last executing test programs: 25.007287014s ago: executing program 2 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 24.93210336s ago: executing program 2 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 24.874657514s ago: executing program 2 (id=232): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 24.007405464s ago: executing program 2 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 23.850617017s ago: executing program 2 (id=246): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220018"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 23.56199303s ago: executing program 2 (id=254): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 23.56184058s ago: executing program 32 (id=254): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 4.613210608s ago: executing program 0 (id=504): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 4.498979007s ago: executing program 0 (id=506): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x301000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) flock(r1, 0x2) 3.618895698s ago: executing program 0 (id=521): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffff81}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) 3.496409198s ago: executing program 0 (id=524): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.619516669s ago: executing program 0 (id=537): mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 2.487538359s ago: executing program 3 (id=542): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 2.471286131s ago: executing program 1 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0xfdef) 2.456724232s ago: executing program 3 (id=544): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x2000000000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_config_ext={0x100000001}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x120005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000002c0)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 2.331111862s ago: executing program 3 (id=548): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 2.248591018s ago: executing program 3 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) socket$inet6(0xa, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 2.247952569s ago: executing program 1 (id=559): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) 2.155305627s ago: executing program 4 (id=551): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') keyctl$negate(0xd, 0x0, 0x800, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @loopback, 0x0, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x4, 0x1, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 1.363616511s ago: executing program 1 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.286679206s ago: executing program 4 (id=564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 1.234923241s ago: executing program 3 (id=554): bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.234757381s ago: executing program 4 (id=555): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0xfffc}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x7, 0xf, 0x4, 0x80, 0x0, 0x81, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000200), 0x9}, 0x2, 0x4, 0x8000, 0x5, 0x0, 0x6, 0xfff7, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r2, 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.166501076s ago: executing program 5 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.125668399s ago: executing program 5 (id=557): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x2a) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.12497742s ago: executing program 1 (id=569): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 1.029799597s ago: executing program 4 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000027c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x88bc9fd0c368d368, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x1, 0x0, [0x7ff, 0x7, 0x53a2, 0x4, 0x5, 0x2, 0x4, 0x0, 0x9, 0x9, 0xfffd, 0x8, 0x1746, 0x1, 0x4, 0xf893], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffff81}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 971.707902ms ago: executing program 5 (id=560): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 970.516382ms ago: executing program 1 (id=561): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) sigaltstack(0x0, 0x0) 894.998988ms ago: executing program 5 (id=562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='.', 0x1}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x2, 0x0, 0x6, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x10, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 880.008489ms ago: executing program 4 (id=563): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000c80)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xae\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94\x81\x98&\xd6\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x00\x00\x00\x00\x00\x00\x00\x0f\xe1\xb4.\xa4\aJ?\xcc\xc6\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xd2D\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15@\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\t4:\x8d\xdb\x1f\x01\xf8\xadoP\x89RJ\xe8n)\x84\xb2\x12\x10n\x9d\xe1!8\x93aO\xb8\xb8\xf7\xa8*\x0e\xa9\x0f.\xcd\x9e\xabf\xf8\xf9W\xed\x8c\xa4\xb8\xb3\xa8\x99\xc3\x8f,\x8eW\x9aA5\xe4\x1e\xda\xa7AO\x85\xf1*\x00\xc4lrh\x93u\x84\xe6\xd4\x9a\x1a!\xf2\x14e\x16`\xc5\x8f\xc3\x8e\\B\aK*\x8b\x85\x10E\xca\xb0qV\xf8^\xfe\x91\x97OC:\aO\xa9\x1c\x93n+\xd9\xf9H\x95\xd4\xccq\x87\n?