last executing test programs: 57.278935918s ago: executing program 1 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@dax}, {@journal_dev={'journal_dev', 0x3d, 0xb7f}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@errors_continue}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 57.15673946s ago: executing program 1 (id=10): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) capset(0x0, 0x0) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22000600) io_uring_setup(0x7d4, 0x0) setresuid(0x0, 0xee00, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x10000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 56.147627755s ago: executing program 1 (id=15): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80)="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") openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 55.857032979s ago: executing program 1 (id=19): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 54.724017596s ago: executing program 1 (id=26): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) preadv2(r2, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000800)=""/129, 0x81}], 0x6, 0x30b, 0x40, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x3}, 0x18) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x10}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5b79}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600), 0x4) getrusage(0x1, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32], 0x50) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, 0x1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'filter\x00'}}, {@uid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '@}['}}, {@smackfsroot={'smackfsroot', 0x3d, ',}'}}, {@hash}]}, 0x3, 0x443, &(0x7f0000001400)="$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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES64, @ANYRES32, @ANYBLOB="060006000300000006"], 0x50}, 0x4, 0x700000000000000}, 0x0) 54.434660001s ago: executing program 1 (id=28): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001, 0x497}, 0x4c58, 0x1, 0x0, 0x0, 0x5, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000008e13dbdf2514000000240007800c000300000000000000000008000200050000000c0004"], 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8, 0x98, 0xa8, 0xa8, 0x0, 0x2, 0x20520, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb9c612a, 0x1, @perf_config_ext={0x100, 0x8}, 0x210, 0x7ff, 0x2, 0x4, 0xd81, 0xb37a, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f00000002c0)={@id={0x2, 0x0, @auto="4de1f414ad488fc552862d0d0597c163"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 54.411619851s ago: executing program 32 (id=28): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001, 0x497}, 0x4c58, 0x1, 0x0, 0x0, 0x5, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000008e13dbdf2514000000240007800c000300000000000000000008000200050000000c0004"], 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8, 0x98, 0xa8, 0xa8, 0x0, 0x2, 0x20520, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb9c612a, 0x1, @perf_config_ext={0x100, 0x8}, 0x210, 0x7ff, 0x2, 0x4, 0xd81, 0xb37a, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f00000002c0)={@id={0x2, 0x0, @auto="4de1f414ad488fc552862d0d0597c163"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 7.2785122s ago: executing program 2 (id=353): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, 0x0, &(0x7f0000000000), 0x6c, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x14000, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f0000000180)=0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(r3) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) 7.116880403s ago: executing program 2 (id=354): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x2000000}, 0xffffffff}, 0x1c) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x3000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@remote, @in6=@private1}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400, 0x1, 0x0) stat(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) gettid() r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) getpid() r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, r4) 6.216441546s ago: executing program 2 (id=357): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="130000004e007f049e", 0x9}, {&(0x7f0000000180)="78cabf89254400111bb8", 0xa}], 0x2}, 0x0) 4.127620558s ago: executing program 4 (id=372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) capset(0x0, 0x0) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22000600) io_uring_setup(0x7d4, 0x0) setresuid(0x0, 0xee00, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x10000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.818927672s ago: executing program 0 (id=375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) readahead(0xffffffffffffffff, 0x7, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000100)={0xa, 0x4e24, 0x22af, @rand_addr=' \x01\x00', 0x5}, 0x1c) r1 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r3 = signalfd(r2, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r3, &(0x7f0000000000)='\x00', 0x2, 0x1100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000680)={0x10000000}) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000580)="44c394f305916c4516999da288a8", 0x5ea, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, &(0x7f0000000a40)}, 0x20) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r6, 0x0) 3.751154663s ago: executing program 5 (id=376): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) open$dir(0x0, 0x0, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000000c0), 0x4) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/23, 0x17}, 0x2042) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, r3}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000180)) io_setup(0x1, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) 3.732428444s ago: executing program 0 (id=378): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.687165864s ago: executing program 5 (id=379): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000380), 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000300)) set_mempolicy(0x1, &(0x7f0000000280)=0x9, 0x80) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, r4, &(0x7f00000001c0)={0x0, 0x81, 0x92, 0xfffffffffffffffb, 0x32f9, 0x4, 0x1, 0x2, 0x9}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 3.396358059s ago: executing program 5 (id=380): r0 = eventfd2(0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r5, 0xa, 0x13) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x4}}) close_range(r0, r1, 0x0) 3.30866791s ago: executing program 3 (id=381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x4000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) readv(r4, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 3.190768962s ago: executing program 4 (id=382): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 2.954164995s ago: executing program 2 (id=383): openat(0xffffffffffffff9c, 0x0, 0x82000, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x82000, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0xfffffff7, 0x0, 0x0, 0xffffffff, 0x0, "f937267f0f7ba56f03a6a1ae3f0a6a64c64c56"}) 2.754950778s ago: executing program 0 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd209, 0xd, "10040600e277444000000b00002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) unshare(0x68040200) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.784849633s ago: executing program 5 (id=385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1fffffffffffffe5, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c0000fffd00119078000000000000000000004e2006000000040000000e0000000900000000000000"], 0x0) 1.402896119s ago: executing program 4 (id=386): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x20, &(0x7f0000000240)={0x0, 0x17, 0x0, &(0x7f0000000340)=""/249, 0xf9}}, 0x5) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000015006aff00000000bfa2000000000000070200d5bc00d6ffffffb703000008000000b7040000000000008519ed9fbeb249bc512b000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r5, &(0x7f0000000000)='\x00', 0x2, 0x1100) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000680)={0x10000000}) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="44c394f305916c4516999da288a8", 0x5ea, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, &(0x7f0000000a40)}, 0x20) r6 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) timer_gettime(r7, 0x0) 1.402066979s ago: executing program 2 (id=396): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x4000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) readv(r4, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 1.391751889s ago: executing program 3 (id=387): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) preadv2(r2, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000800)=""/129, 0x81}], 0x6, 0x30b, 0x40, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x3}, 0x18) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x10}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5b79}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600), 0x4) getrusage(0x1, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32], 0x50) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, 0x1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'filter\x00'}}, {@uid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '@}['}}, {@smackfsroot={'smackfsroot', 0x3d, ',}'}}, {@hash}]}, 0x3, 0x443, &(0x7f0000001400)="$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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES64, @ANYRES32, @ANYBLOB="060006000300000006"], 0x50}, 0x4, 0x700000000000000}, 0x0) 1.024766584s ago: executing program 0 (id=388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10) poll(0x0, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) umount2(&(0x7f0000000040)='./file0\x00', 0x7) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.024225714s ago: executing program 3 (id=389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x4}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xa6}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5, 0x0, 0x0, @void, @value}, 0x20) pwritev(r4, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4800) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0xffffffffffffff6e, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3}}, @TCA_CT_MARK={0x8, 0x10, 0x2000000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_register(r11, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8, &(0x7f00000000c0)=""/8, 0x40f00, 0x41, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x89d5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r5, 0x1, r6, r7, r8, r10, 0xffffffffffffffff], &(0x7f0000000500)=[{0x4, 0x3, 0x10, 0xb}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) 994.477295ms ago: executing program 4 (id=390): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x2000000}, 0xffffffff}, 0x1c) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x3000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@remote, @in6=@private1}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400, 0x1, 0x0) stat(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) gettid() r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) getpid() r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, r4) 944.081686ms ago: executing program 5 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x0) fsmount(r1, 0x1, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 877.915557ms ago: executing program 3 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0ae1", "0000fd9f", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000680), 0x77, 0x1581) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 845.140957ms ago: executing program 3 (id=393): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 717.138669ms ago: executing program 0 (id=395): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="140000000400008004000c000900000043bb290cb1e7a3e11d509ab80633a531ac9799de5658b1318d411eaa0bc718b6d0a882759314c0255b5040bf056c0c494f4abf2fd32d71ea0de1c8fc29da8833a35e278737772e3597e02e69f9fe020e0ae78d360e734e31611476add136dc0d1f06ed2b622d4c583274f3c8c69dcdccea7e3528756d557542e425165f35fbaf6a7112d8b3db26f071ad59637d8dc10af4ff89e2eb2474c26f70eb1519e6bb7e3a99c5c264f9fb53ce972ba52a5bc2310c0bed28597e4fcf701b9b3edcf2914ba581993ea609a2aa468c2fa6285ea72587174fbd56b502e4ec91", @ANYRES32=0x0], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x2}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x3, 0xb8, 0x40, 0x2, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x71430, 0x0, 0x4, 0x3e5, 0xf8ad, 0x0, 0x0, 0x0, 0x3}) close(r0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x0) writev(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x0, @void, @value}, 0x28) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) unshare(0x28020480) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB, @ANYRES64], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 442.269293ms ago: executing program 2 (id=397): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket(0x28, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000000000300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x54) sendfile(r3, r4, 0x0, 0x7ffff000) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 239.788976ms ago: executing program 0 (id=398): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 143.773178ms ago: executing program 4 (id=399): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) preadv2(r2, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000000800)=""/129, 0x81}], 0x6, 0x30b, 0x40, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x3}, 0x18) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x10}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5b79}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600), 0x4) getrusage(0x1, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32], 