last executing test programs: 2.786960627s ago: executing program 3 (id=357): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007b1f6ed4548fe50dd1b8ff863300000000003b9be941f22e7a09"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000c00)) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create(0x3ff) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.325735996s ago: executing program 3 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 2.210699977s ago: executing program 3 (id=369): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4e, 0x5}, 0x0, 0x0, 0x800004, 0x5, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x120, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x312}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xf}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) close_range(r1, r1, 0x200000000000000) r3 = socket(0x2, 0x80805, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1}, 0x4) getsockopt$bt_hci(r3, 0x84, 0x14, 0x0, &(0x7f0000000180)=0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r4, 0x0, 0x406) 1.584982579s ago: executing program 4 (id=387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.494671181s ago: executing program 4 (id=388): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) 1.454098862s ago: executing program 4 (id=390): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007b1f6ed4548fe50dd1b8ff863300000000003b9be941f22e7a09"], 0x50) lstat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000c00)) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 1.426832933s ago: executing program 0 (id=391): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) 1.418462343s ago: executing program 4 (id=392): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendto$inet(r3, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) 1.389679273s ago: executing program 0 (id=393): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000b4c401bf3874d14f", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendto$inet(r3, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) 1.357927374s ago: executing program 3 (id=394): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x4800) vmsplice(r6, 0x0, 0x0, 0xa) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) 1.184532817s ago: executing program 0 (id=398): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000070100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000400)={[{@grpjquota}, {@block_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@noblock_validity}, {@bh}, {@nolazytime}, {@grpid}, {@nogrpid}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x0, 0x4f0, &(0x7f0000000640)="$eJzs3d9rW9cdAPDvla38dGZn20MWWGaWDCdskex4ScwesgzG9hTYlr2nxpaNsWwZS05iE4pD/4BCKW2hT33qS6F/QKHkTyiFQPte2tJSmqR56EurIumqtV0pdlLLCtbnAyf33F/+nqOgo3N0DroB9KzhiLgaEX0RcS4iBtPjmTTFeiPVrnv08M5ULSVRrV7/OokkPdb8W0m6PZredigi/vfviHhQrW6NW15dm58sFgvL6X6+srCUL6+unZ9bmJwtzBYWx8fHLk1cnrg4MfrMdbu5IT8UEVf++flrL7/9ryvv/+XWJze+PPtirbwD6fmN9dhNjdckW38tmvojYrkTwbqgL61PttsFAQBgR2r9019HxB/r/f/B6Kv35gAAAID9pPr3gfrcTRUAAADYtzL1NbBJJpeu9x2ITCaXa6zh/W0cyRRL5cqfZ0ori9ONtbJDkc3MzBULo+la4aHIJrX9sXSNbXP/wpb98Yg4HhGvDh6u7+emSsXpbn/5AQAAAD3i6Jbx/+PBxvgfAAAA2GeGul0AAAAAoOOM/wEAAGD/M/4HAACAfe0/167VUrX5/Ovpm6sr86Wb56cL5fncwspUbqq0vJSbLZVm67/Zt7Dd3yuWSkt/jcWV2/lKoVzJl1fXbiyUVhYrN+Y2PQIbAAAA2EPH/3Dv4yQi1v92uJ4iiTiQnst2uWxAZ2We5uLPOlcOYO/1dbsAQNf0d7sAQNcY4wPJNufbLt75YPfLAgAAdMbI77bM/4f5f+gVTzX/D+wr5v+hd7WY/7ckAHpEVg8Ael7n5/+r1acqEAAAsOsG6inJ5NK5wIHIZHK5iGP1xwJkk5m5YmE0In4VER8NZg/W9sfqdybbjhkAAAAAAAAAAAAAAAAAAAAAAAAAgIZqNYnqM3j8LDcBAAAAXRGR+SJJn/81MnhmYOv3AweSbwfr24i49eb1129PVirLY7XjD348XnkjPX5hmy8bPGwcAAAA9kRznN4cxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAbnr08M5UM+1l3K/+ERFDreL3x6H69lBkI+LIN0n0b7gviYi+XYi/fjciTrSKn9SKFUNpKbbGz0TE4S7HP7oL8aGX3au1P1dbvf8yMVzftn7/9afpl9rY/tWag43xm+1fX5v279gOY5y8/26+bfy7ESf7W7c/zfhJm/in20Y8uGnvhf+vrbW7svpWxEjLz59kU6x8ZWEpX15dOz+3MDlbmC0sjo+PXZq4PHFxYjQ/M1cspP+2jPHK79/7/kn1P9Im/tA29T/Ttv6bfXf/9sPfNLLZVvHPnt4cfzg9d6JN/Ez62fenNF87P9LMrzfyG51658NTafZnH1m1+NNt6r/d///ZHdb/3H9f+nSHlwIAe6C8ujY/WSwWljueGW59qtkj2qtiyDx/mb7YfKTZ9d/tWLVu63NS5ec/08VGCQAA6IifOv07uHjThPvBzhUKAAAAAAAAAAAAAAAAAAAAesxe/JzY1pjr3akqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAT/RAAAP//b2XLiA==") io_submit(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x8, 0x5, 0x8008, 0x1, 0x3, 0xf4c, 0x1, 0x7ff}, &(0x7f0000000340)=0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r6) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3cec5859f2ec61a3fdc45618577ac23d905000e381b1b69b51a302275393d6d86af8fde88eb2680b65012c283353b74eda29f53e086d106aea8b629830fd1efe793ff195263f23864371b5f8696284b72740f11fa22f07ef4d82e43246464c14efeca06987424cd3705661353aba856adb624c8a9b3e3e6329d4983b3531807cee5d06d2e40e700948e3286b5557ee3bc6077541335455288949a3dd7a1285a13909e479652667307b697af362edf41ffe0bc563e507c9d8fb0e2a22cea795c7118de0d76e13ef64d7bbb0b637a14ecf3d1404378aa9de1ba3fa84acde86efdecd4bea9bcf1ce830cd72970c60c17b4f7d28e57c2fdd8dd7a4481c64e44eb998c5af7394e28bb9ad6f8ff72f6bb34e2bc0a2a1e5903d4318155e7832", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000e000000060011000500000008001300ff0700000500140001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44080) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r12, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) splice(r11, 0x0, r10, 0x0, 0x1, 0x0) fcntl$setpipe(r9, 0x407, 0x10003ff) 1.091282689s ago: executing program 1 (id=399): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x330b, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 980.245341ms ago: executing program 4 (id=402): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$eJzs3E9sVNUeAODfnba0/Hv08Xi8B6IW0dhIbKGgsDAxGE1caGLERF02bSFIoYaWRAjqkBhcGhL3xqVbF27VDTGsTNzi0sSQEMMGMCGOuTP3dqbDzJRppx1Lvy+Z9px7595zzj333Dn3nLkTwLo1lP5JKuEbEbEtIgr1bxiq/Lt7+9LEvduXJqJYKh3/IylvdieNZ7LdxOYsMlyIKHyWVFfUmL1w8fT49PTUuSw+Onfmw9HZCxefPzWQLTl69PChg0deHHuh/UI1SC8t153dn8zs2fX6+1ffnOjNl+ep1ZajU4ZiqFFWyp7pdGJdtrUmnPR2MSO0JT3/0+rqK7f/bdETrSqvuIo5A1ZaqVQq9TdfXSzVu/zAEmDNioFu5wDojvyDPr3/zV+NOgIbVqb70XW3jlVugNJy381eEU+WF+bjIH1197edNBQR7xX//Cp9RbNxiJ4VShwAWJd+OJb3BOv6f4OVmZH756+9nP7/VzaHMhgR/46I7RHxn4jYERH/jYidEfG/iPh/3f7TrkupRfpDdfH59OcnoQo3O1TUhtL+30vZ3Fa1/7cgA4M9WWxrRN5hnjqQHZPh6Os/cWp66mCLNH589Zcvmq2r7f+lrzT9vC+Y5eNmb90A3eT43PiSC1zn1uWI3b315U96I5L5mYAkInZFxO429jtYEz713Dd75iN9C9+3ePnLSg3n0Towz1T6OuLZSO7fvX2pGAvqv5pismB+8sz4yamTU2fH5ucnRwdieurAaHoWHGiYxvWfr7zVLP1Fy//db/WbvHbk++MduylI639Tzfkf+fxttfyDSUQyP187234aV379vOnc6lLP/w3JO+Vwfl/60fjc3LmDERuSNx5cPlbdNo+n/6NYKf/wvsbtf3u2TXokHouI9CR+PCKeiModYpr3vRHxVETsa1H+n155+oO2y19oscMOSss/WXf9q9T8gvqvztc3CyTZ3GCDVT2n99641+Ti8XD1f7gcGs6WNL7+JQsuEc1ymn/apUv+WvbRAwAAgLWhEBFbasaStkShMDJSGQPaEZsK0zOzc/tPzJw/O5muixiMvkI+0lUZD+5L8vHPwZr4WF38UDZu/GXPxnJ8ZGJmerKrJQc2l9t8UhiJeLenpv2nfve9E3j0eV4L1q9W7T/txO+8uoqZAVbVw3/+X/t4RTMCrLqa9t/sCf/iEr73BawB7v+BqsV/6Mc1A9a+krYM61pb7X+/HwGER0lvvD0fXqXnDoF/iKX2/z/tcD6AVbXoc/3LCpT6G68aiAffHAOtd9gTS8vGxgZpdSWQ9qy6kvrGpWyV/5pC0/dEob0d9kdn6vTEMo9G8dzsyZ0dP/lL2XflO12D3zZvp9f7W9TO8gNduRwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03N8BAAD//6Yc4S8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 828.625844ms ago: executing program 4 (id=405): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4e, 0x5}, 0x0, 0x0, 0x800004, 0x5, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, r2, 0x200000000000000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r11, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) recvfrom$inet(r11, &(0x7f0000000200)=""/225, 0xe1, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x6}, {0x3, 0xfff3}, {0xe, 0x3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000080) 500.71102ms ago: executing program 3 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000001200010227bd7000fedbdf2507"], 0x6c}, 0x1, 0x0, 0x0, 0x3000c054}, 0x24044000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) read(r0, &(0x7f00000001c0)=""/253, 0xfd) 476.53793ms ago: executing program 3 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r8}, 0x9) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400013000078000000160a0101000b000000000000010000000900010073797a30000000000900020073797a3000000000440003804000038014000100726f7365300000000000000000000000140001007663616e3000"], 0x100}, 0x1, 0x0, 0x0, 0x240408c1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r11, 0x0, 0x0, 0xa) listen(r3, 0x0) r12 = accept4(r3, 0x0, 0x0, 0x0) sendto(r12, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) setsockopt$inet_opts(r12, 0x0, 0xd, &(0x7f0000000180)="2fca44bb0d1ad6c53a503a86b5f2b9a0fa6834702386ed2d499d4045685b4172c6a7a238464d477ae329c0e7ea5f87613d557539ab429cab423fb40c1897bac5f78c94cf765c459b9eb2d40e0b12b1af95a7ee60902f49d3f9d70ccae724917a3a14d0599c3cd9aaedf9e19ac2d5271139e8fcbe996171fc4ae7c824a37b0780b50398d72d0c", 0x86) 394.979162ms ago: executing program 2 (id=411): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x8844) 374.917902ms ago: executing program 2 (id=412): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") 303.411684ms ago: executing program 2 (id=413): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) 235.050625ms ago: executing program 0 (id=414): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007b1f6ed4548fe50dd1b8ff863300000000003b9be941f22e7a09"], 0x50) lstat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000c00)) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 220.473355ms ago: executing program 1 (id=415): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 202.330316ms ago: executing program 0 (id=416): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) sendto$inet(r2, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) 158.567386ms ago: executing program 2 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 117.564857ms ago: executing program 2 (id=418): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 69.669788ms ago: executing program 1 (id=419): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 38.560709ms ago: executing program 2 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000001200010227bd7000fedbdf2507"], 0x6c}, 0x1, 0x0, 0x0, 0x3000c054}, 0x24044000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) read(r0, &(0x7f00000001c0)=""/253, 0xfd) 28.528609ms ago: executing program 1 (id=421): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) 0s ago: executing program 1 (id=422): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000b4c401bf3874d14f", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) sendto$inet(r3, &(0x7f00000007c0), 0x0, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. [ 33.688933][ T29] audit: type=1400 audit(1759574418.081:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.711940][ T29] audit: type=1400 audit(1759574418.101:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.712912][ T3290] cgroup: Unknown subsys name 'net' [ 33.739736][ T29] audit: type=1400 audit(1759574418.141:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.875324][ T3290] cgroup: Unknown subsys name 'cpuset' [ 33.881547][ T3290] cgroup: Unknown subsys name 'rlimit' [ 34.012965][ T29] audit: type=1400 audit(1759574418.401:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.038465][ T29] audit: type=1400 audit(1759574418.401:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.059014][ T29] audit: type=1400 audit(1759574418.401:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.079448][ T29] audit: type=1400 audit(1759574418.401:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.099813][ T29] audit: type=1400 audit(1759574418.401:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.108966][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.124672][ T29] audit: type=1400 audit(1759574418.401:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.156434][ T29] audit: type=1400 audit(1759574418.521:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.201676][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.341040][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.417273][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.424436][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.431789][ T3301] bridge_slave_0: entered allmulticast mode [ 35.438306][ T3301] bridge_slave_0: entered promiscuous mode [ 35.446922][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.454056][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.461178][ T3301] bridge_slave_1: entered allmulticast mode [ 35.467685][ T3301] bridge_slave_1: entered promiscuous mode [ 35.528229][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.540624][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.570970][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.579950][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.589207][ T3301] team0: Port device team_slave_0 added [ 35.597524][ T3301] team0: Port device team_slave_1 added [ 35.620797][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.663139][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.670118][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.696022][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.718287][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 35.729765][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.736929][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.763063][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.825126][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.832216][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.839497][ T3308] bridge_slave_0: entered allmulticast mode [ 35.845955][ T3308] bridge_slave_0: entered promiscuous mode [ 35.852965][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.860058][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.867326][ T3308] bridge_slave_1: entered allmulticast mode [ 35.873737][ T3308] bridge_slave_1: entered promiscuous mode [ 35.879945][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.887071][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.894214][ T3305] bridge_slave_0: entered allmulticast mode [ 35.900783][ T3305] bridge_slave_0: entered promiscuous mode [ 35.921140][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.928249][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.935411][ T3305] bridge_slave_1: entered allmulticast mode [ 35.941793][ T3305] bridge_slave_1: entered promiscuous mode [ 35.980905][ T3301] hsr_slave_0: entered promiscuous mode [ 35.986975][ T3301] hsr_slave_1: entered promiscuous mode [ 35.994394][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.010083][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.019221][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.026304][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.033514][ T3302] bridge_slave_0: entered allmulticast mode [ 36.040036][ T3302] bridge_slave_0: entered promiscuous mode [ 36.052140][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.059214][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.066402][ T3300] bridge_slave_0: entered allmulticast mode [ 36.072804][ T3300] bridge_slave_0: entered promiscuous mode [ 36.080406][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.096208][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.110186][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.117349][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.124437][ T3302] bridge_slave_1: entered allmulticast mode [ 36.130877][ T3302] bridge_slave_1: entered promiscuous mode [ 36.141789][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.148886][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.156026][ T3300] bridge_slave_1: entered allmulticast mode [ 36.162313][ T3300] bridge_slave_1: entered promiscuous mode [ 36.197811][ T3308] team0: Port device team_slave_0 added [ 36.208995][ T3305] team0: Port device team_slave_0 added [ 36.220685][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.233098][ T3308] team0: Port device team_slave_1 added [ 36.239816][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.249667][ T3305] team0: Port device team_slave_1 added [ 36.256379][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.273875][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.300257][ T3302] team0: Port device team_slave_0 added [ 36.323830][ T3302] team0: Port device team_slave_1 added [ 36.330286][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.337250][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.363232][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.379209][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.386206][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.412229][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.438342][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.445303][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.471196][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.482672][ T3300] team0: Port device team_slave_0 added [ 36.488925][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.495884][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.521879][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.543686][ T3300] team0: Port device team_slave_1 added [ 36.561998][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.568980][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.594922][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.606525][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.613476][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.639385][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.674987][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.681939][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.707954][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.730274][ T3302] hsr_slave_0: entered promiscuous mode [ 36.736406][ T3302] hsr_slave_1: entered promiscuous mode [ 36.742204][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.747959][ T3302] Cannot create hsr debugfs directory [ 36.764965][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.771932][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.797871][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.830665][ T3308] hsr_slave_0: entered promiscuous mode [ 36.836799][ T3308] hsr_slave_1: entered promiscuous mode [ 36.842635][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 36.848368][ T3308] Cannot create hsr debugfs directory [ 36.861169][ T3305] hsr_slave_0: entered promiscuous mode [ 36.867164][ T3305] hsr_slave_1: entered promiscuous mode [ 36.873046][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.878819][ T3305] Cannot create hsr debugfs directory [ 36.937467][ T3300] hsr_slave_0: entered promiscuous mode [ 36.943527][ T3300] hsr_slave_1: entered promiscuous mode [ 36.949433][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 36.955215][ T3300] Cannot create hsr debugfs directory [ 36.979111][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.990039][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.000671][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.009251][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.114240][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.126645][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.136164][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.147617][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.202198][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.210105][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.218926][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.229723][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.240885][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.264778][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.294644][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.304435][ T2709] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.311552][ T2709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.320384][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.327428][ T2709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.343422][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.352331][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.369953][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.378684][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.393591][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.408888][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.416033][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.425293][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.452382][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.475359][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.482466][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.498420][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.505505][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.516703][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.551964][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.579527][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.596673][ T2709] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.603731][ T2709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.614069][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.621158][ T2709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.657214][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.678868][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.693480][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.715718][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.722771][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.737111][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.747892][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.754971][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.787360][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.802668][ T3301] veth0_vlan: entered promiscuous mode [ 37.813364][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.820459][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.829329][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.836372][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.865960][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.876590][ T3301] veth1_vlan: entered promiscuous mode [ 37.923206][ T3301] veth0_macvtap: entered promiscuous mode [ 37.942755][ T3301] veth1_macvtap: entered promiscuous mode [ 37.988703][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.998867][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.017170][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.033515][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.051022][ T1653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.067158][ T1653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.098358][ T1653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.111484][ T3302] veth0_vlan: entered promiscuous mode [ 38.123706][ T1653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.142356][ T3308] veth0_vlan: entered promiscuous mode [ 38.152718][ T3302] veth1_vlan: entered promiscuous mode [ 38.166292][ T3308] veth1_vlan: entered promiscuous mode [ 38.194320][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.202506][ T3308] veth0_macvtap: entered promiscuous mode [ 38.224250][ T3305] veth0_vlan: entered promiscuous mode [ 38.240101][ T3308] veth1_macvtap: entered promiscuous mode [ 38.253485][ T3302] veth0_macvtap: entered promiscuous mode [ 38.273455][ T3302] veth1_macvtap: entered promiscuous mode [ 38.296736][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.306470][ T3300] veth0_vlan: entered promiscuous mode [ 38.320355][ T3471] loop1: detected capacity change from 0 to 512 [ 38.329525][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.338024][ T3471] ======================================================= [ 38.338024][ T3471] WARNING: The mand mount option has been deprecated and [ 38.338024][ T3471] and is ignored by this kernel. Remove the mand [ 38.338024][ T3471] option from the mount to silence this warning. [ 38.338024][ T3471] ======================================================= [ 38.338522][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.381432][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.398033][ T3300] veth1_vlan: entered promiscuous mode [ 38.405505][ T3305] veth1_vlan: entered promiscuous mode [ 38.414797][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.429846][ T3471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.449469][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.459245][ T3305] veth0_macvtap: entered promiscuous mode [ 38.475845][ T1653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.476282][ T3471] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6: invalid indirect mapped block 4294967295 (level 1) [ 38.499565][ T3300] veth0_macvtap: entered promiscuous mode [ 38.508009][ T3471] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6: invalid indirect mapped block 4294967295 (level 1) [ 38.523244][ T3300] veth1_macvtap: entered promiscuous mode [ 38.528236][ T3471] EXT4-fs (loop1): 2 truncates cleaned up [ 38.535469][ T3471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.550292][ T1653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.565218][ T3305] veth1_macvtap: entered promiscuous mode [ 38.589772][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.600689][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.601663][ T1653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.646718][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.652838][ T3487] loop1: detected capacity change from 0 to 512 [ 38.673306][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.683593][ T3487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.702223][ T1653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.709388][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 38.709415][ T29] audit: type=1400 audit(1759574423.101:107): avc: denied { unlink } for pid=3490 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=560 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.713662][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.739593][ T29] audit: type=1404 audit(1759574423.131:108): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 38.785816][ T3487] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7: invalid indirect mapped block 4294967295 (level 1) [ 38.791695][ T29] audit: type=1400 audit(1759574423.131:109): avc: denied { prog_load } for pid=3491 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 38.816087][ T3487] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7: invalid indirect mapped block 4294967295 (level 1) [ 38.818330][ T29] audit: type=1400 audit(1759574423.131:110): avc: denied { prog_load } for pid=3491 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 38.850818][ T29] audit: type=1326 audit(1759574423.131:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 38.873879][ T29] audit: type=1326 audit(1759574423.131:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 38.897144][ T29] audit: type=1326 audit(1759574423.131:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 38.906711][ T3487] EXT4-fs (loop1): 2 truncates cleaned up [ 38.920272][ T29] audit: type=1400 audit(1759574423.131:114): avc: denied { read write } for pid=3491 comm="syz.0.1" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 38.949060][ T29] audit: type=1326 audit(1759574423.131:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 38.968314][ T3487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.972132][ T29] audit: type=1326 audit(1759574423.151:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 39.022264][ T3499] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 39.031527][ T1653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.044996][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.078040][ T3514] loop4: detected capacity change from 0 to 1024 [ 39.085744][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 39.132582][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 39.132802][ T3514] EXT4-fs: Ignoring removed orlov option [ 39.157739][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 39.158195][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.178228][ T3523] process 'syz.1.11' launched '/dev/fd/3' with NULL argv: empty string added [ 39.191530][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.238556][ T1653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.255546][ T1653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.264738][ T1653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.273826][ T1653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.283975][ T1653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.292840][ T1653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.301852][ T1653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.310663][ T1653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.378523][ T3527] infiniband syz!: set active [ 39.383267][ T3527] infiniband syz!: added team_slave_0 [ 39.405100][ T3527] RDS/IB: syz!: added [ 39.561715][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.682571][ T3543] loop2: detected capacity change from 0 to 256 [ 39.702242][ T3527] syz.3.4 (3527) used greatest stack depth: 10584 bytes left [ 39.719748][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.727329][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.734761][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.742179][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.749697][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.757164][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.764626][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.772131][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.779577][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.787024][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 39.797395][ T3395] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 39.807612][ T3553] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 39.835196][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 39.850515][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 39.864528][ T3556] loop4: detected capacity change from 0 to 512 [ 39.872707][ T3395] syz!: Port: 1 Link DOWN [ 39.878601][ T3556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 39.887425][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 39.903594][ T3552] fido_id[3552]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.926210][ T3558] loop2: detected capacity change from 0 to 1024 [ 39.933140][ T3558] EXT4-fs: Ignoring removed orlov option [ 39.950488][ T3561] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 39.976064][ T3558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.037948][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.076301][ T3572] loop2: detected capacity change from 0 to 512 [ 40.084587][ T3572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.106060][ T3572] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.25: invalid indirect mapped block 4294967295 (level 1) [ 40.124140][ T3572] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.25: invalid indirect mapped block 4294967295 (level 1) [ 40.138526][ T3572] EXT4-fs (loop2): 2 truncates cleaned up [ 40.145187][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.189164][ T3396] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 40.199780][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.300921][ T3592] loop0: detected capacity change from 0 to 256 [ 40.307905][ T3591] loop2: detected capacity change from 0 to 1024 [ 40.348808][ T3591] EXT4-fs: Ignoring removed orlov option [ 40.357034][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.358585][ T3596] SELinux: policydb version 576 does not match my version range 15-35 [ 40.394648][ T3596] SELinux: failed to load policy [ 40.418800][ T3600] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 40.495101][ T3606] program syz.3.