\xdd{\xaf\xc2|\x83\x8b\n}\xd2q\xb7\x93', 0x1, 0xec, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 866.91831ms ago: executing program 5 (id=565): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 861.629151ms ago: executing program 1 (id=566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 700.722904ms ago: executing program 5 (id=567): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') keyctl$negate(0xd, 0x0, 0x800, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @loopback, 0x0, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x4, 0x1, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 99.559432ms ago: executing program 0 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) socket$inet6(0xa, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 99.391222ms ago: executing program 3 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 0s ago: executing program 4 (id=571): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000140)={0xc, 0x1}) ftruncate(0xffffffffffffffff, 0x2007ffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) uname(0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.506096][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 17.506110][ T29] audit: type=1400 audit(1755730792.652:57): avc: denied { transition } for pid=3177 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.510404][ T29] audit: type=1400 audit(1755730792.652:58): avc: denied { noatsecure } for pid=3177 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.513395][ T29] audit: type=1400 audit(1755730792.652:59): avc: denied { write } for pid=3177 comm="sh" path="pipe:[2349]" dev="pipefs" ino=2349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.516454][ T29] audit: type=1400 audit(1755730792.652:60): avc: denied { rlimitinh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.519052][ T29] audit: type=1400 audit(1755730792.652:61): avc: denied { siginh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 24.771014][ T29] audit: type=1400 audit(1755730799.922:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.771858][ T3289] cgroup: Unknown subsys name 'net' [ 24.793730][ T29] audit: type=1400 audit(1755730799.922:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.821056][ T29] audit: type=1400 audit(1755730799.952:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.960622][ T3289] cgroup: Unknown subsys name 'cpuset' [ 24.966743][ T3289] cgroup: Unknown subsys name 'rlimit' [ 25.115602][ T29] audit: type=1400 audit(1755730800.262:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.139074][ T29] audit: type=1400 audit(1755730800.262:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.159596][ T29] audit: type=1400 audit(1755730800.262:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.175519][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.179962][ T29] audit: type=1400 audit(1755730800.262:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.209236][ T29] audit: type=1400 audit(1755730800.292:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.234145][ T29] audit: type=1400 audit(1755730800.292:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.248754][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.257462][ T29] audit: type=1400 audit(1755730800.342:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.442122][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.464820][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.490779][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 26.567737][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.574875][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.582121][ T3302] bridge_slave_0: entered allmulticast mode [ 26.588616][ T3302] bridge_slave_0: entered promiscuous mode [ 26.599554][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 26.614579][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.621703][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.628914][ T3302] bridge_slave_1: entered allmulticast mode [ 26.635335][ T3302] bridge_slave_1: entered promiscuous mode [ 26.641570][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.648604][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.655846][ T3304] bridge_slave_0: entered allmulticast mode [ 26.662134][ T3304] bridge_slave_0: entered promiscuous mode [ 26.687962][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.695089][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.702240][ T3304] bridge_slave_1: entered allmulticast mode [ 26.708768][ T3304] bridge_slave_1: entered promiscuous mode [ 26.721959][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.729019][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.736206][ T3299] bridge_slave_0: entered allmulticast mode [ 26.742637][ T3299] bridge_slave_0: entered promiscuous mode [ 26.754391][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.772578][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.779646][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.787325][ T3299] bridge_slave_1: entered allmulticast mode [ 26.793652][ T3299] bridge_slave_1: entered promiscuous mode [ 26.800580][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.822791][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.846464][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.856676][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.866907][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.884756][ T3302] team0: Port device team_slave_0 added [ 26.903378][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.913250][ T3302] team0: Port device team_slave_1 added [ 26.943521][ T3304] team0: Port device team_slave_0 added [ 26.949979][ T3299] team0: Port device team_slave_0 added [ 26.955778][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.962904][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.970099][ T3300] bridge_slave_0: entered allmulticast mode [ 26.976528][ T3300] bridge_slave_0: entered promiscuous mode [ 26.989861][ T3304] team0: Port device team_slave_1 added [ 26.996347][ T3299] team0: Port device team_slave_1 added [ 27.006206][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.013280][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.020472][ T3300] bridge_slave_1: entered allmulticast mode [ 27.026743][ T3300] bridge_slave_1: entered promiscuous mode [ 