0x50) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, 0x1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'filter\x00'}}, {@uid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '@}['}}, {@smackfsroot={'smackfsroot', 0x3d, ',}'}}, {@hash}]}, 0x3, 0x443, &(0x7f0000001400)="$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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES64, @ANYRES32, @ANYBLOB="060006000300000006"], 0x50}, 0x4, 0x700000000000000}, 0x0) 864.92µs ago: executing program 4 (id=400): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x2) r4 = semget$private(0x0, 0x5, 0x0) semtimedop(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 0s ago: executing program 5 (id=410): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fspick(r0, &(0x7f0000000180)='./file0\x00', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r5}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff181100009a3c8aed431bb92ca157d94e021567280e164d47f0f79003b0e0d18df2c9e7d5dd61e784fbf67118836ffc81549b0b12a0a74c9f8ed1a31b02f6527721873479732d1d8886adaaeb8348645ed985fff816eb2afe4d98af2c99103f5f751452c00719565f31067c42d8fcb415dbfeaaad52b3c04a3c4749098f5e339a0e7db4fe99d487c0e23563630beb50582e8ab28bdfe505973ccc2b9456959df36ce854ad8a763f5fddff0bdd16c43f963d19da4b5a54a93b6af6e94c51497c928fdf73f86fe6c553feb2177d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) fcntl$setown(r8, 0x8, r6) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): im0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.424167][ T3325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.438170][ T3328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.448864][ T3328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.458756][ T3328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.469221][ T3328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.479091][ T3328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.490126][ T3328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.500116][ T3328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.510656][ T3328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.521368][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.530184][ T3328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.538979][ T3328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.547764][ T3328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.556651][ T3328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.783070][ T3460] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 33.793887][ T3460] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 33.900437][ T3475] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 34.065049][ T3480] loop1: detected capacity change from 0 to 512 [ 34.078479][ T3480] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 34.086837][ T3480] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 34.103285][ T3480] EXT4-fs (loop1): 1 truncate cleaned up [ 34.109518][ T3480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.143950][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.354770][ T3488] loop2: detected capacity change from 0 to 512 [ 34.371042][ T3488] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11: invalid indirect mapped block 256 (level 2) [ 34.399794][ T3488] EXT4-fs (loop2): 2 truncates cleaned up [ 34.416192][ T3488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.688415][ T31] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 34.874113][ T3497] mmap: syz.3.12 (3497) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.951835][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1224 with error 28 [ 34.964476][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.964476][ T31] [ 34.974369][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 34.980373][ T31] EXT4-fs (loop2): Free/Dirty block details [ 34.986316][ T31] EXT4-fs (loop2): free_blocks=0 [ 34.991267][ T31] EXT4-fs (loop2): dirty_blocks=1228 [ 34.996653][ T31] EXT4-fs (loop2): Block reservation details [ 35.002703][ T31] EXT4-fs (loop2): i_reserved_data_blocks=1228 [ 35.125419][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.160340][ C0] hrtimer: interrupt took 31331 ns [ 35.398386][ T3510] netlink: 'syz.2.16': attribute type 7 has an invalid length. [ 35.423740][ T3512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 35.459158][ T3516] loop0: detected capacity change from 0 to 512 [ 35.470827][ T3518] loop1: detected capacity change from 0 to 2048 [ 35.483263][ T3516] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.496439][ T3516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.516671][ T3516] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.554858][ T3516] EXT4-fs (loop0): 1 truncate cleaned up [ 35.571420][ T3516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.602047][ T3521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.631123][ T3518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.997909][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.068910][ T3532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'. [ 36.087416][ T3532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22'. [ 36.096341][ T3532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22'. [ 36.105163][ T3532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 36.210510][ T3532] syz.0.22 (3532) used greatest stack depth: 10920 bytes left [ 36.337532][ T3534] loop2: detected capacity change from 0 to 8192 [ 36.407541][ T3526] syz.4.20 (3526) used greatest stack depth: 10232 bytes left [ 36.466600][ T3521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.627238][ T3521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.725608][ T3521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.793745][ T3543] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 36.873461][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.931426][ T3521] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.978295][ T3546] binfmt_misc: register: failed to install interpreter file ./file2 [ 36.984003][ T3521] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.010706][ T3543] netlink: 64 bytes leftover after parsing attributes in process `syz.0.27'. [ 37.019636][ T3543] netlink: 64 bytes leftover after parsing attributes in process `syz.0.27'. [ 37.047212][ T3521] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.071257][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.104966][ T3521] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.143540][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.169875][ T3551] loop0: detected capacity change from 0 to 256 [ 37.232945][ T3556] loop2: detected capacity change from 0 to 256 [ 37.241675][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.249895][ T3554] loop3: detected capacity change from 0 to 1024 [ 37.266436][ T3554] EXT4-fs: Ignoring removed bh option [ 37.272064][ T3554] EXT4-fs: inline encryption not supported [ 37.344302][ T3554] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.374402][ T3554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 37.387958][ T51] bridge_slave_1: left allmulticast mode [ 37.393809][ T51] bridge_slave_1: left promiscuous mode [ 37.399591][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.412576][ T51] bridge_slave_0: left allmulticast mode [ 37.412635][ T3554] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.32: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.418305][ T51] bridge_slave_0: left promiscuous mode [ 37.437916][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.538765][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.550289][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.566458][ T3554] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.32: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.581994][ T51] bond0 (unregistering): Released all slaves [ 37.590569][ T3554] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.32: Failed to acquire dquot type 0 [ 37.603771][ T3554] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 37.618686][ T3554] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.32: mark_inode_dirty error [ 37.638576][ T3554] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 37.658704][ T3554] EXT4-fs (loop3): 1 orphan inode deleted [ 37.672116][ T31] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.689934][ T51] hsr_slave_0: left promiscuous mode [ 37.696519][ T51] hsr_slave_1: left promiscuous mode [ 37.703700][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.710492][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 37.710509][ T29] audit: type=1400 audit(1747221395.046:286): avc: denied { create } for pid=3574 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.716660][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.732560][ T31] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 37.744876][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.768014][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 37.779962][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.780083][ T29] audit: type=1400 audit(1747221395.096:287): avc: denied { write } for pid=3574 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.787600][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.813342][ T29] audit: type=1400 audit(1747221395.096:288): avc: denied { append } for pid=3574 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.827119][ T3554] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.858999][ T51] veth1_macvtap: left promiscuous mode [ 37.861959][ T29] audit: type=1400 audit(1747221395.166:289): avc: denied { unlink } for pid=3586 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.865014][ T51] veth0_macvtap: left promiscuous mode [ 37.895226][ T51] veth1_vlan: left promiscuous mode [ 37.895220][ T3554] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.32: Invalid inode table block 1 in block_group 0 [ 37.913419][ T3554] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 37.921941][ T51] veth0_vlan: left promiscuous mode [ 37.923177][ T3554] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz.3.32: mark_inode_dirty error [ 37.989682][ T29] audit: type=1400 audit(1747221395.326:290): avc: denied { watch watch_reads } for pid=3552 comm="syz.3.32" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.990404][ T3554] process 'syz.3.32' launched './file0' with NULL argv: empty string added [ 38.034825][ T29] audit: type=1400 audit(1747221395.366:291): avc: denied { execute_no_trans } for pid=3552 comm="syz.3.32" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.087458][ T29] audit: type=1326 audit(1747221395.426:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3588 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64b1e969 code=0x7ffc0000 [ 38.110892][ T3589] loop0: detected capacity change from 0 to 256 [ 38.119149][ T51] team0 (unregistering): Port device team_slave_1 removed [ 38.120997][ T29] audit: type=1326 audit(1747221395.446:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3588 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f64b1e969 code=0x7ffc0000 [ 38.149760][ T29] audit: type=1326 audit(1747221395.446:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3588 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6f64b1e969 code=0x7ffc0000 [ 38.175712][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 38.184526][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 38.193782][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 38.202883][ T51] team0 (unregistering): Port device team_slave_0 removed [ 38.317048][ T3600] loop2: detected capacity change from 0 to 2048 [ 38.319298][ T3547] chnl_net:caif_netlink_parms(): no params data found [ 38.349936][ T3600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.461949][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.469081][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.480341][ T3547] bridge_slave_0: entered allmulticast mode [ 38.486980][ T3547] bridge_slave_0: entered promiscuous mode [ 38.502064][ T3616] vhci_hcd: invalid port number 96 [ 38.503829][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.507424][ T3616] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 38.514562][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.528886][ T3547] bridge_slave_1: entered allmulticast mode [ 38.535765][ T3547] bridge_slave_1: entered promiscuous mode [ 38.570635][ T3547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.581332][ T3547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.600445][ T3607] team0: Port device team_slave_0 removed [ 38.636289][ T3547] team0: Port device team_slave_0 added [ 38.670051][ T3547] team0: Port device team_slave_1 added [ 38.690926][ T3547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.697988][ T3547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.724015][ T3547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.738183][ T3547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.745220][ T3547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.771342][ T3547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.836459][ T3631] loop3: detected capacity change from 0 to 4096 [ 38.857757][ T3547] hsr_slave_0: entered promiscuous mode [ 38.864027][ T3547] hsr_slave_1: entered promiscuous mode [ 38.884567][ T3631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.966796][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.048004][ T3643] loop2: detected capacity change from 0 to 512 [ 39.095544][ T3643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.119776][ T3547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.139427][ T3643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 39.147795][ T3643] System zones: 1-12 [ 39.153952][ T3547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.164066][ T3643] EXT4-fs (loop2): 1 truncate cleaned up [ 39.170170][ T3643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.194035][ T3547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.215067][ T3547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.256393][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.263634][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.270978][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.278073][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.368713][ T3547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.378245][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.386736][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.418956][ T3547] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.480801][ T1779] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.487939][ T1779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.499029][ T1779] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.506145][ T1779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.034500][ T3547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.045047][ T3547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.275366][ T3690] hub 9-0:1.0: USB hub found [ 40.294931][ T3690] hub 9-0:1.0: 8 ports detected [ 40.323401][ T3547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.615523][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.645693][ T3547] veth0_vlan: entered promiscuous mode [ 40.657802][ T3547] veth1_vlan: entered promiscuous mode [ 40.676588][ T3547] veth0_macvtap: entered promiscuous mode [ 40.685047][ T3547] veth1_macvtap: entered promiscuous mode [ 40.703253][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.713772][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.723621][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.734164][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.744065][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.754560][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.764497][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.775053][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.852253][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.862831][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.873350][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.883226][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.893712][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.903675][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.914132][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.924081][ T3547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.934530][ T3547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.949301][ T3547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.958095][ T3547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.966872][ T3547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.975618][ T3547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.984408][ T3547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457363][ T3761] loop4: detected capacity change from 0 to 256 [ 41.498954][ T3761] msdos: Unknown parameter '¼?•«H°(ðBí  ÒÏaÍî"!5¸' [ 41.743459][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.522540][ T3809] bond1: entered promiscuous mode [ 42.525041][ T3812] loop0: detected capacity change from 0 to 512 [ 42.527685][ T3809] bond1: entered allmulticast mode [ 42.534859][ T3812] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.539979][ T3809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.556217][ T3812] EXT4-fs (loop0): 1 truncate cleaned up [ 42.565979][ T3809] bond1 (unregistering): Released all slaves [ 42.566921][ T3812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.736866][ T3819] bridge_slave_0: left allmulticast mode [ 42.742746][ T3819] bridge_slave_0: left promiscuous mode [ 42.748492][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.759396][ T3819] bridge_slave_1: left allmulticast mode [ 42.765210][ T3819] bridge_slave_1: left promiscuous mode [ 42.771020][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.783497][ T3819] bond0: (slave bond_slave_0): Releasing backup interface [ 42.794940][ T3819] bond0: (slave bond_slave_1): Releasing backup interface [ 42.808866][ T3819] team0: Port device team_slave_0 removed [ 42.834153][ T3819] team0: Port device team_slave_1 removed [ 42.841162][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.848663][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.873145][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.880675][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.012686][ T3825] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 43.260650][ T3831] loop2: detected capacity change from 0 to 1024 [ 43.267524][ T3831] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 43.315481][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 43.315494][ T29] audit: type=1326 audit(1747221400.566:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.5.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 43.345039][ T29] audit: type=1326 audit(1747221400.566:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.5.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 43.400987][ T3830] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 43.409285][ T3830] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 43.533671][ T3837] __nla_validate_parse: 7 callbacks suppressed [ 43.533714][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.62'. [ 43.548792][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.62'. [ 43.557632][ T3837] netlink: 'syz.5.62': attribute type 4 has an invalid length. [ 43.602463][ T3838] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.618284][ T29] audit: type=1400 audit(1747221400.966:536): avc: denied { connect } for pid=3829 comm="#" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.642580][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.62'. [ 43.652646][ T3830] !: renamed from dummy0 (while UP) [ 43.672512][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.679972][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.695550][ T3837] netlink: 16 bytes leftover after parsing attributes in process `syz.5.62'. [ 43.704882][ T29] audit: type=1400 audit(1747221401.036:537): avc: denied { write } for pid=3829 comm="syz.3.61" path="socket:[6446]" dev="sockfs" ino=6446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.731074][ T3839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.738604][ T3839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.845365][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119beae00: rx timeout, send abort [ 43.862001][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119beae00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.871728][ T29] audit: type=1400 audit(1747221401.206:538): avc: denied { read } for pid=2989 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.898345][ T29] audit: type=1400 audit(1747221401.206:539): avc: denied { search } for pid=2989 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.920015][ T29] audit: type=1400 audit(1747221401.206:540): avc: denied { write } for pid=2989 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.941489][ T29] audit: type=1400 audit(1747221401.206:541): avc: denied { add_name } for pid=2989 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.962251][ T29] audit: type=1400 audit(1747221401.206:542): avc: denied { create } for pid=2989 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.982908][ T29] audit: type=1400 audit(1747221401.206:543): avc: denied { append open } for pid=2989 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.019899][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.085338][ T3849] syz.0.64 uses obsolete (PF_INET,SOCK_PACKET) [ 44.294522][ T3860] syz.2.65: attempt to access beyond end of device [ 44.294522][ T3860] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 44.311668][ T3860] loop2: detected capacity change from 0 to 512 [ 44.321212][ T3860] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 44.331336][ T3860] EXT4-fs (loop2): invalid journal inode [ 44.337123][ T3860] EXT4-fs (loop2): can't get journal size [ 44.855266][ T3863] vlan2: entered allmulticast mode [ 44.860543][ T3863] bond0: entered allmulticast mode [ 44.865769][ T3863] bond_slave_0: entered allmulticast mode [ 44.871507][ T3863] bond_slave_1: entered allmulticast mode [ 44.894796][ T3860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 44.903071][ T3860] System zones: 1-12, 13-13 [ 44.912460][ T3860] EXT4-fs (loop2): 1 truncate cleaned up [ 44.918597][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.163220][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 45.180553][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.197250][ T3872] loop4: detected capacity change from 0 to 1024 [ 45.239108][ T3872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.295814][ T3872] bridge_slave_0: left allmulticast mode [ 45.301804][ T3872] bridge_slave_0: left promiscuous mode [ 45.307710][ T3872] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.321417][ T3872] bridge_slave_1: left allmulticast mode [ 45.327239][ T3872] bridge_slave_1: left promiscuous mode [ 45.333093][ T3872] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.342988][ T3879] loop2: detected capacity change from 0 to 2048 [ 45.356738][ T3872] bond0: (slave bond_slave_0): Releasing backup interface [ 45.383172][ T3872] bond_slave_0: left allmulticast mode [ 45.396298][ T3872] bond0: (slave bond_slave_1): Releasing backup interface [ 45.410785][ T3872] bond_slave_1: left allmulticast mode [ 45.446031][ T3872] team0: Port device team_slave_0 removed [ 45.467698][ T3872] team0: Port device team_slave_1 removed [ 45.479600][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.488369][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.499563][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.507165][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.603170][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.653540][ T3901] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 45.689259][ T3903] loop0: detected capacity change from 0 to 128 [ 45.850845][ T3908] loop2: detected capacity change from 0 to 2048 [ 45.857968][ T3908] EXT4-fs: Ignoring removed bh option [ 45.863631][ T3908] EXT4-fs: dax option not supported [ 46.767236][ T3913] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 46.959645][ T3915] loop5: detected capacity change from 0 to 512 [ 46.967152][ T3913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.975896][ T3913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.004073][ T3915] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 47.019575][ T3915] EXT4-fs (loop5): orphan cleanup on readonly fs [ 47.027454][ T3915] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.043199][ T3915] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 47.050136][ T3915] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.83: iget: immutable or append flags not allowed on symlinks [ 47.084562][ T3915] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.83: couldn't read orphan inode 16 (err -117) [ 47.115298][ T3918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 47.133409][ T3915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.155744][ T3921] x_tables: unsorted underflow at hook 3 [ 47.163512][ T3921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 47.194270][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.224581][ T3923] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.371525][ T3933] loop2: detected capacity change from 0 to 128 [ 47.382672][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.87'. [ 47.406829][ T3932] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 47.414763][ T3932] FAT-fs (loop2): Filesystem has been set read-only [ 47.470217][ T3932] syz.2.89: attempt to access beyond end of device [ 47.470217][ T3932] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 47.498776][ T3932] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 47.506755][ T3932] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 47.535300][ T3933] block device autoloading is deprecated and will be removed. [ 47.543041][ T3933] syz.2.89: attempt to access beyond end of device [ 47.543041][ T3933] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 47.576272][ T3940] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.709724][ T3949] loop2: detected capacity change from 0 to 512 [ 47.718824][ T3946] loop3: detected capacity change from 0 to 8192 [ 47.734309][ T3949] journal_path: Non-blockdev passed as './bus' [ 47.740549][ T3949] EXT4-fs: error: could not find journal device path [ 47.784900][ T3952] tipc: Started in network mode [ 47.789848][ T3952] tipc: Node identity 46ce24483808, cluster identity 4711 [ 47.797158][ T3952] tipc: Enabled bearer , priority 0 [ 47.883105][ T3946] syz.3.90 (3946): attempted to duplicate a private mapping with mremap. This is not supported. [ 47.919687][ T3952] tipc: Disabling bearer [ 47.965518][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 48.212858][ T3959] loop4: detected capacity change from 0 to 512 [ 48.249738][ T3959] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.96: iget: special inode unallocated [ 48.264609][ T3959] EXT4-fs (loop4): no journal found [ 48.269869][ T3959] EXT4-fs (loop4): can't get journal size [ 48.288710][ T3959] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 48.298555][ T3959] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.96: iget: special inode unallocated [ 48.312497][ T3959] EXT4-fs (loop4): failed to initialize system zone (-117) [ 48.319762][ T3959] EXT4-fs (loop4): mount failed [ 48.363218][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 48.363232][ T29] audit: type=1400 audit(1747221405.706:746): avc: denied { sqpoll } for pid=3957 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.485918][ T29] audit: type=1400 audit(1747221405.816:747): avc: denied { map } for pid=3973 comm="GPL" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.509773][ T29] audit: type=1400 audit(1747221405.816:748): avc: denied { read write } for pid=3973 comm="GPL" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.609717][ T3983] loop0: detected capacity change from 0 to 2048 [ 48.635368][ T3989] Zero length message leads to an empty skb [ 48.662305][ T29] audit: type=1400 audit(1747221405.986:749): avc: denied { read } for pid=3963 comm="syz.3.98" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.685454][ T29] audit: type=1400 audit(1747221405.986:750): avc: denied { open } for pid=3963 comm="syz.3.98" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.800031][ T29] audit: type=1400 audit(1747221406.136:751): avc: denied { write } for pid=3982 comm="syz.0.100" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.882349][ T29] audit: type=1400 audit(1747221406.176:752): avc: denied { create } for pid=3963 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.887398][ T3983] hub 9-0:1.0: USB hub found [ 48.901686][ T29] audit: type=1400 audit(1747221406.176:753): avc: denied { setopt } for pid=3963 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.943257][ T29] audit: type=1400 audit(1747221406.276:754): avc: denied { write } for pid=3963 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.973073][ T3983] hub 9-0:1.0: 8 ports detected [ 49.001783][ T29] audit: type=1326 audit(1747221406.336:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.5.