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.533683][ T3607] netlink: 'syz.0.35': attribute type 10 has an invalid length. [ 40.542911][ T3607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 40.546430][ T3609] loop3: detected capacity change from 0 to 512 [ 40.578579][ T3609] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 40.649992][ T3615] loop4: detected capacity change from 0 to 512 [ 40.656981][ T3615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.675994][ T3615] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.40: invalid indirect mapped block 4294967295 (level 1) [ 40.696490][ T3615] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.40: invalid indirect mapped block 4294967295 (level 1) [ 40.710883][ T3615] EXT4-fs (loop4): 2 truncates cleaned up [ 40.722919][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.735394][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.747696][ T3615] EXT4-fs error (device loop4): ext4_get_parent:1834: inode #11: comm syz.4.40: bad parent inode number: 3 [ 40.780289][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.792959][ T3622] SELinux: policydb version 576 does not match my version range 15-35 [ 40.803377][ T3622] SELinux: failed to load policy [ 40.809866][ T3624] loop4: detected capacity change from 0 to 512 [ 40.817309][ T3624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.827680][ T3624] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.44: invalid indirect mapped block 4294967295 (level 1) [ 40.842067][ T3624] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.44: invalid indirect mapped block 4294967295 (level 1) [ 40.857234][ T3624] EXT4-fs (loop4): 2 truncates cleaned up [ 40.864492][ T3624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.879035][ T3624] EXT4-fs error (device loop4): ext4_get_parent:1834: inode #11: comm syz.4.44: bad parent inode number: 3 [ 40.901653][ T3629] loop2: detected capacity change from 0 to 256 [ 40.911203][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.943099][ T3633] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 40.989918][ T3637] program syz.4.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.034142][ T3396] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 41.064317][ T3645] loop2: detected capacity change from 0 to 512 [ 41.073297][ T3645] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.086415][ T3645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.098899][ T3645] EXT4-fs (loop2): 1 truncate cleaned up [ 41.105000][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.135274][ T3645] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.165541][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.301816][ T3666] loop4: detected capacity change from 0 to 256 [ 41.359953][ T3669] loop0: detected capacity change from 0 to 256 [ 41.433557][ T3683] loop2: detected capacity change from 0 to 1024 [ 41.441857][ T3683] EXT4-fs: Ignoring removed orlov option [ 41.451856][ T3686] loop1: detected capacity change from 0 to 1024 [ 41.458622][ T3686] EXT4-fs: Ignoring removed orlov option [ 41.467530][ T3686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.506658][ T3686] program syz.1.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.509430][ T3683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.551069][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.563476][ T3695] netlink: 'syz.4.64': attribute type 10 has an invalid length. [ 41.577009][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 41.586946][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 41.647463][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 41.694414][ T3706] loop0: detected capacity change from 0 to 1024 [ 41.703196][ T3706] EXT4-fs: Ignoring removed orlov option [ 41.727411][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.760059][ T3712] syz!: rxe_newlink: already configured on team_slave_0 [ 41.779047][ T3713] netlink: 'syz.2.69': attribute type 10 has an invalid length. [ 41.795288][ T3713] team0 (unregistering): Port device team_slave_0 removed [ 41.811074][ T3713] team0 (unregistering): Port device team_slave_1 removed [ 41.830063][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 41.893294][ T3719] loop2: detected capacity change from 0 to 256 [ 41.912726][ T3721] loop3: detected capacity change from 0 to 512 [ 41.978830][ T3721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.999494][ T3721] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.73: invalid indirect mapped block 4294967295 (level 1) [ 42.001310][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.022844][ T3721] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.73: invalid indirect mapped block 4294967295 (level 1) [ 42.028830][ T3729] loop2: detected capacity change from 0 to 1024 [ 42.038088][ T3721] EXT4-fs (loop3): 2 truncates cleaned up [ 42.049423][ T3721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.069980][ T3721] EXT4-fs error (device loop3): ext4_get_parent:1834: inode #11: comm syz.3.73: bad parent inode number: 3 [ 42.082210][ T3729] EXT4-fs: Ignoring removed orlov option [ 42.138712][ T3729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.154028][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.172467][ T3734] loop1: detected capacity change from 0 to 512 [ 42.228662][ T3734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.251406][ T10] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 42.293123][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.303302][ T3734] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.77: invalid indirect mapped block 4294967295 (level 1) [ 42.372507][ T3742] loop4: detected capacity change from 0 to 256 [ 42.398076][ T3734] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.77: invalid indirect mapped block 4294967295 (level 1) [ 42.424862][ T3734] EXT4-fs (loop1): 2 truncates cleaned up [ 42.440422][ T3749] SELinux: policydb version 576 does not match my version range 15-35 [ 42.447658][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.461816][ T3381] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 42.475378][ T3749] SELinux: failed to load policy [ 42.486203][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.509757][ T3734] EXT4-fs error (device loop1): ext4_get_parent:1834: inode #11: comm syz.1.77: bad parent inode number: 3 [ 42.521259][ T3753] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.556762][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.589486][ T3762] loop1: detected capacity change from 0 to 256 [ 42.617250][ T3765] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.628530][ T3767] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 42.637005][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 42.657704][ T3768] loop4: detected capacity change from 0 to 1024 [ 42.664379][ T3768] EXT4-fs: Ignoring removed orlov option [ 42.688230][ T3772] loop0: detected capacity change from 0 to 512 [ 42.699524][ T3768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.714722][ T3772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.739888][ T3772] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.86: invalid indirect mapped block 4294967295 (level 1) [ 42.754914][ T3772] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.86: invalid indirect mapped block 4294967295 (level 1) [ 42.772283][ T3772] EXT4-fs (loop0): 2 truncates cleaned up [ 42.779804][ T3772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.794596][ T3772] EXT4-fs error (device loop0): ext4_get_parent:1834: inode #11: comm syz.0.86: bad parent inode number: 3 [ 42.820845][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.845811][ T3778] loop1: detected capacity change from 0 to 1024 [ 42.873088][ T10] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 42.886291][ T3778] EXT4-fs: Ignoring removed orlov option [ 42.932779][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.967314][ T3776] program syz.1.89 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.123074][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.282818][ T3796] loop0: detected capacity change from 0 to 1024 [ 43.292325][ T3795] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.303882][ T3796] EXT4-fs: Ignoring removed orlov option [ 43.312766][ T3796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.316771][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.363130][ T3802] loop4: detected capacity change from 0 to 256 [ 43.382040][ T3804] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.397291][ T3805] loop3: detected capacity change from 0 to 1024 [ 43.418148][ T3809] 9pnet_fd: Insufficient options for proto=fd [ 43.439370][ T3805] EXT4-fs: Ignoring removed orlov option [ 43.474813][ T9] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 43.486661][ T3805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.561838][ T3816] fido_id[3816]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.633524][ T36] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 43.649078][ T3826] loop2: detected capacity change from 0 to 1024 [ 43.655808][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.666578][ T3826] EXT4-fs: Ignoring removed orlov option [ 43.676117][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.698738][ T3826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.725798][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 43.725814][ T29] audit: type=1326 audit(1759574428.121:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.751545][ T3835] SELinux: policydb version 576 does not match my version range 15-35 [ 43.756478][ T29] audit: type=1400 audit(1759574428.141:753): avc: denied { load_policy } for pid=3834 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.766637][ T3835] SELinux: failed to load policy [ 43.783585][ T29] audit: type=1400 audit(1759574428.151:754): avc: denied { write } for pid=3828 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.802195][ T3838] loop1: detected capacity change from 0 to 1024 [ 43.810081][ T29] audit: type=1326 audit(1759574428.151:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.818885][ T3839] netlink: 'syz.0.105': attribute type 10 has an invalid length. [ 43.838662][ T29] audit: type=1326 audit(1759574428.151:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.838755][ T29] audit: type=1326 audit(1759574428.151:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.873000][ T3838] EXT4-fs: Ignoring removed orlov option [ 43.893085][ T29] audit: type=1326 audit(1759574428.151:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.921795][ T29] audit: type=1326 audit(1759574428.161:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.945075][ T29] audit: type=1326 audit(1759574428.161:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.968922][ T29] audit: type=1326 audit(1759574428.161:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2dfabeec9 code=0x7ffc0000 [ 43.996927][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 44.009538][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.009937][ T3842] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.021398][ T3838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.046672][ T3845] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.052463][ T3832] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.119687][ T3852] loop4: detected capacity change from 0 to 512 [ 44.126913][ T3852] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 44.162488][ T3853] loop2: detected capacity change from 0 to 1024 [ 44.169358][ T3853] EXT4-fs: Ignoring removed orlov option [ 44.177784][ T3853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.198312][ T3853] program syz.2.