27.036497][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.043624][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.069556][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.080884][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.087821][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.113821][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.146412][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.153421][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.179574][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.190996][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.198016][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.224122][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.249480][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.256484][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.282442][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.296793][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.317902][ T3302] hsr_slave_0: entered promiscuous mode [ 27.323854][ T3302] hsr_slave_1: entered promiscuous mode [ 27.330748][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.337790][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.364006][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.375905][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.385361][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.392441][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.399637][ T3308] bridge_slave_0: entered allmulticast mode [ 27.406146][ T3308] bridge_slave_0: entered promiscuous mode [ 27.427029][ T3299] hsr_slave_0: entered promiscuous mode [ 27.433063][ T3299] hsr_slave_1: entered promiscuous mode [ 27.438806][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 27.444544][ T3299] Cannot create hsr debugfs directory [ 27.460121][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.467214][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.474473][ T3308] bridge_slave_1: entered allmulticast mode [ 27.480806][ T3308] bridge_slave_1: entered promiscuous mode [ 27.512090][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.522571][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.536841][ T3300] team0: Port device team_slave_0 added [ 27.566316][ T3304] hsr_slave_0: entered promiscuous mode [ 27.572482][ T3304] hsr_slave_1: entered promiscuous mode [ 27.578330][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 27.584216][ T3304] Cannot create hsr debugfs directory [ 27.592323][ T3300] team0: Port device team_slave_1 added [ 27.605773][ T3308] team0: Port device team_slave_0 added [ 27.633540][ T3308] team0: Port device team_slave_1 added [ 27.641882][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.648818][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.674776][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.688214][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.695193][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.721190][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.755643][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.762662][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.788603][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.813816][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.820799][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.846970][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.901797][ T3300] hsr_slave_0: entered promiscuous mode [ 27.907704][ T3300] hsr_slave_1: entered promiscuous mode [ 27.913814][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 27.919554][ T3300] Cannot create hsr debugfs directory [ 27.937711][ T3308] hsr_slave_0: entered promiscuous mode [ 27.943691][ T3308] hsr_slave_1: entered promiscuous mode [ 27.949370][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.955115][ T3308] Cannot create hsr debugfs directory [ 28.055186][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.072618][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.083480][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.096268][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.112183][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.126374][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.142359][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.155261][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.175292][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.184737][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.193692][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.202792][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.238928][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.251408][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.264957][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.275179][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.295770][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.314309][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.342853][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.349965][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.359601][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.373055][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.385920][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.392869][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.402736][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.412208][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.419264][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.436800][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.460781][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.476312][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.490826][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.497923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.506525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.513599][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.524716][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.531842][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