589:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.691877][ T29] audit: type=1326 audit(1749009861.589:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.715267][ T29] audit: type=1326 audit(1749009861.589:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.738532][ T29] audit: type=1326 audit(1749009861.589:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.761875][ T29] audit: type=1326 audit(1749009861.639:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.785281][ T29] audit: type=1326 audit(1749009861.639:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.856950][ T29] audit: type=1326 audit(1749009861.829:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.880355][ T29] audit: type=1326 audit(1749009861.829:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f437e969 code=0x7ffc0000 [ 44.917790][ T4494] loop2: detected capacity change from 0 to 512 [ 44.924935][ T4494] EXT4-fs: Ignoring removed orlov option [ 44.931493][ T4494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.972272][ T4494] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.983574][ T4494] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.322: bg 0: block 248: padding at end of block bitmap is not set [ 45.039943][ T4494] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.322: Failed to acquire dquot type 1 [ 45.076918][ T4494] EXT4-fs (loop2): 1 truncate cleaned up [ 45.094627][ T4494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.115471][ T4494] EXT4-fs (loop2): shut down requested (2) [ 45.123880][ T4494] EXT4-fs: Ignoring removed orlov option [ 45.130325][ T4494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.167725][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.840677][ T4520] loop4: detected capacity change from 0 to 2048 [ 45.868962][ T4520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 45.974904][ T4532] openvswitch: netlink: Message has 6 unknown bytes. [ 46.008266][ T4528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.023701][ T4528] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 914 with error 28 [ 46.036275][ T4528] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.036275][ T4528] [ 46.044265][ T4539] loop3: detected capacity change from 0 to 512 [ 46.046240][ T4528] EXT4-fs (loop4): Total free blocks count 0 [ 46.053569][ T4539] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.058336][ T4528] EXT4-fs (loop4): Free/Dirty block details [ 46.070840][ T4539] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.340: bg 0: block 254: padding at end of block bitmap is not set [ 46.074294][ T4528] EXT4-fs (loop4): free_blocks=2415919104 [ 46.089686][ T4539] EXT4-fs (loop3): Remounting filesystem read-only [ 46.094227][ T4528] EXT4-fs (loop4): dirty_blocks=928 [ 46.106139][ T4528] EXT4-fs (loop4): Block reservation details [ 46.107062][ T4539] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.112230][ T4528] EXT4-fs (loop4): i_reserved_data_blocks=58 [ 46.131529][ T4539] EXT4-fs (loop3): 1 truncate cleaned up [ 46.137675][ T4539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.191390][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.221800][ T3560] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 46.382674][ T4568] loop1: detected capacity change from 0 to 1024 [ 46.393262][ T4568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.408647][ T4560] capability: warning: `syz.4.349' uses 32-bit capabilities (legacy support in use) [ 47.050157][ T4594] lo speed is unknown, defaulting to 1000 [ 47.318495][ T4600] lo speed is unknown, defaulting to 1000 [ 47.391958][ T4606] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.505773][ T4606] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.558327][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'. [ 47.569024][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.585414][ T4606] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.597320][ T4610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4610 comm=syz.2.366 [ 47.655258][ T4606] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.702307][ T4606] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.714012][ T4606] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.725859][ T4606] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.744105][ T4606] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.215722][ T4640] lo speed is unknown, defaulting to 1000 [ 48.475942][ T4644] netlink: 'syz.3.379': attribute type 4 has an invalid length. [ 48.486632][ T4644] netlink: 'syz.3.379': attribute type 4 has an invalid length. [ 48.518827][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 48.542405][ T4646] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4646 comm=syz.3.380 [ 48.577124][ T4648] loop3: detected capacity change from 0 to 512 [ 48.583844][ T4648] EXT4-fs: Ignoring removed orlov option [ 48.590909][ T4648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.604342][ T4648] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.612667][ T4648] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.381: bg 0: block 248: padding at end of block bitmap is not set [ 48.633731][ T4648] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.381: Failed to acquire dquot type 1 [ 48.645726][ T4648] EXT4-fs (loop3): 1 truncate cleaned up [ 48.661792][ T4648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.678134][ T4648] EXT4-fs (loop3): shut down requested (2) [ 48.684620][ T4648] EXT4-fs: Ignoring removed orlov option [ 48.690432][ T4648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.729575][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.771068][ T4655] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.043481][ T4655] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.097007][ T4663] loop3: detected capacity change from 0 to 2048 [ 49.106707][ T4655] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.130460][ T4663] EXT4-fs: Ignoring removed i_version option [ 49.151640][ T4663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.167084][ T4655] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.169973][ T4663] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.226062][ T4655] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.240913][ T4663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.384: bg 0: block 345: padding at end of block bitmap is not set [ 49.241170][ T4655] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.267111][ T4655] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.278850][ T4655] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.284666][ T4663] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 49.299881][ T4663] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.299881][ T4663] [ 49.409627][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.468884][ T4672] lo speed is unknown, defaulting to 1000 [ 