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.253132][ T36] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 44.400795][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.451155][ T10] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 44.546899][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.589726][ T36] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 44.597856][ T3874] loop2: detected capacity change from 0 to 512 [ 44.613822][ T3877] loop0: detected capacity change from 0 to 1024 [ 44.614793][ T3879] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.624969][ T3877] EXT4-fs: Ignoring removed orlov option [ 44.642545][ T3874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.669837][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.696811][ T3880] fido_id[3880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.747422][ T3887] syz!: rxe_newlink: already configured on team_slave_0 [ 44.757424][ T3874] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.118: invalid indirect mapped block 4294967295 (level 1) [ 44.786541][ T3874] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.118: invalid indirect mapped block 4294967295 (level 1) [ 44.805006][ T3890] loop4: detected capacity change from 0 to 512 [ 44.811999][ T3890] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 44.830626][ T3874] EXT4-fs (loop2): 2 truncates cleaned up [ 44.839498][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.851114][ T9] hid_parser_main: 188 callbacks suppressed [ 44.851129][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.854916][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.857127][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.857147][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.857192][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.895574][ T3874] EXT4-fs error (device loop2): ext4_get_parent:1834: inode #11: comm syz.2.118: bad parent inode number: 3 [ 44.899320][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.918253][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.925672][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.933100][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.940503][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.947911][ T9] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 44.956182][ T9] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 44.965903][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.003933][ T3894] fido_id[3894]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.056408][ T3904] SELinux: policydb version 0 does not match my version range 15-35 [ 45.064849][ T3904] SELinux: failed to load policy [ 45.069879][ T3906] SELinux: policydb version 576 does not match my version range 15-35 [ 45.078450][ T3906] SELinux: failed to load policy [ 45.090922][ T3907] loop0: detected capacity change from 0 to 1024 [ 45.098232][ T3907] EXT4-fs: Ignoring removed orlov option [ 45.106750][ T3908] netlink: 'syz.4.127': attribute type 10 has an invalid length. [ 45.114964][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 45.133569][ T9] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 45.135021][ T3907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.171187][ T3912] fido_id[3912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.206915][ T3899] program syz.0.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.223028][ T3914] loop3: detected capacity change from 0 to 512 [ 45.229784][ T3914] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 45.247531][ T3916] netlink: 'syz.2.132': attribute type 3 has an invalid length. [ 45.255859][ T3916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3916 comm=syz.2.132 [ 45.288257][ T3918] loop2: detected capacity change from 0 to 512 [ 45.295736][ T3918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.305769][ T3918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.133: invalid indirect mapped block 4294967295 (level 1) [ 45.320064][ T3918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.133: invalid indirect mapped block 4294967295 (level 1) [ 45.343813][ T3918] EXT4-fs (loop2): 2 truncates cleaned up [ 45.350304][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.364303][ T3918] EXT4-fs error (device loop2): ext4_get_parent:1834: inode #11: comm syz.2.133: bad parent inode number: 3 [ 45.393527][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.432010][ T3922] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 45.461102][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.525356][ T3928] loop0: detected capacity change from 0 to 512 [ 45.534052][ T3928] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 45.597737][ T10] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 45.650817][ T3937] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.675904][ T3940] SELinux: policydb version 576 does not match my version range 15-35 [ 45.689427][ T3940] SELinux: failed to load policy [ 45.697477][ T3942] SELinux: policydb version 0 does not match my version range 15-35 [ 45.705820][ T3942] SELinux: failed to load policy [ 45.727292][ T3944] netlink: 'syz.1.143': attribute type 3 has an invalid length. [ 45.735447][ T3944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3944 comm=syz.1.143 [ 45.768184][ T3949] SELinux: policydb version 576 does not match my version range 15-35 [ 45.776669][ T3949] SELinux: failed to load policy [ 45.805296][ T3950] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 45.813814][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 45.862799][ T3953] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 46.141975][ T36] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 46.530498][ T3970] loop0: detected capacity change from 0 to 512 [ 46.537988][ T3970] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 46.696153][ T3977] loop1: detected capacity change from 0 to 1024 [ 46.702781][ T3977] EXT4-fs: Ignoring removed orlov option [ 46.702799][ T3978] loop0: detected capacity change from 0 to 1024 [ 46.716266][ T3978] EXT4-fs: Ignoring removed orlov option [ 46.726490][ T3977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.741889][ T3978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.757486][ T3977] program syz.1.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.820349][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.835001][ T3983] netlink: 'syz.4.155': attribute type 3 has an invalid length. [ 46.842956][ T3983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3983 comm=syz.4.155 [ 46.896989][ T3987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'. [ 46.918418][ T3989] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 46.951583][ T3992] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 46.960274][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 46.969351][ T3993] syz.0.154 uses obsolete (PF_INET,SOCK_PACKET) [ 47.036708][ T3996] netlink: 'syz.4.158': attribute type 10 has an invalid length. [ 47.053928][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 47.122356][ T4000] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.139284][ T4002] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.147843][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.209450][ T4006] loop1: detected capacity change from 0 to 512 [ 47.243371][ T4006] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 47.266847][ T4013] loop4: detected capacity change from 0 to 1024 [ 47.273687][ T4013] EXT4-fs: Ignoring removed orlov option [ 47.288309][ T4013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.356564][ T4018] netlink: 'syz.1.168': attribute type 3 has an invalid length. [ 47.364453][ T4018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4018 comm=syz.1.168 [ 47.396509][ T4019] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.417274][ T4021] loop1: detected capacity change from 0 to 512 [ 47.449568][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.460543][ T4021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.475809][ T4021] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.170: invalid block [ 47.488321][ T4021] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.170: invalid indirect mapped block 4294967295 (level 1) [ 47.502789][ T4021] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.170: invalid indirect mapped block 4294967295 (level 1) [ 47.517087][ T4021] EXT4-fs (loop1): 2 truncates cleaned up [ 47.523315][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.538539][ T4021] EXT4-fs error (device loop1): ext4_get_parent:1834: inode #11: comm syz.1.170: bad parent inode number: 3 [ 47.582136][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.620122][ T4025] loop1: detected capacity change from 0 to 512 [ 47.679317][ T4025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.695095][ T4025] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.172: invalid indirect mapped block 4294967295 (level 1) [ 47.711400][ T4025] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.172: invalid indirect mapped block 4294967295 (level 1) [ 47.726934][ T4025] EXT4-fs (loop1): 2 truncates cleaned up [ 47.733224][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.747770][ T4025] EXT4-fs error (device loop1): ext4_get_parent:1834: inode #11: comm syz.1.172: bad parent inode number: 3 [ 47.813619][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.848262][ T4038] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.911009][ T4041] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 47.931885][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 47.940840][ T4045] loop1: detected capacity change from 0 to 512 [ 47.943411][ T4045] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 48.013143][ T4051] netlink: 'syz.4.180': attribute type 3 has an invalid length. [ 48.021167][ T4051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4051 comm=syz.4.180 [ 48.072652][ T9] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 48.173093][ T4064] loop4: detected capacity change from 0 to 512 [ 48.181313][ T4064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.204721][ T4064] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.186: invalid indirect mapped block 4294967295 (level 1) [ 48.223173][ T4064] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.186: invalid indirect mapped block 4294967295 (level 1) [ 48.229072][ T4069] SELinux: policydb version 576 does not match my version range 15-35 [ 48.237570][ T4064] EXT4-fs (loop4): 2 truncates cleaned up [ 48.245336][ T4069] SELinux: failed to load policy [ 48.255580][ T4064] EXT4-fs error (device loop4): ext4_get_parent:1834: inode #11: comm syz.4.186: bad parent inode number: 3 [ 48.290704][ T4071] 9pnet_fd: Insufficient options for proto=fd [ 48.374953][ T4077] SELinux: policydb version 576 does not match my version range 15-35 [ 48.384380][ T4077] SELinux: failed to load policy [ 48.419049][ T4081] loop4: detected capacity change from 0 to 512 [ 48.425966][ T4081] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 48.563912][ T4085] loop4: detected capacity change from 0 to 512 [ 48.572197][ T4085] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.583424][ T4085] EXT4-fs (loop4): 1 truncate cleaned up [ 48.596634][ T4085] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.673974][ T10] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 48.734657][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 48.734671][ T29] audit: type=1326 audit(1759574433.121:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.764747][ T29] audit: type=1326 audit(1759574433.131:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.788122][ T29] audit: type=1326 audit(1759574433.131:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.811726][ T29] audit: type=1326 audit(1759574433.131:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.835144][ T29] audit: type=1326 audit(1759574433.131:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.858738][ T29] audit: type=1326 audit(1759574433.131:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.882093][ T29] audit: type=1326 audit(1759574433.131:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.890379][ T4096] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.905500][ T29] audit: type=1326 audit(1759574433.131:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.905535][ T29] audit: type=1326 audit(1759574433.131:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.905634][ T29] audit: type=1326 audit(1759574433.131:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628299eec9 code=0x7ffc0000 [ 48.948922][ T4098] SELinux: policydb version 576 does not match my version range 15-35 [ 48.993528][ T4098] SELinux: failed to load policy [ 49.073683][ T4105] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 49.093661][ T4106] loop2: detected capacity change from 0 to 1024 [ 49.100751][ T4106] EXT4-fs: Ignoring removed orlov option [ 49.130773][ T4110] loop0: detected capacity change from 0 to 512 [ 49.152266][ T4110] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 49.170357][ T4106] program syz.2.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.259690][ T4116] team0 (unregistering): Port device team_slave_0 removed [ 49.281827][ T10] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 49.292783][ T4116] team0 (unregistering): Port device team_slave_1 removed [ 49.320940][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 49.464482][ T4134] loop4: detected capacity change from 0 to 1024 [ 49.482498][ T4134] EXT4-fs: Ignoring removed orlov option [ 49.598744][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 49.638580][ T4142] loop2: detected capacity change from 0 to 256 [ 49.715058][ T4146] SELinux: policydb version 576 does not match my version range 15-35 [ 49.735784][ T4146] SELinux: failed to load policy [ 49.743003][ T4150] netlink: 76 bytes leftover after parsing attributes in process `syz.4.216'. [ 49.753573][ T4150] netlink: 76 bytes leftover after parsing attributes in process `syz.4.216'. [ 49.806042][ T4154] loop4: detected capacity change from 0 to 512 [ 49.812848][ T4154] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 49.899911][ T4157] SELinux: policydb version 0 does not match my version range 15-35 [ 49.908112][ T4157] SELinux: failed to load policy [ 50.104728][ T4168] loop1: detected capacity change from 0 to 1024 [ 50.111449][ T4168] EXT4-fs: Ignoring removed orlov option [ 50.120752][ T4167] validate_nla: 5 callbacks suppressed [ 50.120766][ T4167] netlink: 'syz.4.223': attribute type 10 has an invalid length. [ 50.135162][ T4167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 50.152037][ T4168] program syz.1.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.196383][ T4172] loop0: detected capacity change from 0 to 256 [ 50.288421][ T4179] netlink: 'syz.3.226': attribute type 3 has an invalid length. [ 50.326239][ T4181] netlink: 76 bytes leftover after parsing attributes in process `syz.3.227'. [ 50.341614][ T4181] netlink: 76 bytes leftover after parsing attributes in process `syz.3.227'. [ 50.350837][ T4182] loop0: detected capacity change from 0 to 1024 [ 50.358410][ T4182] EXT4-fs: Ignoring removed orlov option [ 50.459005][ T4187] loop3: detected capacity change from 0 to 512 [ 50.468567][ T4187] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 50.592484][ T4190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.230'. [ 50.627929][ T4192] 9pnet_fd: Insufficient options for proto=fd [ 50.787668][ T4204] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 50.795938][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 50.825329][ T4208] loop3: detected capacity change from 0 to 256 [ 50.847590][ T4213] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 50.889915][ T4216] Zero length message leads to an empty skb [ 50.920941][ T4218] SELinux: policydb version 576 does not match my version range 15-35 [ 50.937801][ T4219] loop2: detected capacity change from 0 to 1024 [ 50.945273][ T4219] EXT4-fs: Ignoring removed orlov option [ 50.951224][ T4218] SELinux: failed to load policy [ 50.963094][ T4223] 9pnet_fd: Insufficient options for proto=fd [ 50.972439][ T4221] loop1: detected capacity change from 0 to 512 [ 50.983560][ T4221] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 51.067210][ T4228] loop4: detected capacity change from 0 to 512 [ 51.077531][ T4228] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.091964][ T4228] EXT4-fs (loop4): 1 truncate cleaned up [ 51.104198][ T4228] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.156497][ T4233] loop1: detected capacity change from 0 to 1024 [ 51.163332][ T4233] EXT4-fs: Ignoring removed orlov option [ 51.408314][ T36] hid_parser_main: 116 callbacks suppressed [ 51.408338][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.421782][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.429246][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.436663][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.444036][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.451547][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.458964][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.466787][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.474177][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.481882][ T36] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 51.490077][ T36] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 51.656114][ T4245] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 51.664607][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 51.694619][ T4247] netlink: 'syz.2.249': attribute type 3 has an invalid length. [ 51.727423][ T4249] loop2: detected capacity change from 0 to 256 [ 51.767382][ T4251] loop2: detected capacity change from 0 to 512 [ 51.774010][ T4251] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 51.814325][ T4255] 9pnet_fd: Insufficient options for proto=fd [ 51.838338][ T4257] SELinux: policydb version 576 does not match my version range 15-35 [ 51.846917][ T4257] SELinux: failed to load policy [ 51.870329][ T4260] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.336112][ T4277] loop1: detected capacity change from 0 to 1024 [ 52.342928][ T4277] EXT4-fs: Ignoring removed orlov option [ 52.460737][ T4280] loop0: detected capacity change from 0 to 256 [ 52.472030][ T4282] SELinux: policydb version 576 does not match my version range 15-35 [ 52.481608][ T4282] SELinux: failed to load policy [ 52.517150][ T4284] loop0: detected capacity change from 0 to 512 [ 52.524211][ T4284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.535023][ T4284] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.263: invalid indirect mapped block 4294967295 (level 1) [ 52.549550][ T4284] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.263: invalid indirect mapped block 4294967295 (level 1) [ 52.564187][ T4284] EXT4-fs (loop0): 2 truncates cleaned up [ 52.612891][ T4289] 9pnet_fd: Insufficient options for proto=fd [ 52.708835][ T4295] loop0: detected capacity change from 0 to 1024 [ 52.713827][ T4297] syz!: rxe_newlink: already configured on team_slave_0 [ 52.720724][ T4295] EXT4-fs: Ignoring removed orlov option [ 52.743893][ T4299] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 52.774347][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 52.796322][ T4295] program syz.0.