.542670][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.549713][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.561860][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.568961][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.613777][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.644209][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.651537][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.660414][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.667594][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.706256][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.716751][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.734614][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.743596][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.812127][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.821991][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.833050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.840180][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.865900][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.874787][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.881942][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.908836][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.921272][ T3302] veth0_vlan: entered promiscuous mode [ 28.963788][ T3302] veth1_vlan: entered promiscuous mode [ 29.003313][ T3302] veth0_macvtap: entered promiscuous mode [ 29.011250][ T3302] veth1_macvtap: entered promiscuous mode [ 29.023108][ T3304] veth0_vlan: entered promiscuous mode [ 29.045595][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.056501][ T3304] veth1_vlan: entered promiscuous mode [ 29.068819][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.089214][ T3304] veth0_macvtap: entered promiscuous mode [ 29.099002][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.111575][ T3304] veth1_macvtap: entered promiscuous mode [ 29.127296][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.136169][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.162347][ T3308] veth0_vlan: entered promiscuous mode [ 29.176403][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.193298][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.202049][ T3299] veth0_vlan: entered promiscuous mode [ 29.208320][ T3308] veth1_vlan: entered promiscuous mode [ 29.208767][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.222800][ T3308] veth0_macvtap: entered promiscuous mode [ 29.238334][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.248506][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.258377][ T3299] veth1_vlan: entered promiscuous mode [ 29.268473][ T3308] veth1_macvtap: entered promiscuous mode [ 29.284072][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.308492][ T314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.327545][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.336025][ T314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.350329][ T3299] veth0_macvtap: entered promiscuous mode [ 29.357049][ T314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.374614][ T3299] veth1_macvtap: entered promiscuous mode [ 29.381210][ T314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.397751][ T314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.409918][ T3300] veth0_vlan: entered promiscuous mode [ 29.419378][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.429094][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.438641][ T3300] veth1_vlan: entered promiscuous mode [ 29.452843][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.478400][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.496143][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.519448][ T3300] veth0_macvtap: entered promiscuous mode [ 29.530299][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.585253][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.597289][ T3300] veth1_macvtap: entered promiscuous mode [ 29.616655][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.662677][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.692515][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.724486][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.768066][ T314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.786444][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 29.786459][ T29] audit: type=1400 audit(1755730804.932:117): avc: denied { create } for pid=3485 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.822623][ T314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.848115][ T314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.861771][ T314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.871265][ T29] audit: type=1400 audit(1755730804.932:118): avc: denied { setopt } for pid=3482 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.890895][ T29] audit: type=1400 audit(1755730804.972:119): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.915053][ T29] audit: type=1400 audit(1755730804.972:120): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.939211][ T29] audit: type=1400 audit(1755730804.972:121): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.965120][ T29] audit: type=1400 audit(1755730804.992:122): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.f2sjB1/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.989591][ T29] audit: type=1400 audit(1755730804.992:123): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.011979][ T29] audit: type=1400 audit(1755730804.992:124): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.f2sjB1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.037340][ T29] audit: type=1400 audit(1755730804.992:125): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.059270][ T29] audit: type=1400 audit(1755730804.992:126): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.f2sjB1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.123241][ T3498] loop0: detected capacity change