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4edd5d5927 code=0x7ffc0000 [ 49.068748][ T4010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4010 comm=syz.2.101 [ 49.363768][ T4045] loop2: detected capacity change from 0 to 256 [ 49.370256][ T4045] ======================================================= [ 49.370256][ T4045] WARNING: The mand mount option has been deprecated and [ 49.370256][ T4045] and is ignored by this kernel. Remove the mand [ 49.370256][ T4045] option from the mount to silence this warning. [ 49.370256][ T4045] ======================================================= [ 49.389638][ T4037] __nla_validate_parse: 1 callbacks suppressed [ 49.389659][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.103'. [ 49.612809][ T4054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.839830][ T4061] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.108'. [ 49.868581][ T4060] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.108'. [ 49.893248][ T4063] netlink: 32 bytes leftover after parsing attributes in process `syz.4.109'. [ 49.965724][ T4067] loop0: detected capacity change from 0 to 1024 [ 49.973956][ T4067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.983230][ T4067] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.998831][ T4067] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 50.011357][ T4067] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.111: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.025952][ T4067] EXT4-fs (loop0): Remounting filesystem read-only [ 50.032593][ T4067] EXT4-fs (loop0): 1 orphan inode deleted [ 50.039211][ T4067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.052740][ T4067] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.291098][ T4071] loop2: detected capacity change from 0 to 2048 [ 50.298954][ T4071] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 50.482060][ T4080] loop3: detected capacity change from 0 to 164 [ 50.489538][ T4080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.526107][ T4080] syzkaller0: entered promiscuous mode [ 50.531727][ T4080] syzkaller0: entered allmulticast mode [ 50.892267][ T4093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.924373][ T4093] team0: Port device bond1 added [ 51.087665][ T4100] set match dimension is over the limit! [ 51.179775][ T4095] veth1_to_team: entered promiscuous mode [ 51.267280][ T4089] loop4: detected capacity change from 0 to 1024 [ 51.278011][ T4100] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 51.293953][ T4089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.306712][ T4089] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.335874][ T4105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 51.376438][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.425009][ T4111] loop4: detected capacity change from 0 to 512 [ 51.433269][ T4111] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.442549][ T4111] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 51.462351][ T4111] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 51.471357][ T4111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 51.480207][ T4111] System zones: 0-2, 18-18, 34-34 [ 51.486929][ T4111] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.503169][ T4111] EXT4-fs (loop4): 1 truncate cleaned up [ 51.509408][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.574562][ T4111] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #2: block 3: comm syz.4.123: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 51.791761][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.855634][ T4121] netlink: 'syz.4.125': attribute type 10 has an invalid length. [ 52.222165][ T4127] delete_channel: no stack [ 52.237687][ T4131] loop4: detected capacity change from 0 to 256 [ 52.244591][ T4131] vfat: Unknown parameter 'shortn@me' [ 52.253786][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 52.293692][ T4134] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 52.309354][ T4134] bond2: entered promiscuous mode [ 52.315497][ T4134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.503641][ T4141] netlink: 3 bytes leftover after parsing attributes in process `syz.2.130'. [ 52.516950][ T4141] batadv0: entered promiscuous mode [ 52.518232][ T4143] loop3: detected capacity change from 0 to 512 [ 52.522295][ T4141] batadv0: entered allmulticast mode [ 52.523723][ T4141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.542924][ T4141] bond2: (slave batadv0): making interface the new active one [ 52.551446][ T4141] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 52.653640][ T4143] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 52.662483][ T4143] System zones: 0-2, 18-18, 34-35 [ 52.733783][ T4143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.780522][ T4143] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.828699][ T4149] netlink: 388 bytes leftover after parsing attributes in process `syz.0.133'. [ 52.877908][ T4149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.987272][ T4149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.045797][ T4149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.106172][ T4149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.189074][ T4149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.287153][ T4149] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.315944][ T4157] bridge0: entered promiscuous mode [ 53.328497][ T4157] macvlan3: entered promiscuous mode [ 53.336600][ T4157] bridge0: port 1(macvlan3) entered blocking state [ 53.343682][ T4157] bridge0: port 1(macvlan3) entered disabled state [ 53.353515][ T4157] macvlan3: entered allmulticast mode [ 53.358987][ T4157] bridge0: entered allmulticast mode [ 53.367431][ T4157] macvlan3: left allmulticast mode [ 53.373195][ T4157] bridge0: left allmulticast mode [ 53.381005][ T4157] bridge0: left promiscuous mode [ 53.405946][ T4149] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.452711][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 53.452728][ T29] audit: type=1326 audit(1747221410.796:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 53.462978][ T4149] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.515066][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.542426][ T29] audit: type=1400 audit(1747221410.876:1109): avc: denied { read write } for pid=4163 comm="syz.2.138" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.597707][ T4168] netlink: 'syz.3.139': attribute type 27 has an invalid length. [ 53.611760][ T29] audit: type=1400 audit(1747221410.916:1110): avc: denied { open } for pid=4163 comm="syz.2.138" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.637452][ T29] audit: type=1400 audit(1747221410.936:1111): avc: denied { create } for pid=4163 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.656825][ T29] audit: type=1326 audit(1747221410.936:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 53.680212][ T29] audit: type=1326 audit(1747221410.936:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 53.703696][ T29] audit: type=1326 audit(1747221410.936:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 53.727080][ T29] audit: type=1326 audit(1747221410.936:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 53.805121][ T29] audit: type=1326 audit(1747221411.146:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f565becab39 code=0x7ffc0000 [ 53.828513][ T29] audit: type=1326 audit(1747221411.146:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 54.127347][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.132774][ T4182] loop0: detected capacity change from 0 to 1024 [ 54.134634][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.160293][ T4182] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.140: Failed to acquire dquot type 0 [ 54.176255][ T4184] loop5: detected capacity change from 0 to 512 [ 54.196130][ T4182] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 54.234065][ T4184] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 54.245081][ T4182] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.140: corrupted inode contents [ 54.268604][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.306617][ T4182] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.140: mark_inode_dirty error [ 54.326721][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.384738][ T4182] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.140: corrupted inode contents [ 54.422374][ T4182] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.140: mark_inode_dirty error [ 54.454807][ T4188] SELinux: syz.2.142 (4188) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 54.471756][ T4182] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.140: corrupted inode contents [ 54.506475][ T4182] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 54.536361][ T4182] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.140: corrupted inode contents [ 54.578411][ T4182] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.140: mark_inode_dirty error [ 54.624010][ T4168] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.633100][ T4168] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.642116][ T4168] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.651071][ T4168] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.666626][ T4182] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 54.679241][ T4182] EXT4-fs (loop0): 1 truncate cleaned up [ 54.685457][ T4182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.692881][ T4192] loop4: detected capacity change from 0 to 1024 [ 54.716306][ T4182] EXT4-fs: Ignoring removed orlov option [ 54.725947][ T4192] EXT4-fs: Ignoring removed bh option [ 54.741731][ T4182] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 54.751400][ T4182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.783525][ T4195] netlink: 76 bytes leftover after parsing attributes in process `syz.2.144'. [ 54.801863][ T4182] EXT4-fs (loop0): can't enable nombcache during remount [ 54.809676][ T4192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.843004][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.892012][ T4202] netlink: 3 bytes leftover after parsing attributes in process `syz.3.147'. [ 54.901006][ T4202] 0ªX¹¦À: renamed from caif0 [ 54.907737][ T4202] 0ªX¹¦À: entered allmulticast mode [ 54.913247][ T4202] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 55.012504][ T4202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.147'. [ 55.026409][ T4206] loop5: detected capacity change from 0 to 1024 [ 55.050178][ T4206] EXT4-fs: Ignoring removed nobh option [ 55.055875][ T4206] EXT4-fs: Ignoring removed bh option [ 55.140103][ T4206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.188973][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.362931][ T4206] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.148: Allocating blocks 481-513 which overlap fs metadata [ 55.521014][ T4206] EXT4-fs (loop5): Remounting filesystem read-only [ 55.593525][ T4205] EXT4-fs (loop5): pa ffff888106e56070: logic 256, phys. 369, len 9 [ 55.739084][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.800388][ T4220] loop2: detected capacity change from 0 to 764 [ 55.815594][ T4220] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 55.972005][ T4222] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 55.972083][ T4222] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 56.036786][ T4228] loop2: detected capacity change from 0 to 2048 [ 56.058370][ T4228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.145508][ T4234] hub 2-0:1.0: USB hub found [ 56.160677][ T4234] hub 2-0:1.0: 8 ports detected [ 56.178292][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.235147][ T4236] loop2: detected capacity change from 0 to 512 [ 56.242547][ T4236] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 56.252821][ T4236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 56.252994][ T4236] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.253424][ T4236] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 56.263408][ T4236] EXT4-fs (loop2): Remounting filesystem read-only [ 56.263845][ T4236] EXT4-fs (loop2): 1 truncate cleaned up [ 56.264350][ T4236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 56.264892][ T4236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 56.682463][ T4247] serio: Serial port ptm1 [ 57.553316][ T4258] can0: slcan on ttyS3. [ 57.557730][ T4257] loop3: detected capacity change from 0 to 128 [ 57.611712][ T4256] can0 (unregistered): slcan off ttyS3. [ 57.701694][ T4264] geneve0: entered allmulticast mode [ 57.745827][ T4265] loop2: detected capacity change from 0 to 512 [ 57.801722][ T4265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.889821][ T4265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.955902][ T4265] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.991524][ T4280] loop0: detected capacity change from 0 to 1024 [ 58.012702][ T4280] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.167: Failed to acquire dquot type 0 [ 58.040358][ T4280] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 58.055290][ T4262] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 58.072177][ T4280] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.167: corrupted inode contents [ 58.122412][ T4280] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.167: mark_inode_dirty error [ 58.142696][ T4280] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.167: corrupted inode contents [ 58.154870][ T4262] syz.2.165 (4262) used greatest stack depth: 9568 bytes left [ 58.164275][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.174206][ T4280] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.167: mark_inode_dirty error [ 58.212442][ T4280] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.167: corrupted inode contents [ 58.251925][ T4280] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 58.288267][ T4280] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.167: corrupted inode contents [ 58.320771][ T4280] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.167: mark_inode_dirty error [ 58.352773][ T4280] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 58.375365][ T4280] EXT4-fs (loop0): 1 truncate cleaned up [ 58.382275][ T4280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.434175][ T4280] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.515091][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 58.515107][ T29] audit: type=1400 audit(1747221415.856:1426): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.602435][ T29] audit: type=1400 audit(1747221415.946:1427): avc: denied { create } for pid=4311 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.608722][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 58.640640][ T29] audit: type=1400 audit(1747221415.946:1428): avc: denied { write } for pid=4311 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.750455][ T29] audit: type=1400 audit(1747221416.086:1429): avc: denied { append } for pid=4325 comm="syz.5.172" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.774994][ T4326] pim6reg1: entered promiscuous mode [ 58.780330][ T4326] pim6reg1: entered allmulticast mode [ 58.782370][ T29] audit: type=1400 audit(1747221416.096:1430): avc: denied { ioctl } for pid=4325 comm="syz.5.172" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.854218][ T4334] loop2: detected capacity change from 0 to 512 [ 58.890178][ T29] audit: type=1400 audit(1747221416.226:1431): avc: denied { kexec_image_load } for pid=4337 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 58.892289][ T4334] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 58.910215][ T29] audit: type=1400 audit(1747221416.226:1432): avc: denied { getopt } for pid=4325 comm="syz.5.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.978511][ T4339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4339 comm=syz.3.174 [ 58.993039][ T4334] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.022133][ T4334] EXT4-fs (loop2): mount failed [ 59.089551][ T29] audit: type=1326 audit(1747221416.426:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 59.112999][ T29] audit: type=1326 audit(1747221416.426:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 59.164275][ T4352] netlink: 'syz.5.175': attribute type 1 has an invalid length. [ 59.197933][ T4352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.236767][ T4352] bond1: (slave ip6gretap1): making interface the new active one [ 59.257699][ T4352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 59.265728][ T4352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 59.273572][ T4352] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 59.292325][ T4034] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 59.311730][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 59.713107][ T4427] 9pnet_fd: Insufficient options for proto=fd [ 59.719938][ T4427] atomic_op ffff8881046d9d28 conn xmit_atomic 0000000000000000 [ 59.791742][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 59.812128][ T4033] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 60.209245][ T4462] loop4: detected capacity change from 0 to 8192 [ 60.312286][ T3998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 60.616852][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.658793][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.727683][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.806810][ T4471] loop5: detected capacity change from 0 to 256 [ 60.872130][ T4473] loop2: detected capacity change from 0 to 2048 [ 60.883634][ T4471] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 60.892116][ T3998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 60.899995][ T3998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 60.925401][ T4473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.000204][ T4473] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.253504][ T4473] netlink: 68 bytes leftover after parsing attributes in process `syz.2.187'. [ 61.293745][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.362492][ T4480] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 61.371468][ T4480] loop2: detected capacity change from 0 to 164 [ 61.518468][ T4478] loop0: detected capacity change from 0 to 256 [ 61.591764][ T4003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 61.625696][ T4485] Cannot find add_set index 0 as target [ 61.803395][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 61.844991][ T4493] netlink: 'syz.0.193': attribute type 16 has an invalid length. [ 61.852853][ T4493] netlink: 'syz.0.193': attribute type 17 has an invalid length. [ 62.010330][ T4493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.048138][ T4503] loop3: detected capacity change from 0 to 764 [ 62.085795][ T4503] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.110327][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 62.133121][ T4503] hsr_slave_0: left promiscuous mode [ 62.149716][ T4503] hsr_slave_1: left promiscuous mode [ 62.162312][ T4507] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 62.168978][ T4507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.176523][ T4507] vhci_hcd vhci_hcd.0: Device attached [ 62.185326][ T4507] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 62.191967][ T4507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.199526][ T4507] vhci_hcd vhci_hcd.0: Device attached [ 62.224481][ T4507] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 62.231129][ T4507] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.238796][ T4507] vhci_hcd vhci_hcd.0: Device attached [ 62.258160][ T4515] bond_slave_1: entered promiscuous mode [ 62.267639][ T4505] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 62.276532][ T4505] ref_ctr increment failed for inode: 0xa6 offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff88811d142c00 [ 62.281824][ T4516] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 62.294356][ T4516] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.302157][ T4516] vhci_hcd vhci_hcd.0: Device attached [ 62.309590][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 62.323758][ T4505] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 62.323978][ T4507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.332246][ T4505] ref_ctr decrement failed for inode: 0xa6 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811d142c00 [ 62.353025][ T4515] bond0: (slave bond_slave_1): Releasing backup interface [ 62.356653][ T4520] hub 2-0:1.0: USB hub found [ 62.362246][ T4507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.366305][ T4521] tipc: Can't bind to reserved service type 1 [ 62.375495][ T4507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.379015][ T4520] hub 2-0:1.0: 8 ports detected [ 62.390310][ T4505] uprobe: syz.5.192:4505 failed to unregister, leaking uprobe [ 62.392945][ T3537] vhci_hcd: vhci_device speed not set [ 62.400079][ T4515] bond_slave_1 (unregistering): left promiscuous mode [ 62.413998][ T4507] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(25) [ 62.420692][ T4507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.428331][ T4507] vhci_hcd vhci_hcd.0: Device attached [ 62.440478][ T4525] loop4: detected capacity change from 0 to 512 [ 62.447206][ T4525] EXT4-fs: Ignoring removed nobh option [ 62.450697][ T4517] vhci_hcd: connection closed [ 62.452951][ T4522] vhci_hcd: connection closed [ 62.454216][ T4005] vhci_hcd: stop threads [ 62.461952][ T4512] vhci_hcd: connection closed [ 62.462399][ T4005] vhci_hcd: release socket [ 62.471690][ T3537] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 62.475681][ T4005] vhci_hcd: disconnect device [ 62.483110][ T4509] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 62.498866][ T4005] vhci_hcd: stop threads [ 62.503221][ T4005] vhci_hcd: release socket [ 62.504012][ T4508] vhci_hcd: connection closed [ 62.507637][ T4005] vhci_hcd: disconnect device [ 62.507804][ T4005] vhci_hcd: stop threads [ 62.512586][ T4510] vhci_hcd: connection closed [ 62.517066][ T4005] vhci_hcd: release socket [ 62.517083][ T4005] vhci_hcd: disconnect device [ 62.523840][ T4005] vhci_hcd: stop threads [ 62.539640][ T4005] vhci_hcd: release socket [ 62.544078][ T4005] vhci_hcd: disconnect device [ 62.549672][ T4005] vhci_hcd: stop threads [ 62.554047][ T4005] vhci_hcd: release socket [ 62.558503][ T4005] vhci_hcd: disconnect device [ 62.565432][ T4525] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.198: corrupted inode contents [ 62.577570][ T4525] EXT4-fs (loop4): Remounting filesystem read-only [ 62.585881][ T4525] EXT4-fs (loop4): 1 truncate cleaned up [ 62.593020][ T4525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.606240][ T3998] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.611753][ T4525] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.616989][ T3998] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.672886][ T3998] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.686307][ T4534] loop3: detected capacity change from 0 to 512 [ 62.694149][ T4534] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.703482][ T4534] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 62.713196][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.726514][ T4534] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 62.736059][ T4534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 62.744139][ T4534] System zones: 0-2, 18-18, 34-34 [ 62.749909][ T4534] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.765804][ T4534] EXT4-fs (loop3): 1 truncate cleaned up [ 62.769952][ T4539] loop4: detected capacity change from 0 to 512 [ 62.771950][ T4534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.803248][ T4541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.819564][ T4541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.857216][ T4539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.880151][ T4539] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.880962][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.909653][ T4549] loop3: detected capacity change from 0 to 512 [ 62.916926][ T4549] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.948168][ T4549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.971143][ T4554] loop5: detected capacity change from 0 to 1024 [ 62.978230][ T4554] EXT4-fs: Ignoring removed nobh option [ 62.981243][ T4549] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.983884][ T4554] EXT4-fs: Ignoring removed bh option [ 63.013877][ T4554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.043112][ T4554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.056279][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.262297][ T4564] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.205: corrupted xattr block 19: overlapping e_value [ 63.277591][ T4564] EXT4-fs (loop3): Remounting filesystem read-only [ 63.284140][ T4564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 63.293336][ T4564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 63.312102][ T4554] netlink: 20 bytes leftover after parsing attributes in process `syz.5.206'. [ 63.365096][ T4562] SELinux: failed to load policy [ 63.487626][ T4567] loop5: detected capacity change from 0 to 512 [ 63.645933][ T4567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.659569][ T4567] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.701794][ T4561] loop4: detected capacity change from 0 to 512 [ 63.708454][ T4561] EXT4-fs: Ignoring removed nobh option [ 63.735343][ T4561] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.207: corrupted inode contents [ 63.775758][ T4561] EXT4-fs (loop4): Remounting filesystem read-only [ 63.783241][ T4561] EXT4-fs (loop4): 1 truncate cleaned up [ 63.789662][ T4561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.807151][ T4003] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.817913][ T4003] __quota_error: 840 callbacks suppressed [ 63.817928][ T4003] Quota error (device loop4): write_blk: dquota write failed [ 63.831098][ T4003] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 63.841146][ T4003] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.843664][ T4561] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.851747][ T4003] Quota error (device loop4): write_blk: dquota write failed [ 63.851767][ T4003] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 63.886380][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.892390][ T4003] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.905809][ T4003] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 63.915074][ T4003] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 63.934856][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.937538][ T29] audit: type=1326 