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.837629][ T4306] SELinux: policydb version 576 does not match my version range 15-35 [ 52.850087][ T4306] SELinux: failed to load policy [ 52.875555][ T4309] loop4: detected capacity change from 0 to 256 [ 53.005341][ T4317] loop1: detected capacity change from 0 to 512 [ 53.015845][ T4317] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 53.134238][ T4323] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.179919][ T4327] SELinux: policydb version 576 does not match my version range 15-35 [ 53.188669][ T4327] SELinux: failed to load policy [ 53.239503][ T4331] loop0: detected capacity change from 0 to 1024 [ 53.246196][ T4331] EXT4-fs: Ignoring removed orlov option [ 53.612477][ T4341] netlink: 'syz.2.284': attribute type 3 has an invalid length. [ 53.635309][ T4343] SELinux: policydb version 0 does not match my version range 15-35 [ 53.643413][ T4343] SELinux: failed to load policy [ 53.783876][ T4349] loop2: detected capacity change from 0 to 512 [ 53.790737][ T4349] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 53.870850][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 53.870868][ T29] audit: type=1400 audit(1759574438.261:1543): avc: denied { create } for pid=4353 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.896872][ T29] audit: type=1400 audit(1759574438.281:1544): avc: denied { bind } for pid=4353 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.898780][ T4354] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 53.931623][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 54.043446][ T4360] loop4: detected capacity change from 0 to 512 [ 54.053659][ T4360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.068338][ T4360] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.292: invalid indirect mapped block 4294967295 (level 1) [ 54.082566][ T4360] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.292: invalid indirect mapped block 4294967295 (level 1) [ 54.097115][ T4360] EXT4-fs (loop4): 2 truncates cleaned up [ 54.104665][ T29] audit: type=1404 audit(1759574438.491:1545): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 54.120002][ T29] audit: type=1404 audit(1759574438.521:1546): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 54.150613][ T29] audit: type=1400 audit(1759574438.541:1547): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.184399][ T29] audit: type=1400 audit(1759574438.571:1548): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.208844][ T29] audit: type=1400 audit(1759574438.571:1549): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.232958][ T29] audit: type=1400 audit(1759574438.571:1550): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.258774][ T29] audit: type=1400 audit(1759574438.591:1551): avc: denied { create } for pid=4362 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.279332][ T29] audit: type=1400 audit(1759574438.591:1552): avc: denied { prog_load } for pid=4355 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.303368][ T4364] netlink: 'syz.4.293': attribute type 10 has an invalid length. [ 54.311753][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 54.413498][ T4370] loop0: detected capacity change from 0 to 1024 [ 54.452103][ T4370] EXT4-fs: Ignoring removed orlov option [ 54.499480][ T4375] loop4: detected capacity change from 0 to 1024 [ 54.506556][ T4375] EXT4-fs: Ignoring removed orlov option [ 54.813941][ T4382] loop2: detected capacity change from 0 to 512 [ 54.849490][ T4382] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 55.143144][ T4391] loop3: detected capacity change from 0 to 512 [ 55.158272][ T4391] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 55.181898][ T4393] SELinux: policydb version 576 does not match my version range 15-35 [ 55.199632][ T4393] SELinux: failed to load policy [ 55.999313][ T9] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 56.079157][ T4416] loop3: detected capacity change from 0 to 512 [ 56.086219][ T4416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.097103][ T4416] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.309: invalid indirect mapped block 4294967295 (level 1) [ 56.122387][ T4418] loop0: detected capacity change from 0 to 1024 [ 56.134835][ T4418] EXT4-fs: Ignoring removed orlov option [ 56.152588][ T4416] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.309: invalid indirect mapped block 4294967295 (level 1) [ 56.157961][ T4420] SELinux: policydb version 576 does not match my version range 15-35 [ 56.169185][ T4416] EXT4-fs (loop3): 2 truncates cleaned up [ 56.194350][ T4420] SELinux: failed to load policy [ 56.332982][ T4433] loop4: detected capacity change from 0 to 1024 [ 56.340556][ T4433] EXT4-fs: Ignoring removed orlov option [ 56.408792][ T4438] loop3: detected capacity change from 0 to 256 [ 56.517924][ T4449] loop0: detected capacity change from 0 to 256 [ 56.613879][ T4455] loop0: detected capacity change from 0 to 1024 [ 56.621313][ T4455] EXT4-fs: Ignoring removed orlov option [ 56.665941][ T4455] program syz.0.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.707864][ T3381] hid_parser_main: 26 callbacks suppressed [ 56.707883][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.721227][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.728693][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.736179][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.740398][ T4463] SELinux: policydb version 0 does not match my version range 15-35 [ 56.743569][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.759174][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.766584][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.774027][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.781511][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.788918][ T3381] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 56.796795][ T4463] SELinux: failed to load policy [ 56.801940][ T3381] hid-generic 0003:0004:0000.0015: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 56.834275][ T4465] fido_id[4465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.893953][ T4467] syz!: rxe_newlink: already configured on team_slave_0 [ 56.943427][ T4473] loop3: detected capacity change from 0 to 512 [ 56.959240][ T4473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.015442][ T4473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.328: invalid indirect mapped block 4294967295 (level 1) [ 57.044258][ T4481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'. [ 57.053374][ T4473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.328: invalid indirect mapped block 4294967295 (level 1) [ 57.068086][ T4473] EXT4-fs (loop3): 2 truncates cleaned up [ 57.075834][ T4473] EXT4-fs error (device loop3): ext4_get_parent:1834: inode #11: comm syz.3.328: bad parent inode number: 3 [ 57.153729][ T4485] netlink: 'syz.2.333': attribute type 10 has an invalid length. [ 57.166738][ T4492] SELinux: policydb version 0 does not match my version range 15-35 [ 57.176947][ T4492] SELinux: failed to load policy [ 57.183269][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 57.222346][ T4495] loop3: detected capacity change from 0 to 512 [ 57.232467][ T4495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.251502][ T4495] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.336: invalid indirect mapped block 4294967295 (level 1) [ 57.265662][ T4495] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.336: invalid indirect mapped block 4294967295 (level 1) [ 57.280208][ T4495] EXT4-fs (loop3): 2 truncates cleaned up [ 57.403744][ T4500] loop3: detected capacity change from 0 to 512 [ 57.412887][ T4500] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 57.536941][ T4502] syz!: rxe_newlink: already configured on team_slave_0 [ 57.671487][ T4508] loop3: detected capacity change from 0 to 1024 [ 57.681682][ T4508] EXT4-fs: Ignoring removed orlov option [ 57.713510][ T4508] program syz.3.341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.932921][ T4478] syz.1.331 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 57.943988][ T4478] CPU: 0 UID: 0 PID: 4478 Comm: syz.1.331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.944020][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.944066][ T4478] Call Trace: [ 57.944074][ T4478] [ 57.944083][ T4478] __dump_stack+0x1d/0x30 [ 57.944126][ T4478] dump_stack_lvl+0xe8/0x140 [ 57.944160][ T4478] dump_stack+0x15/0x1b [ 57.944243][ T4478] dump_header+0x81/0x220 [ 57.944290][ T4478] oom_kill_process+0x342/0x400 [ 57.944325][ T4478] out_of_memory+0x979/0xb80 [ 57.944468][ T4478] try_charge_memcg+0x5e6/0x9e0 [ 57.944497][ T4478] ? should_fail_ex+0x30/0x280 [ 57.944557][ T4478] charge_memcg+0x51/0xc0 [ 57.944578][ T4478] __mem_cgroup_charge+0x28/0xb0 [ 57.944603][ T4478] filemap_add_folio+0x111/0x360 [ 57.944669][ T4478] __filemap_get_folio+0x31e/0x6b0 [ 57.944717][ T4478] ? __cond_resched+0x4e/0x90 [ 57.944737][ T4478] filemap_fault+0x447/0xb60 [ 57.944809][ T4478] ? css_rstat_updated+0xb7/0x240 [ 57.944850][ T4478] ? __rcu_read_lock+0x37/0x50 [ 57.944955][ T4478] __do_fault+0xbc/0x200 [ 57.944979][ T4478] handle_mm_fault+0xd69/0x2be0 [ 57.945002][ T4478] ? vma_start_read+0x141/0x1f0 [ 57.945046][ T4478] do_user_addr_fault+0x630/0x1080 [ 57.945076][ T4478] exc_page_fault+0x62/0xa0 [ 57.945116][ T4478] asm_exc_page_fault+0x26/0x30 [ 57.945140][ T4478] RIP: 0033:0x7fd10754efc8 [ 57.945160][ T4478] Code: 08 e8 8c 7c fe ff 48 8b 4b 38 48 8b 74 24 08 48 8b 44 24 20 01 73 28 48 29 f1 4c 8b 54 24 10 4c 8b 44 24 28 a8 06 48 89 4b 38 01 00 0f 84 f0 fe ff ff b8 01 00 00 00 66 2e 0f 1f 84 00 00 00 [ 57.945259][ T4478] RSP: 002b:00007ffee061db00 EFLAGS: 00010202 [ 57.945282][ T4478] RAX: fffffffffffffe64 RBX: 00007fd1083f5720 RCX: 0000001b33023e60 [ 57.945299][ T4478] RDX: 0000001b32c24220 RSI: 0000000000000004 RDI: 00007fd1083f5720 [ 57.945315][ T4478] RBP: ffffffff844d561f R08: 00007fd1078c6038 R09: 00007fd1078b2000 [ 57.945331][ T4478] R10: 00007fd1070d7008 R11: 0000000000000012 R12: 0000000000000012 [ 57.945387][ T4478] R13: 0000000000000000 R14: ffffffff844d5f75 R15: 0000000000000000 [ 57.945402][ T4478] ? __x64_sys_sendmsg+0x25/0x160 [ 57.945426][ T4478] ? __copy_msghdr+0x25f/0x300 [ 57.945471][ T4478] [ 58.157349][ T4478] memory: usage 307200kB, limit 307200kB, failcnt 188 [ 58.164114][ T4478] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 58.172070][ T4478] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 58.179475][ T4478] Memory cgroup stats for /syz1: [ 58.182665][ T4478] cache 0 [ 58.190632][ T4478] rss 0 [ 58.193405][ T4478] shmem 0 [ 58.196407][ T4478] mapped_file 0 [ 58.199872][ T4478] dirty 0 [ 58.202827][ T4478] writeback 0 [ 58.206141][ T4478] workingset_refault_anon 16 [ 58.210735][ T4478] workingset_refault_file 72 [ 58.215392][ T4478] swap 196608 [ 58.218742][ T4478] swapcached 4096 [ 58.222399][ T4478] pgpgin 13312 [ 58.225794][ T4478] pgpgout 13311 [ 58.229270][ T4478] pgfault 16508 [ 58.232803][ T4478] pgmajfault 14 [ 58.236316][ T4478] inactive_anon 0 [ 58.240012][ T4478] active_anon 0 [ 58.243476][ T4478] inactive_file 0 [ 58.247164][ T4478] active_file 0 [ 58.250651][ T4478] unevictable 0 [ 58.254116][ T4478] hierarchical_memory_limit 314572800 [ 58.259543][ T4478] hierarchical_memsw_limit 9223372036854771712 [ 58.265375][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 58.265863][ T4478] total_cache 0 [ 58.278079][ T4478] total_rss 0 [ 58.281372][ T4478] total_shmem 0 [ 58.284882][ T4478] total_mapped_file 0 [ 58.288885][ T4478] total_dirty 0 [ 58.292352][ T4478] total_writeback 0 [ 58.296206][ T4478] total_workingset_refault_anon 16 [ 58.301319][ T4478] total_workingset_refault_file 72 [ 58.306462][ T4478] total_swap 196608 [ 58.309378][ T4518] loop2: detected capacity change from 0 to 512 [ 58.310328][ T4478] total_swapcached 4096 [ 58.310340][ T4478] total_pgpgin 13312 [ 58.324660][ T4478] total_pgpgout 13311 [ 58.328644][ T4478] total_pgfault 16508 [ 58.332628][ T4478] total_pgmajfault 14 [ 58.336702][ T4478] total_inactive_anon 0 [ 58.340860][ T4478] total_active_anon 0 [ 58.344866][ T4478] total_inactive_file 0 [ 58.349103][ T4478] total_active_file 0 [ 58.350064][ T4518] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 58.353116][ T4478] total_unevictable 0 [ 58.353128][ T4478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.331,pid=4478,uid=0 [ 58.379647][ T4478] Memory cgroup out of memory: Killed process 4478 (syz.1.331) total-vm:93956kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 58.471303][ T4532] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 58.515052][ T4493] syz.1.331 (4493) used greatest stack depth: 9704 bytes left [ 58.550265][ T4543] netlink: 76 bytes leftover after parsing attributes in process `syz.3.354'. [ 58.560463][ T4543] netlink: 76 bytes leftover after parsing attributes in process `syz.3.354'. [ 58.587725][ T4546] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 58.589066][ T4545] loop0: detected capacity change from 0 to 1024 [ 58.596329][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 58.603147][ T4545] EXT4-fs: Ignoring removed orlov option [ 58.707940][ T4481] syz.1.331 (4481) used greatest stack depth: 7344 bytes left [ 58.733514][ T36] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 58.771102][ T10] hid-generic 0003:0004:0000.0017: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 58.816570][ T36] hid-generic 0003:0004:0000.0018: hidraw2: USB HID v0.00 Device [syz0] on syz1 [ 58.834371][ T4566] netlink: 'syz.4.360': attribute type 10 has an invalid length. [ 58.843244][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 58.883329][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 58.883419][ T29] audit: type=1326 audit(1759574443.261:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efde376eec9 code=0x7ffc0000 [ 58.913012][ T29] audit: type=1326 audit(1759574443.261:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde376eec9 code=0x7ffc0000 [ 58.936421][ T29] audit: type=1326 audit(1759574443.261:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 58.959816][ T29] audit: type=1326 audit(1759574443.271:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 58.983429][ T29] audit: type=1326 audit(1759574443.271:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 59.006746][ T29] audit: type=1326 audit(1759574443.271:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 59.030048][ T29] audit: type=1326 audit(1759574443.271:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 59.053406][ T29] audit: type=1326 audit(1759574443.271:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 59.076693][ T29] audit: type=1326 audit(1759574443.271:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 59.100002][ T29] audit: type=1326 audit(1759574443.271:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9351b2eec9 code=0x7ffc0000 [ 59.195588][ T4582] SELinux: policydb version 0 does not match my version range 15-35 [ 59.203806][ T4582] SELinux: failed to load policy [ 59.257969][ T4589] loop1: detected capacity change from 0 to 512 [ 59.283466][ T4589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.310966][ T4589] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.366: invalid indirect mapped block 4294967295 (level 1) [ 59.334221][ T4589] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.366: invalid indirect mapped block 4294967295 (level 1) [ 59.348523][ T4589] EXT4-fs (loop1): 2 truncates cleaned up [ 59.393029][ T4605] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 59.401548][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 59.502528][ T4620] loop0: detected capacity change from 0 to 1024 [ 59.511844][ T4622] SELinux: policydb version 0 does not match my version range 15-35 [ 59.516868][ T4620] EXT4-fs: Ignoring removed orlov option [ 59.522054][ T4622] SELinux: failed to load policy [ 59.561574][ T4625] SELinux: policydb version 0 does not match my version range 15-35 [ 59.569867][ T4625] SELinux: failed to load policy [ 59.696662][ T4634] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 59.705870][ T4635] loop4: detected capacity change from 0 to 1024 [ 59.712301][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 59.721875][ T4635] EXT4-fs: Ignoring removed orlov option [ 59.824523][ T4638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 59.880494][ T4644] netlink: 76 bytes leftover after parsing attributes in process `syz.4.385'. [ 59.919642][ T9] hid-generic 0003:0004:0000.0019: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 60.137017][ T4667] SELinux: policydb version 576 does not match my version range 15-35 [ 60.145440][ T4667] SELinux: failed to load policy [ 60.152165][ T4668] loop4: detected capacity change from 0 to 1024 [ 60.159927][ T4668] EXT4-fs: Ignoring removed orlov option [ 60.165741][ T4669] loop0: detected capacity change from 0 to 1024 [ 60.172569][ T4669] EXT4-fs: Ignoring removed orlov option [ 60.254605][ T4674] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 60.317932][ T4681] loop0: detected capacity change from 0 to 512 [ 60.328559][ T4681] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 60.543443][ T4694] loop4: detected capacity change from 0 to 512 [ 60.553597][ T4694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.571438][ T4694] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.402: invalid indirect mapped block 4294967295 (level 1) [ 60.591168][ T4694] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.402: invalid indirect mapped block 4294967295 (level 1) [ 60.605488][ T4694] EXT4-fs (loop4): 2 truncates cleaned up [ 60.612650][ T4694] EXT4-fs error (device loop4): ext4_get_parent:1834: inode #11: comm syz.4.402: bad parent inode number: 3 [ 60.618788][ T4699] loop2: detected capacity change from 0 to 1024 [ 60.634433][ T4699] EXT4-fs: Ignoring removed orlov option [ 60.894918][ T4711] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 60.978289][ T4715] loop2: detected capacity change from 0 to 1024 [ 60.985054][ T4715] EXT4-fs: Ignoring removed orlov option [ 61.073453][ T4721] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 61.120119][ T4725] loop2: detected capacity change from 0 to 512 [ 61.127059][ T4725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.137178][ T4725] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.412: invalid indirect mapped block 4294967295 (level 1) [ 61.151268][ T4725] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.412: invalid indirect mapped block 4294967295 (level 1) [ 61.165970][ T4725] EXT4-fs (loop2): 2 truncates cleaned up [ 61.196525][ T4728] loop2: detected capacity change from 0 to 512 [ 61.203769][ T4728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.215265][ T4728] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.413: invalid indirect mapped block 4294967295 (level 1) [ 61.229590][ T4728] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.413: invalid indirect mapped block 4294967295 (level 1) [ 61.244178][ T4728] EXT4-fs (loop2): 2 truncates cleaned up [ 61.272990][ T4728] EXT4-fs error (device loop2): ext4_get_parent:1834: inode #11: comm syz.2.413: bad parent inode number: 3 [ 61.287709][ T4733] loop1: detected capacity change from 0 to 512 [ 61.300962][ T4733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.313657][ T4733] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.415: invalid indirect mapped block 4294967295 (level 1) [ 61.329493][ T4733] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.415: invalid indirect mapped block 4294967295 (level 1) [ 61.344713][ T4733] EXT4-fs (loop1): 2 truncates cleaned up [ 61.354766][ T4733] EXT4-fs error (device loop1): ext4_get_parent:1834: inode #11: comm syz.1.415: bad parent inode number: 3 [ 61.374812][ T4740] loop0: detected capacity change from 0 to 1024 [ 61.381883][ T4740] EXT4-fs: Ignoring removed orlov option [ 61.431622][ T4745] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.506515][ T4746] ================================================================== [ 61.514639][ T4746] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 61.523859][ T4746] [ 61.526190][ T4746] write to 0xffff8881190c3168 of 4 bytes by task 4740 on cpu 0: [ 61.533823][ T4746] writeback_single_inode+0x150/0x3f0 [ 61.539227][ T4746] sync_inode_metadata+0x5b/0x90 [ 61.544186][ T4746] generic_buffers_fsync_noflush+0xd9/0x120 [ 61.550102][ T4746] ext4_sync_file+0x1ab/0x690 [ 61.554807][ T4746] vfs_fsync_range+0x10a/0x130 [ 61.559606][ T4746] ext4_buffered_write_iter+0x34f/0x3c0 [ 61.565178][ T4746] ext4_file_write_iter+0x387/0xf60 [ 61.570407][ T4746] iter_file_splice_write+0x666/0xa60 [ 61.575792][ T4746] direct_splice_actor+0x153/0x2a0 [ 61.580914][ T4746] splice_direct_to_actor+0x30f/0x680 [ 61.586298][ T4746] do_splice_direct+0xda/0x150 [ 61.591092][ T4746] do_sendfile+0x380/0x650 [ 61.595550][ T4746] __x64_sys_sendfile64+0x105/0x150 [ 61.600793][ T4746] x64_sys_call+0x2bb4/0x3000 [ 61.605489][ T4746] do_syscall_64+0xd2/0x200 [ 61.610014][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.615934][ T4746] [ 61.618265][ T4746] read to 0xffff8881190c3168 of 4 bytes by task 4746 on cpu 1: [ 61.625814][ T4746] generic_buffers_fsync_noflush+0x80/0x120 [ 61.631716][ T4746] ext4_sync_file+0x1ab/0x690 [ 61.636394][ T4746] vfs_fsync_range+0x10a/0x130 [ 61.641155][ T4746] ext4_buffered_write_iter+0x34f/0x3c0 [ 61.646735][ T4746] ext4_file_write_iter+0x387/0xf60 [ 61.651950][ T4746] iter_file_splice_write+0x666/0xa60 [ 61.657323][ T4746] direct_splice_actor+0x153/0x2a0 [ 61.662438][ T4746] splice_direct_to_actor+0x30f/0x680 [ 61.667816][ T4746] do_splice_direct+0xda/0x150 [ 61.672591][ T4746] do_sendfile+0x380/0x650 [ 61.677021][ T4746] __x64_sys_sendfile64+0x105/0x150 [ 61.682312][ T4746] x64_sys_call+0x2bb4/0x3000 [ 61.687019][ T4746] do_syscall_64+0xd2/0x200 [ 61.691531][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.697425][ T4746] [ 61.699742][ T4746] value changed: 0x00000070 -> 0x00000002 [ 61.705459][ T4746] [ 61.707779][ T4746] Reported by Kernel Concurrency Sanitizer on: [ 61.713932][ T4746] CPU: 1 UID: 0 PID: 4746 Comm: syz.0.416 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.723591][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.733645][ T4746] ================================================================== [ 61.749849][ T4752] loop1: detected capacity change from 0 to 1024 [ 61.759871][ T4752] EXT4-fs: Ignoring removed orlov option