49.468908][ T4676] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 49.520611][ T4678] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 49.599657][ T4681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 49.620958][ T4681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4681 comm=syz.0.392 [ 49.634264][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 49.634281][ T29] audit: type=1326 audit(1749009866.619:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5373de969 code=0x7ffc0000 [ 49.671545][ T4683] loop3: detected capacity change from 0 to 1024 [ 49.678602][ T29] audit: type=1326 audit(1749009866.619:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5373de969 code=0x7ffc0000 [ 49.679126][ T4683] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 49.701899][ T29] audit: type=1326 audit(1749009866.649:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5373de969 code=0x7ffc0000 [ 49.701955][ T29] audit: type=1326 audit(1749009866.649:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5373de9a3 code=0x7ffc0000 [ 49.756950][ T29] audit: type=1326 audit(1749009866.649:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5373dd41f code=0x7ffc0000 [ 49.780037][ T29] audit: type=1326 audit(1749009866.649:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff5373de9f7 code=0x7ffc0000 [ 49.803343][ T29] audit: type=1326 audit(1749009866.649:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5373dd2d0 code=0x7ffc0000 [ 49.826695][ T29] audit: type=1326 audit(1749009866.659:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5373de56b code=0x7ffc0000 [ 49.850155][ T29] audit: type=1326 audit(1749009866.659:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff5373dd5ca code=0x7ffc0000 [ 49.873283][ T29] audit: type=1326 audit(1749009866.659:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff5373dd5ca code=0x7ffc0000 [ 49.956828][ T4685] netlink: 'syz.0.393': attribute type 39 has an invalid length. [ 50.138713][ T4691] loop4: detected capacity change from 0 to 256 [ 50.150849][ T4691] netlink: 'syz.4.397': attribute type 13 has an invalid length. [ 50.211585][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.218975][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.297197][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.328226][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.370901][ T4691] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.379372][ T4691] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.387998][ T4691] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.396513][ T4691] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.423599][ T4706] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.436992][ T4719] loop2: detected capacity change from 0 to 1024 [ 50.471077][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.484887][ T4706] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.535114][ T4723] loop4: detected capacity change from 0 to 2048 [ 50.542677][ T4723] EXT4-fs: Ignoring removed i_version option [ 50.543459][ T4706] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.572270][ T4723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.585193][ T4723] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.601376][ T4706] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.624047][ T4723] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.401: bg 0: block 345: padding at end of block bitmap is not set [ 50.638885][ T4723] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 50.651445][ T4723] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.651445][ T4723] [ 50.675845][ T4706] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.697669][ T4706] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.706556][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.725060][ T4706] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.739206][ T4706] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.078675][ T4724] ================================================================== [ 51.086809][ T4724] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 51.095054][ T4724] [ 51.097381][ T4724] write to 0xffff8881073a254c of 4 bytes by task 4719 on cpu 1: [ 51.105084][ T4724] xas_set_mark+0x12b/0x140 [ 51.109578][ T4724] __folio_start_writeback+0x1dd/0x440 [ 51.115038][ T4724] ext4_bio_write_folio+0x5ad/0x9f0 [ 51.120231][ T4724] mpage_submit_folio+0xe4/0x170 [ 51.125171][ T4724] mpage_process_page_bufs+0x39b/0x4a0 [ 51.130627][ T4724] mpage_prepare_extent_to_map+0x741/0xaa0 [ 51.136422][ T4724] ext4_do_writepages+0xa1a/0x21c0 [ 51.141610][ T4724] ext4_writepages+0x176/0x300 [ 51.146364][ T4724] do_writepages+0x1c3/0x310 [ 51.150957][ T4724] file_write_and_wait_range+0x156/0x2c0 [ 51.156586][ T4724] generic_buffers_fsync_noflush+0x45/0x120 [ 51.162483][ T4724] ext4_sync_file+0x1ab/0x690 [ 51.167260][ T4724] vfs_fsync_range+0x10d/0x130 [ 51.172025][ T4724] ext4_buffered_write_iter+0x34f/0x3c0 [ 51.177558][ T4724] ext4_file_write_iter+0xdbf/0xf00 [ 51.182742][ T4724] iter_file_splice_write+0x5f2/0x970 [ 51.188125][ T4724] direct_splice_actor+0x153/0x2a0 [ 51.193253][ T4724] splice_direct_to_actor+0x30f/0x680 [ 51.198632][ T4724] do_splice_direct+0xda/0x150 [ 51.203411][ T4724] do_sendfile+0x380/0x650 [ 51.207819][ T4724] __x64_sys_sendfile64+0x105/0x150 [ 51.213006][ T4724] x64_sys_call+0xb39/0x2fb0 [ 51.217595][ T4724] do_syscall_64+0xd2/0x200 [ 51.222102][ T4724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.227999][ T4724] [ 51.230310][ T4724] read to 0xffff8881073a254c of 4 bytes by task 4724 on cpu 0: [ 51.237910][ T4724] filemap_write_and_wait_range+0xfc/0x340 [ 51.243760][ T4724] filemap_invalidate_pages+0xa4/0x1a0 [ 51.249248][ T4724] kiocb_invalidate_pages+0x6e/0x80 [ 51.254456][ T4724] __iomap_dio_rw+0x5d4/0x1250 [ 51.259274][ T4724] iomap_dio_rw+0x40/0x90 [ 51.263665][ T4724] ext4_file_write_iter+0xad9/0xf00 [ 51.268941][ T4724] iter_file_splice_write+0x5f2/0x970 [ 51.274370][ T4724] direct_splice_actor+0x153/0x2a0 [ 51.279541][ T4724] splice_direct_to_actor+0x30f/0x680 [ 51.284976][ T4724] do_splice_direct+0xda/0x150 [ 51.289880][ T4724] do_sendfile+0x380/0x650 [ 51.294339][ T4724] __x64_sys_sendfile64+0x105/0x150 [ 51.299583][ T4724] x64_sys_call+0xb39/0x2fb0 [ 51.304236][ T4724] do_syscall_64+0xd2/0x200 [ 51.308791][ T4724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.314730][ T4724] [ 51.317076][ T4724] value changed: 0x0a000021 -> 0x04000021 [ 51.322815][ T4724] [ 51.325164][ T4724] Reported by Kernel Concurrency Sanitizer on: [ 51.331340][ T4724] CPU: 0 UID: 0 PID: 4724 Comm: syz.2.400 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 51.343362][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.353438][ T4724] ================================================================== [ 51.370255][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.