audit(1747221421.276:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 63.967614][ T29] audit: type=1326 audit(1747221421.296:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 63.991014][ T29] audit: type=1326 audit(1747221421.296:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 64.014463][ T29] audit: type=1326 audit(1747221421.296:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 64.107246][ T4582] loop4: detected capacity change from 0 to 512 [ 64.141925][ T4582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.179718][ T4582] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.215793][ T4582] EXT4-fs (loop4): shut down requested (0) [ 64.276748][ T4587] netlink: 'syz.4.211': attribute type 10 has an invalid length. [ 64.284676][ T4587] netlink: 2 bytes leftover after parsing attributes in process `syz.4.211'. [ 64.317045][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.326269][ T3998] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.388150][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.793218][ T4599] loop3: detected capacity change from 0 to 512 [ 64.801259][ T4599] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.215: corrupted in-inode xattr: overlapping e_value [ 64.815928][ T4599] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.215: couldn't read orphan inode 15 (err -117) [ 64.828465][ T4599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.862830][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.961803][ T4003] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 64.961820][ T4003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 65.024335][ T4605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.033204][ T4605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.046916][ T4605] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 65.060071][ T4605] unsupported nla_type 52263 [ 65.211745][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 65.658504][ T4608] capability: warning: `syz.5.218' uses deprecated v2 capabilities in a way that may be insecure [ 65.703813][ T4616] loop5: detected capacity change from 0 to 1024 [ 65.704884][ T4614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 65.710676][ T4616] EXT4-fs: Ignoring removed orlov option [ 65.747839][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 65.764869][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 65.777030][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 65.792889][ T4616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.809919][ T4618] bond2: (slave batadv0): Releasing active interface [ 65.904146][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.930012][ T4630] tipc: New replicast peer: 255.255.255.255 [ 65.936324][ T4630] tipc: Enabled bearer , priority 10 [ 65.948014][ T4632] geneve2: entered promiscuous mode [ 65.953358][ T4632] geneve2: entered allmulticast mode [ 66.001428][ T4638] vlan2: entered allmulticast mode [ 66.006711][ T4638] bond0: entered allmulticast mode [ 66.058021][ T4640] loop5: detected capacity change from 0 to 512 [ 66.112496][ T4017] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 66.122960][ T4640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.184428][ T4640] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.227337][ T4637] random: crng reseeded on system resumption [ 66.403278][ T4637] netlink: 'syz.5.229': attribute type 3 has an invalid length. [ 66.437473][ T4651] loop2: detected capacity change from 0 to 512 [ 66.453568][ T4653] loop4: detected capacity change from 0 to 1024 [ 66.461166][ T4653] EXT4-fs: Ignoring removed nobh option [ 66.466936][ T4653] EXT4-fs: Ignoring removed bh option [ 66.477290][ T4653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.477354][ T4651] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.233: Failed to acquire dquot type 1 [ 66.495818][ T4653] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.234: Allocating blocks 481-513 which overlap fs metadata [ 66.516084][ T4651] EXT4-fs (loop2): 1 truncate cleaned up [ 66.522442][ T4651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.536716][ T4653] EXT4-fs (loop4): Remounting filesystem read-only [ 66.545974][ T4651] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.568635][ T4652] EXT4-fs (loop4): pa ffff888106e56690: logic 256, phys. 369, len 9 [ 66.592466][ T4651] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.233: Failed to acquire dquot type 1 [ 66.606672][ T4651] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.233: Failed to acquire dquot type 1 [ 66.629699][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.661545][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.673246][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.714265][ T4660] loop4: detected capacity change from 0 to 1024 [ 66.721300][ T4660] EXT4-fs: Ignoring removed orlov option [ 66.727125][ T4660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.766073][ T4662] infiniband syz!: set down [ 66.773567][ T4662] infiniband syz!: added team_slave_0 [ 66.871054][ T4662] RDS/IB: syz!: added [ 66.882040][ T4662] smc: adding ib device syz! with port count 1 [ 66.888309][ T4662] smc: ib device syz! port 1 has pnetid [ 66.932698][ T2970] tipc: Node number set to 2126914632 [ 67.068254][ T4675] __nla_validate_parse: 5 callbacks suppressed [ 67.068274][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.083407][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.092229][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.101024][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.110031][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.118909][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.127730][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.136602][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.145464][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.154485][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 67.888287][ T3537] usb 1-1: enqueue for inactive port 0 [ 67.894843][ T3537] usb 1-1: enqueue for inactive port 0 [ 68.567755][ T4677] loop3: detected capacity change from 0 to 1024 [ 68.574728][ T4677] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 68.769879][ T3537] vhci_hcd: vhci_device speed not set [ 68.784126][ T4675] block device autoloading is deprecated and will be removed. [ 68.791782][ T4675] syz.3.237: attempt to access beyond end of device [ 68.791782][ T4675] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 68.912134][ T3998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 68.978124][ T4683] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 68.986390][ T4683] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 69.001659][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 69.001673][ T29] audit: type=1400 audit(1747221426.336:2457): avc: denied { read } for pid=4681 comm="syz.3.239" name="file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.130759][ T29] audit: type=1400 audit(1747221426.466:2458): avc: denied { tracepoint } for pid=4686 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.243067][ T3328] EXT4-fs unmount: 3 callbacks suppressed [ 69.243086][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.277042][ T29] audit: type=1400 audit(1747221426.616:2459): avc: denied { write } for pid=4688 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.311795][ T29] audit: type=1400 audit(1747221426.646:2460): avc: denied { getopt } for pid=4686 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.365500][ T29] audit: type=1326 audit(1747221426.706:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96491fe969 code=0x7ffc0000 [ 69.388977][ T4690] loop3: detected capacity change from 0 to 1024 [ 69.397089][ T29] audit: type=1326 audit(1747221426.706:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96491fe969 code=0x7ffc0000 [ 69.420595][ T29] audit: type=1326 audit(1747221426.706:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f96491fe969 code=0x7ffc0000 [ 69.444072][ T29] audit: type=1326 audit(1747221426.706:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96491fe969 code=0x7ffc0000 [ 69.467641][ T29] audit: type=1326 audit(1747221426.706:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96491fe969 code=0x7ffc0000 [ 69.491228][ T29] audit: type=1326 audit(1747221426.706:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4693 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f96491fe969 code=0x7ffc0000 [ 69.532200][ T4690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.777883][ T4708] loop4: detected capacity change from 0 to 128 [ 69.800263][ T4708] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.828801][ T4708] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.004918][ T4722] loop4: detected capacity change from 0 to 512 [ 70.023842][ T4722] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.253: bg 0: block 248: padding at end of block bitmap is not set [ 70.039217][ T4722] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.253: Failed to acquire dquot type 1 [ 70.051160][ T4722] EXT4-fs (loop4): 1 truncate cleaned up [ 70.062207][ T4722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.075076][ T4722] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.094509][ T4017] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 70.096187][ T4722] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.143937][ T4722] syz.4.253 (4722) used greatest stack depth: 9360 bytes left [ 70.216300][ T4726] hub 8-0:1.0: USB hub found [ 70.221088][ T4726] hub 8-0:1.0: 8 ports detected [ 70.285019][ T4728] loop4: detected capacity change from 0 to 1024 [ 70.324843][ T4728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.365222][ T4728] pimreg: entered allmulticast mode [ 70.412961][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.512702][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.715664][ T4739] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.724707][ T4739] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 70.768043][ T4741] loop5: detected capacity change from 0 to 128 [ 70.787174][ T4741] syzkaller1: entered promiscuous mode [ 70.792784][ T4741] syzkaller1: entered allmulticast mode [ 70.935209][ T4755] hsr_slave_0: left promiscuous mode [ 71.038950][ T4755] hsr_slave_1: left promiscuous mode [ 71.090296][ T4761] loop0: detected capacity change from 0 to 2048 [ 71.110674][ T4761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.122933][ T4761] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.142322][ T4761] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #16: comm syz.0.263: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 71.159840][ T4761] binfmt_misc: register: failed to install interpreter file ./file2 [ 71.194726][ T4768] loop2: detected capacity change from 0 to 1024 [ 71.210989][ T4768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.311971][ T4017] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 71.361979][ T4768] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.387745][ T4768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 71.401773][ T4768] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.265: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.423471][ T4768] EXT4-fs (loop2): Remounting filesystem read-only [ 71.486610][ T4774] loop5: detected capacity change from 0 to 2048 [ 71.611994][ T4768] EXT4-fs (loop2): 1 orphan inode deleted [ 71.705992][ T4768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.793309][ T4768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.887837][ T4017] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:44: bg 0: block 345: padding at end of block bitmap is not set [ 71.907700][ T4017] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 71.920393][ T4017] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.920393][ T4017] [ 71.920850][ T4768] loop2: detected capacity change from 0 to 512 [ 71.945061][ T4768] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.265: Failed to acquire dquot type 1 [ 71.960516][ T4017] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 71.973443][ T4017] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.973443][ T4017] [ 71.983222][ T4017] EXT4-fs (loop0): Total free blocks count 0 [ 71.988110][ T4768] EXT4-fs (loop2): 1 truncate cleaned up [ 71.989209][ T4017] EXT4-fs (loop0): Free/Dirty block details [ 71.995305][ T4768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.000812][ T4017] EXT4-fs (loop0): free_blocks=0 [ 72.000830][ T4017] EXT4-fs (loop0): dirty_blocks=2048 [ 72.000845][ T4017] EXT4-fs (loop0): Block reservation details [ 72.014848][ T4768] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.105360][ T4768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.151024][ T4792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.160044][ T4792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.160424][ T4794] SELinux: policydb version 179262298 does not match my version range 15-34 [ 72.177107][ T4794] SELinux: failed to load policy [ 72.202876][ T4796] @: renamed from vlan0 (while UP) [ 72.247524][ T4798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.295935][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.304817][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.314764][ T4798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.343090][ T4800] __nla_validate_parse: 131 callbacks suppressed [ 72.343109][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.275'. [ 72.361486][ T4806] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 72.372048][ T4798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.424159][ T4005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 72.434738][ T4808] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 72.434738][ T4808] program syz.0.278 not setting count and/or reply_len properly [ 72.434820][ T4798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.531287][ T4798] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546678][ T4798] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.561913][ T4798] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.576839][ T4798] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.710078][ T4817] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.795035][ T4817] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.883767][ T4817] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.919452][ T4821] netlink: 'syz.0.281': attribute type 33 has an invalid length. [ 72.927345][ T4821] netlink: 152 bytes leftover after parsing attributes in process `syz.0.281'. [ 72.940367][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 72.951055][ T4817] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.020061][ T4817] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.031991][ T4817] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.052896][ T4817] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.091850][ T4817] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.418357][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.283'. [ 73.539999][ T4829] loop5: detected capacity change from 0 to 2048 [ 73.547177][ T4829] ext4: Unknown parameter 'noacl' [ 73.619358][ T4829] loop5: detected capacity change from 0 to 512 [ 73.626561][ T4829] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.633178][ T4829] EXT4-fs: Ignoring removed bh option [ 73.639947][ T4829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.652837][ T4829] EXT4-fs (loop5): 1 truncate cleaned up [ 73.658850][ T4829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.808380][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.859035][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.287'. [ 73.868470][ T4003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 73.887489][ T4833] netlink: 68 bytes leftover after parsing attributes in process `syz.4.285'. [ 74.007613][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 74.024545][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 74.024590][ T29] audit: type=1400 audit(1747221431.366:2879): avc: denied { map } for pid=4837 comm="syz.5.287" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.060546][ T4838] vhci_hcd: invalid port number 96 [ 74.065753][ T4838] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 74.076374][ T4843] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.087435][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 74.089067][ T4846] loop4: detected capacity change from 0 to 512 [ 74.098199][ T29] audit: type=1400 audit(1747221431.446:2880): avc: denied { mount } for pid=4842 comm="syz.3.289" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.131632][ T4845] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 74.152141][ T29] audit: type=1400 audit(1747221431.496:2881): avc: denied { unmount } for pid=3329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.175076][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.191393][ T4851] loop3: detected capacity change from 0 to 128 [ 74.192011][ T4846] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.214687][ T4853] 9pnet_fd: Insufficient options for proto=fd [ 74.219884][ T29] audit: type=1400 audit(1747221431.556:2882): avc: denied { append } for pid=4854 comm="syz.5.293" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.250626][ T4855] loop5: detected capacity change from 0 to 1024 [ 74.258447][ T4855] EXT4-fs: Ignoring removed orlov option [ 74.287665][ T4855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.301456][ T4846] hub 4-0:1.0: USB hub found [ 74.306361][ T4846] hub 4-0:1.0: 8 ports detected [ 74.349650][ T4853] loop0: detected capacity change from 0 to 512 [ 74.357499][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.389645][ T4853] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 74.401395][ T4853] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it [ 74.411521][ T4853] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.291: Corrupt directory, running e2fsck is recommended [ 74.457840][ T4853] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 74.483212][ T4853] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.291: corrupted in-inode xattr: invalid ea_ino [ 74.497716][ T4853] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.291: couldn't read orphan inode 15 (err -117) [ 74.510150][ T4853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.524015][ T4853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.569901][ T29] audit: type=1400 audit(1747221431.906:2883): avc: denied { append } for pid=4852 comm="syz.0.291" name="file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.592378][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 74.604993][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.136187][ T4867] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 75.175811][ T4869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.297'. [ 75.338374][ T4034] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.376488][ T4876] netlink: '+}[@': attribute type 10 has an invalid length. [ 75.387640][ T29] audit: type=1326 audit(1747221432.736:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 75.411797][ T29] audit: type=1326 audit(1747221432.736:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 75.435740][ T29] audit: type=1326 audit(1747221432.736:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 75.459861][ T29] audit: type=1326 audit(1747221432.736:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 75.484227][ T29] audit: type=1326 audit(1747221432.736:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565bf2e969 code=0x7ffc0000 [ 75.621215][ T4876] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 75.663813][ T4876] team0: Failed to send options change via netlink (err -105) [ 75.671351][ T4876] team0: Port device geneve1 added [ 75.965137][ T4886] loop3: detected capacity change from 0 to 512 [ 75.981308][ T4886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.002815][ T4886] EXT4-fs (loop3): 1 truncate cleaned up [ 76.009122][ T4886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.119416][ T4892] loop4: detected capacity change from 0 to 512 [ 76.126605][ T4892] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.132174][ T4890] loop0: detected capacity change from 0 to 256 [ 76.150424][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.210707][ T4897] loop3: detected capacity change from 0 to 2048 [ 76.262139][ T4897] loop3: p1 < > p4 [ 76.266737][ T4897] loop3: p4 size 8388608 extends beyond EOD, truncated [ 76.357298][ T4903] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 76.365900][ T4903] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 76.376989][ T4903] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 76.385522][ T4903] syz_tun: entered promiscuous mode [ 76.393241][ T4903] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.552556][ T4034] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 76.799665][ T4920] team0: Port device bond1 removed [ 76.831494][ T4926] loop0: detected capacity change from 0 to 164 [ 76.913376][ T4912] loop3: detected capacity change from 0 to 512 [ 76.983772][ T4929] loop0: detected capacity change from 0 to 764 [ 76.992806][ T4912] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.010810][ T4912] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.312: bad orphan inode 13 [ 77.075420][ T4912] ext4_test_bit(bit=12, block=18) = 1 [ 77.080850][ T4912] is_bad_inode(inode)=0 [ 77.085140][ T4912] NEXT_ORPHAN(inode)=2130706432 [ 77.090019][ T4912] max_ino=32 [ 77.093330][ T4912] i_nlink=1 [ 77.142103][ T4912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.155703][ T4936] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 77.554389][ T4936] team0: Port device geneve1 added [ 77.562840][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.600059][ T4941] loop3: detected capacity change from 0 to 2048 [ 77.633011][ T4941] loop3: p1 < > p4 [ 77.637615][ T4941] loop3: p4 size 8388608 extends beyond EOD, truncated [ 77.656975][ T4943] loop0: detected capacity change from 0 to 512 [ 77.685240][ T4941] __nla_validate_parse: 7 callbacks suppressed [ 77.685315][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 77.702946][ T4943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.715709][ T4943] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.717938][ T4941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.762187][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.853321][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 77.863176][ T4003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 77.871345][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 77.901032][ T4950] netlink: 156 bytes leftover after parsing attributes in process `syz.2.324'. [ 77.948327][ T4950] netlink: 3 bytes leftover after parsing attributes in process `syz.2.324'. [ 77.957452][ T4950] 0ªX¹¦À: renamed from caif0 [ 78.014783][ T4950] 0ªX¹¦À: entered allmulticast mode [ 78.020045][ T4950] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 78.062295][ T4963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.073841][ T4963] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.122908][ T4964] loop3: detected capacity change from 0 to 128 [ 78.168300][ T4962] syz.2.327 (4962) used greatest stack depth: 9280 bytes left [ 78.227747][ T4964] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.240591][ T4964] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.305750][ T4963] netlink: 40 bytes leftover after parsing attributes in process `syz.5.328'. [ 78.376220][ T4969] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.329'. [ 78.387445][ T4966] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.329'. [ 78.410143][ T4969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.329'. [ 79.053346][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 79.053364][ T29] audit: type=1326 audit(1747221436.396:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.116521][ T29] audit: type=1326 audit(1747221436.396:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.139942][ T29] audit: type=1326 audit(1747221436.396:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.164082][ T29] audit: type=1326 audit(1747221436.396:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.187461][ T29] audit: type=1326 audit(1747221436.396:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.211534][ T29] audit: type=1326 audit(1747221436.396:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.235615][ T29] audit: type=1326 audit(1747221436.396:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.259140][ T29] audit: type=1326 audit(1747221436.396:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.283075][ T29] audit: type=1326 audit(1747221436.396:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.306722][ T29] audit: type=1326 audit(1747221436.396:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 79.450184][ T4033] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.824826][ T4980] sit0: entered allmulticast mode [ 80.209144][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.393468][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.402227][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.426896][ T4983] loop5: detected capacity change from 0 to 512 [ 80.452150][ T4983] ext4: Unknown parameter 'euid' [ 80.538467][ T4991] loop3: detected capacity change from 0 to 1024 [ 80.885519][ T4991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.897785][ T4991] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.942737][ T4989] lo speed is unknown, defaulting to 1000 [ 80.948514][ T4989] lo speed is unknown, defaulting to 1000 [ 80.954467][ T4989] lo speed is unknown, defaulting to 1000 [ 80.961052][ T4989] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 80.970853][ T4989] lo speed is unknown, defaulting to 1000 [ 80.977728][ T4989] lo speed is unknown, defaulting to 1000 [ 80.983807][ T4989] lo speed is unknown, defaulting to 1000 [ 80.989816][ T4989] lo speed is unknown, defaulting to 1000 [ 80.995867][ T4989] lo speed is unknown, defaulting to 1000 [ 81.056941][ T4995] loop2: detected capacity change from 0 to 512 [ 81.095556][ T4033] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 81.104906][ T4997] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.240155][ T4995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.252709][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.285544][ T4995] EXT4-fs (loop2): 1 truncate cleaned up [ 81.301834][ T4995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.346194][ T5004] random: crng reseeded on system resumption [ 81.360415][ T4997] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.429968][ T5006] loop3: detected capacity change from 0 to 1024 [ 81.442740][ T4997] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.453822][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.483781][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.492779][ T5006] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.339: Failed to acquire dquot type 0 [ 81.550803][ T5006] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 81.567132][ T5006] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.339: corrupted inode contents [ 81.567513][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.589355][ T5006] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.339: mark_inode_dirty error [ 81.590432][ T4997] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.615370][ T5006] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.339: corrupted inode contents [ 81.627587][ T5006] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.339: mark_inode_dirty error [ 81.639219][ T5006] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.339: corrupted inode contents [ 81.651440][ T5006] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 81.671550][ T5006] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.339: corrupted inode contents [ 81.690506][ T4997] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.691704][ T5006] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.339: mark_inode_dirty error [ 81.714541][ T4997] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.717982][ T5006] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 81.742975][ T5006] EXT4-fs (loop3): 1 truncate cleaned up [ 81.747168][ T4997] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.756373][ T5006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.797021][ T4997] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.808704][ T5005] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.292460][ T4034] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 82.370077][ T5015] hub 2-0:1.0: USB hub found [ 82.375164][ T5015] hub 2-0:1.0: 8 ports detected [ 82.609342][ T5017] netlink: 'syz.5.344': attribute type 13 has an invalid length. [ 82.698686][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 82.814953][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.822281][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.188990][ T5026] loop2: detected capacity change from 0 to 256 [ 83.219208][ T5026] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097162) [ 83.227131][ T5026] FAT-fs (loop2): Filesystem has been set read-only [ 83.264467][ T5017] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.272955][ T5017] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.281323][ T5017] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.289732][ T5017] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.398984][ T3392] syz1: Port: 1 Link DOWN [ 83.529298][ T5028] loop0: detected capacity change from 0 to 512 [ 83.564999][ T5028] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.574203][ T5028] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 83.653556][ T5028] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 83.679408][ T5028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 83.688221][ T5028] System zones: 0-2, 18-18, 34-34 [ 83.694260][ T5028] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.709948][ T5028] EXT4-fs (loop0): 1 truncate cleaned up [ 83.716259][ T5028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.753276][ T5032] syz.5.349 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 83.753381][ T5032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.349'. [ 83.854704][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.025341][ T5045] loop2: detected capacity change from 0 to 2048 [ 84.032282][ T5045] ext4: Unknown parameter 'noacl' [ 84.065682][ T5045] loop2: detected capacity change from 0 to 512 [ 84.072423][ T5045] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.078946][ T5045] EXT4-fs: Ignoring removed bh option [ 84.085672][ T5045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.096026][ T5037] loop5: detected capacity change from 0 to 8192 [ 84.107096][ T5045] EXT4-fs (loop2): 1 truncate cleaned up [ 84.113326][ T5045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.175461][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.213204][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 84.213221][ T29] audit: type=1326 audit(1747221441.556:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 84.244244][ T29] audit: type=1326 audit(1747221441.556:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 84.267707][ T29] audit: type=1326 audit(1747221441.556:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 84.291974][ T29] audit: type=1326 audit(1747221441.556:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd5de969 code=0x7ffc0000 [ 84.324092][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.655832][ T5057] lo speed is unknown, defaulting to 1000 [ 84.827347][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 84.836268][ T5057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 84.872680][ T29] audit: type=1326 audit(1747221442.166:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 84.896083][ T29] audit: type=1326 audit(1747221442.166:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 84.920137][ T29] audit: type=1326 audit(1747221442.166:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 84.944209][ T29] audit: type=1326 audit(1747221442.166:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 84.968091][ T29] audit: type=1326 audit(1747221442.166:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 84.992369][ T29] audit: type=1326 audit(1747221442.166:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 85.568257][ T5079] loop4: detected capacity change from 0 to 512 [ 85.576187][ T5079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.620646][ T5079] EXT4-fs (loop4): 1 truncate cleaned up [ 85.630843][ T5079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.734307][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.120195][ T5092] netlink: 32 bytes leftover after parsing attributes in process `syz.4.364'. [ 86.211539][ T5093] loop0: detected capacity change from 0 to 1024 [ 86.274891][ T5093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.287190][ T5093] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.305172][ T5093] siw: device registration error -23 [ 86.518853][ T5097] loop3: detected capacity change from 0 to 2048 [ 86.559446][ T5097] ext4: Unknown parameter 'noacl' [ 86.627115][ T5097] loop3: detected capacity change from 0 to 512 [ 86.633895][ T5097] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.640426][ T5097] EXT4-fs: Ignoring removed bh option [ 86.646925][ T5097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.658002][ T5097] EXT4-fs (loop3): 1 truncate cleaned up [ 86.664364][ T5097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.776849][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.879499][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.890231][ T5100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.377'. [ 86.892962][ T5102] loop4: detected capacity change from 0 to 2048 [ 86.920800][ T5100] netlink: 48 bytes leftover after parsing attributes in process `syz.3.377'. [ 86.929899][ T5100] netlink: 48 bytes leftover after parsing attributes in process `syz.3.377'. [ 86.939582][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 86.992002][ T5102] loop4: p1 < > p4 [ 86.998280][ T5102] loop4: p4 size 8388608 extends beyond EOD, truncated [ 87.048048][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 87.373371][ T5122] loop0: detected capacity change from 0 to 512 [ 87.380584][ T5122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.402660][ T5122] EXT4-fs (loop0): 1 truncate cleaned up [ 87.408860][ T5122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.472203][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.618704][ T5132] loop5: detected capacity change from 0 to 512 [ 87.635514][ T5132] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.379: invalid indirect mapped block 256 (level 2) [ 87.649722][ T5132] EXT4-fs (loop5): 2 truncates cleaned up [ 87.656428][ T5132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.895096][ T4034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:59: bg 0: block 5: invalid block bitmap [ 87.908632][ T4034] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1584 with error 28 [ 87.921950][ T4034] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.921950][ T4034] [ 87.933041][ T4034] EXT4-fs (loop5): Total free blocks count 0 [ 87.939193][ T4034] EXT4-fs (loop5): Free/Dirty block details [ 87.945332][ T4034] EXT4-fs (loop5): free_blocks=0 [ 87.950345][ T4034] EXT4-fs (loop5): dirty_blocks=1584 [ 87.956458][ T4034] EXT4-fs (loop5): Block reservation details [ 87.962483][ T4034] EXT4-fs (loop5): i_reserved_data_blocks=1584 [ 88.018253][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.137157][ T5141] loop4: detected capacity change from 0 to 2048 [ 88.165192][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.756299][ T5155] lo speed is unknown, defaulting to 1000 [ 89.889746][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.905429][ T5161] IPVS: Error connecting to the multicast addr [ 89.917886][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 89.917902][ T29] audit: type=1326 audit(1747221447.256:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 89.923528][ T5161] loop3: detected capacity change from 0 to 512 [ 89.924251][ T29] audit: type=1326 audit(1747221447.256:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 89.978442][ T5161] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 89.987271][ T29] audit: type=1326 audit(1747221447.256:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.011251][ T29] audit: type=1326 audit(1747221447.256:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.035320][ T29] audit: type=1326 audit(1747221447.256:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.058653][ T29] audit: type=1326 audit(1747221447.256:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.082710][ T29] audit: type=1326 audit(1747221447.256:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.106113][ T29] audit: type=1326 audit(1747221447.256:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.130115][ T29] audit: type=1326 audit(1747221447.256:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.154048][ T29] audit: type=1326 audit(1747221447.256:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8b4f29e969 code=0x7ffc0000 [ 90.285498][ T5168] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 90.310567][ T5168] __nla_validate_parse: 1 callbacks suppressed [ 90.310586][ T5168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.389'. [ 90.310809][ T5167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 90.317036][ T5168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.389'. [ 90.355318][ T5168] binfmt_misc: register: failed to install interpreter file ./file2 [ 90.495446][ T5179] loop3: detected capacity change from 0 to 164 [ 90.602466][ T5185] loop5: detected capacity change from 0 to 1024 [ 90.615053][ T5185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.627217][ T5185] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.644799][ T5185] siw: device registration error -23 [ 90.897266][ T5190] loop2: detected capacity change from 0 to 256 [ 91.067005][ T5193] loop0: detected capacity change from 0 to 2048 [ 91.084590][ T5193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.160889][ T5199] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 3, id = 0 [ 91.171792][ T5198] IPVS: stopping master sync thread 5199 ... [ 91.185376][ T5198] loop4: detected capacity change from 0 to 512 [ 91.192655][ T5198] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 91.268716][ T3547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.321420][ T5201] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.383961][ T5201] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.441834][ T5201] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.514269][ T5201] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.553708][ T5193] ================================================================== [ 91.561838][ T5193] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 91.569826][ T5193] [ 91.572145][ T5193] write to 0xffff88811f479464 of 4 bytes by task 5197 on cpu 1: [ 91.579772][ T5193] xas_set_mark+0x12b/0x140 [ 91.584281][ T5193] __folio_start_writeback+0x1dd/0x430 [ 91.589739][ T5193] ext4_bio_write_folio+0x590/0x9d0 [ 91.594954][ T5193] mpage_process_page_bufs+0x46c/0x5b0 [ 91.600473][ T5193] mpage_prepare_extent_to_map+0x775/0xb80 [ 91.606303][ T5193] ext4_do_writepages+0xa25/0x2270 [ 91.611422][ T5193] ext4_writepages+0x176/0x300 [ 91.616185][ T5193] do_writepages+0x1d5/0x480 [ 91.620778][ T5193] file_write_and_wait_range+0x156/0x2c0 [ 91.626416][ T5193] generic_buffers_fsync_noflush+0x45/0x120 [ 91.632312][ T5193] ext4_sync_file+0x1ab/0x690 [ 91.636999][ T5193] vfs_fsync_range+0x10d/0x130 [ 91.641770][ T5193] ext4_buffered_write_iter+0x34f/0x3c0 [ 91.647347][ T5193] ext4_file_write_iter+0x383/0xf00 [ 91.652585][ T5193] iter_file_splice_write+0x5ef/0x970 [ 91.657962][ T5193] direct_splice_actor+0x156/0x2a0 [ 91.663076][ T5193] splice_direct_to_actor+0x312/0x680 [ 91.668452][ T5193] do_splice_direct+0xda/0x150 [ 91.673241][ T5193] do_sendfile+0x380/0x640 [ 91.677657][ T5193] __x64_sys_sendfile64+0x105/0x150 [ 91.682868][ T5193] x64_sys_call+0xb39/0x2fb0 [ 91.687468][ T5193] do_syscall_64+0xd0/0x1a0 [ 91.691989][ T5193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.697882][ T5193] [ 91.700202][ T5193] read to 0xffff88811f479464 of 4 bytes by task 5193 on cpu 0: [ 91.707758][ T5193] file_write_and_wait_range+0x10e/0x2c0 [ 91.713429][ T5193] generic_buffers_fsync_noflush+0x45/0x120 [ 91.719361][ T5193] ext4_sync_file+0x1ab/0x690 [ 91.724078][ T5193] vfs_fsync_range+0x10d/0x130 [ 91.728858][ T5193] ext4_buffered_write_iter+0x34f/0x3c0 [ 91.734425][ T5193] ext4_file_write_iter+0x383/0xf00 [ 91.739638][ T5193] iter_file_splice_write+0x5ef/0x970 [ 91.745019][ T5193] direct_splice_actor+0x156/0x2a0 [ 91.750138][ T5193] splice_direct_to_actor+0x312/0x680 [ 91.755520][ T5193] do_splice_direct+0xda/0x150 [ 91.760295][ T5193] do_sendfile+0x380/0x640 [ 91.764738][ T5193] __x64_sys_sendfile64+0x105/0x150 [ 91.769958][ T5193] x64_sys_call+0xb39/0x2fb0 [ 91.774558][ T5193] do_syscall_64+0xd0/0x1a0 [ 91.779072][ T5193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.784973][ T5193] [ 91.787324][ T5193] value changed: 0x0a000021 -> 0x04000021 [ 91.793042][ T5193] [ 91.795365][ T5193] Reported by Kernel Concurrency Sanitizer on: [ 91.801550][ T5193] CPU: 0 UID: 0 PID: 5193 Comm: syz.0.398 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 91.813893][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.823957][ T5193] ================================================================== [ 91.883143][ T5201] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.913293][ T5201] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.939698][ T5201] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.953320][ T5201] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051434][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.