from 0 to 512 [ 30.129944][ T3498] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.198504][ T3498] EXT4-fs (loop0): failed to initialize system zone (-117) [ 30.208825][ T3498] EXT4-fs (loop0): mount failed [ 30.213679][ T3505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3505 comm=syz.2.12 [ 30.262843][ T3505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 30.427460][ T3515] ªªªªªª: renamed from vlan0 (while UP) [ 30.577452][ T3532] process 'syz.1.17' launched './file1' with NULL argv: empty string added [ 30.636182][ T3505] syz.2.12 (3505) used greatest stack depth: 10888 bytes left [ 30.714149][ C1] hrtimer: interrupt took 27931 ns [ 30.848919][ T3542] loop2: detected capacity change from 0 to 2048 [ 30.892695][ T3542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.912227][ T3542] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.020421][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.225745][ T3565] loop1: detected capacity change from 0 to 1024 [ 31.235436][ T3565] ======================================================= [ 31.235436][ T3565] WARNING: The mand mount option has been deprecated and [ 31.235436][ T3565] and is ignored by this kernel. Remove the mand [ 31.235436][ T3565] option from the mount to silence this warning. [ 31.235436][ T3565] ======================================================= [ 31.314745][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.346810][ T3565] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.351869][ T3571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=3571 comm=syz.3.31 [ 31.393190][ T3571] netlink: 'syz.3.31': attribute type 13 has an invalid length. [ 31.450680][ T3571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 31.497154][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.549599][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 31.621643][ T3589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.235508][ T3615] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.284444][ T3615] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.333371][ T3615] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.386973][ T3615] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.427791][ T3622] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 32.454997][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.464413][ T3623] tipc: Started in network mode [ 32.469656][ T3623] tipc: Node identity ac14140f, cluster identity 4711 [ 32.476957][ T3623] tipc: New replicast peer: 255.255.255.83 [ 32.482895][ T3623] tipc: Enabled bearer , priority 10 [ 32.492938][ T314] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.511670][ T314] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525505][ T314] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.585138][ T3631] ip6_vti0: mtu greater than device maximum [ 32.691371][ T3646] netlink: 52 bytes leftover after parsing attributes in process `syz.0.64'. [ 32.759395][ T3657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 32.770877][ T3652] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.792383][ T3657] vlan0: entered allmulticast mode [ 32.797568][ T3657] veth1_to_bond: entered allmulticast mode [ 32.802019][ T3652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 32.812334][ T3652] netlink: 'syz.0.67': attribute type 20 has an invalid length. [ 32.822233][ T3650] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 32.836896][ T3652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 32.845798][ T3652] netlink: 'syz.0.67': attribute type 20 has an invalid length. [ 32.857091][ T31] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.866611][ T3652] Zero length message leads to an empty skb [ 32.867133][ T31] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.891570][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.928726][ T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.962065][ T3666] sd 0:0:1:0: device reset [ 33.168821][ T3679] loop4: detected capacity change from 0 to 1024 [ 33.200440][ T3679] EXT4-fs: Ignoring removed orlov option [ 33.246720][ T3679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.328083][ T3683] loop3: detected capacity change from 0 to 1024 [ 33.384449][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.429619][ T3683] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.81: Allocating blocks 449-513 which overlap fs metadata [ 33.458426][ T3683] SELinux: Context @ is not valid (left unmapped). [ 33.466802][ T3683] EXT4-fs (loop3): pa ffff88810055d070: logic 48, phys. 177, len 21 [ 33.474850][ T3683] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 33.517969][ T3683] syz.3.81 (3683) used greatest stack depth: 10480 bytes left [ 33.544090][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.574607][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 33.593188][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 33.610163][ T3362] tipc: Node number set to 2886997007 [ 33.656908][ T3699] vlan2: entered allmulticast mode [ 33.662878][ T3699] dummy0: entered allmulticast mode [ 33.668270][ T3697] loop3: detected capacity change from 0 to 512 [ 33.691832][ T3697] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 33.699984][ T3697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.712113][ T3697] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.738504][ T3697] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 33.777546][ T3697] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.84: bg 0: block 40: padding at end of block bitmap is not set [ 33.794715][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.819431][ T3697] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 33.863503][ T3708] hub 8-0:1.0: USB hub found [ 33.869396][ T3708] hub 8-0:1.0: 8 ports detected [ 33.880778][ T3697] EXT4-fs (loop3): 1 truncate cleaned up [ 33.904447][ T3697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.918436][ T3715] loop2: detected capacity change from 0 to 128 [ 33.944343][ T3715] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.992061][ T3715] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.011387][ T3697] netlink: 'syz.3.84': attribute type 39 has an invalid length. [ 34.038269][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.114203][ T3730] pim6reg1: entered promiscuous mode [ 34.119527][ T3730] pim6reg1: entered allmulticast mode [ 34.521997][ T3747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 34.752403][ T3762] bridge0: port 3(bond0) entered blocking state [ 34.758705][ T3762] bridge0: port 3(bond0) entered disabled state [ 34.765294][ T3762] bond0: entered allmulticast mode [ 34.770472][ T3762] bond_slave_0: entered allmulticast mode [ 34.776303][ T3762] bond_slave_1: entered allmulticast mode [ 34.783606][ T3762] bond0: entered promiscuous mode [ 34.788704][ T3762] bond_slave_0: entered promiscuous mode [ 34.794497][ T3762] bond_slave_1: entered promiscuous mode [ 34.820267][ T3762] bridge0: port 3(bond0) entered blocking state [ 34.826546][ T3762] bridge0: port 3(bond0) entered forwarding state [ 34.843859][ T3764] bond0: left allmulticast mode [ 34.848771][ T3764] bond_slave_0: left allmulticast mode [ 34.854363][ T3764] bond_slave_1: left allmulticast mode [ 34.859824][ T3764] bond0: left promiscuous mode [ 34.864962][ T3764] bond_slave_0: left promiscuous mode [ 34.870727][ T3764] bond_slave_1: left promiscuous mode [ 34.876254][ T3764] bridge0: port 3(bond0) entered disabled state [ 35.016314][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 35.171619][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 35.171632][ T29] audit: type=1400 audit(1755730810.322:623): avc: denied { create } for pid=3779 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.249856][ T29] audit: type=1400 audit(1755730810.372:624): avc: denied { write } for pid=3781 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.279683][ T3785] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.298045][ T3785] hub 9-0:1.0: USB hub found [ 35.303206][ T3785] hub 9-0:1.0: 8 ports detected [ 35.370292][ T29] audit: type=1400 audit(1755730810.522:625): avc: denied { create } for pid=3789 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 35.399397][ T29] audit: type=1400 audit(1755730810.522:626): avc: denied { ioctl } for pid=3789 comm="syz.4.122" path="socket:[5667]" dev="sockfs" ino=5667 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 35.449065][ T29] audit: type=1400 audit(1755730810.592:627): avc: denied { name_bind 0x1000000 } for pid=3794 comm="syz.0.123" path="socket:[5680]" dev="sockfs" ino=5680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 35.475302][ T29] audit: type=1326 audit(1755730810.602:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 35.498909][ T29] audit: type=1326 audit(1755730810.602:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 35.522390][ T29] audit: type=1326 audit(1755730810.612:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 35.545926][ T29] audit: type=1326 audit(1755730810.612:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 35.569289][ T29] audit: type=1326 audit(1755730810.612:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 35.618401][ T3803] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 35.664199][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 36.272054][ T3825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'. [ 36.282821][ T3825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3825 comm=syz.0.134 [ 36.341029][ T3831] loop0: detected capacity change from 0 to 164 [ 36.342411][ T3833] loop4: detected capacity change from 0 to 1024 [ 36.361932][ T3833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.397011][ T3833] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.139: Allocating blocks 449-513 which overlap fs metadata [ 36.432774][ T3831] syz.0.138: attempt to access beyond end of device [ 36.432774][ T3831] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 36.448034][ T3832] EXT4-fs (loop4): pa ffff88810055d0e0: logic 48, phys. 177, len 21 [ 36.456105][ T3832] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 36.470637][ T3831] syz.0.138: attempt to access beyond end of device [ 36.470637][ T3831] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 36.509117][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.611952][ T3839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 36.646851][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 36.783254][ T3854] loop0: detected capacity change from 0 to 764 [ 36.811131][ T3854] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.894141][ T3863] @ÿ: renamed from bond_slave_0 (while UP) [ 36.907043][ T3856] syz.1.148 (3856) used greatest stack depth: 10176 bytes left [ 37.143806][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.225967][ T3885] netlink: 'syz.2.159': attribute type 5 has an invalid length. [ 37.311139][ T3888] cgroup: Invalid name [ 37.416956][ T3894] SELinux: ebitmap: truncated map [ 37.427131][ T3894] SELinux: failed to load policy [ 37.497775][ T3898] loop0: detected capacity change from 0 to 512 [ 37.546440][ T3898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.637377][ T3898] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.649845][ T3909] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 37.686275][ T3909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.810535][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 37.851723][ T3909] bond1 (unregistering): Released all slaves [ 37.867054][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.251055][ T3937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 38.555729][ T3958] capability: warning: `syz.0.185' uses deprecated v2 capabilities in a way that may be insecure [ 38.679004][ T3964] loop0: detected capacity change from 0 to 512 [ 38.697524][ T3964] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 38.727824][ T3964] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.787429][ T3964] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.187: Block bitmap for bg 0 marked uninitialized [ 38.847728][ T3964] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 38.857191][ T3964] EXT4-fs (loop0): 1 orphan inode deleted [ 38.864701][ T3964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.942085][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.619371][ T3989] loop0: detected capacity change from 0 to 512 [ 39.628276][ T3989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.641418][ T3989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.684989][ T3989] EXT4-fs (loop0): 1 truncate cleaned up [ 39.693565][ T3989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.706922][ T3989] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.853421][ T4003] pim6reg1: entered promiscuous mode [ 39.858876][ T4003] pim6reg1: entered allmulticast mode [ 40.082611][ T4016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 40.282780][ T4016] bridge0: entered promiscuous mode [ 40.307464][ T4016] bridge0: port 3(macvlan2) entered blocking state [ 40.310567][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 40.310609][ T29] audit: type=1326 audit(1755730815.442:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.314115][ T4016] bridge0: port 3(macvlan2) entered disabled state [ 40.320229][ T29] audit: type=1326 audit(1755730815.442:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.320265][ T29] audit: type=1326 audit(1755730815.442:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.396585][ T29] audit: type=1326 audit(1755730815.442:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.419878][ T29] audit: type=1326 audit(1755730815.442:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.443278][ T29] audit: type=1326 audit(1755730815.442:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.466559][ T29] audit: type=1326 audit(1755730815.442:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.490309][ T29] audit: type=1326 audit(1755730815.452:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.513686][ T29] audit: type=1326 audit(1755730815.452:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.537012][ T29] audit: type=1326 audit(1755730815.452:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 40.610246][ T4016] macvlan2: entered allmulticast mode [ 40.615648][ T4016] bridge0: entered allmulticast mode [ 40.622426][ T4016] macvlan2: left allmulticast mode [ 40.627618][ T4016] bridge0: left allmulticast mode [ 40.633713][ T4016] bridge0: left promiscuous mode [ 40.639093][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 40.672439][ T4021] bridge_slave_0: left allmulticast mode [ 40.678208][ T4021] bridge_slave_0: left promiscuous mode [ 40.683912][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.731104][ T4021] bridge_slave_1: left allmulticast mode [ 40.736776][ T4021] bridge_slave_1: left promiscuous mode [ 40.742535][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.781329][ T4021] bond0: (slave bond_slave_0): Releasing backup interface [ 40.816253][ T4038] syz.0.212 (4038) used greatest stack depth: 9608 bytes left [ 40.830579][ T4021] bond0: (slave bond_slave_1): Releasing backup interface [ 40.852840][ T4021] team0: Port device team_slave_0 removed [ 40.863160][ T4021] team0: Port device team_slave_1 removed [ 40.869906][ T4021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.877360][ T4021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.891090][ T4021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.898580][ T4021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.106669][ T4047] loop0: detected capacity change from 0 to 512 [ 41.115241][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'. [ 41.161746][ T4053] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 41.177738][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 41.182791][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 41.197243][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 41.225031][ T4053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.251004][ T4059] bond1: (slave geneve0): making interface the new active one [ 41.259982][ T4059] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 41.312122][ T4059] syz.4.217 (4059) used greatest stack depth: 9104 bytes left [ 41.495285][ T4083] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.522595][ T4085] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 41.818957][ T4094] loop3: detected capacity change from 0 to 128 [ 41.843387][ T4094] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.867424][ T4094] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.893832][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.376976][ T4115] loop1: detected capacity change from 0 to 1024 [ 42.393063][ T4115] EXT4-fs: inline encryption not supported [ 42.411558][ T4118] loop4: detected capacity change from 0 to 512 [ 42.511776][ T4118] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.242: bad orphan inode 17 [ 42.531168][ T4118] ext4_test_bit(bit=16, block=4) = 1 [ 42.536494][ T4118] is_bad_inode(inode)=0 [ 42.541246][ T4118] NEXT_ORPHAN(inode)=0 [ 42.545693][ T4118] max_ino=32 [ 42.548881][ T4118] i_nlink=1 [ 42.560788][ T4118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.604306][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.678562][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.691996][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.933667][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.950584][ T4150] loop3: detected capacity change from 0 to 128 [ 42.987487][ T4150] FAT-fs (loop3): Directory bread(block 32) failed [ 42.995717][ T4150] FAT-fs (loop3): Directory bread(block 33) failed [ 43.004162][ T4150] FAT-fs (loop3): Directory bread(block 34) failed [ 43.013534][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.024713][ T4150] FAT-fs (loop3): Directory bread(block 35) failed [ 43.031445][ T4150] FAT-fs (loop3): Directory bread(block 36) failed [ 43.038296][ T4150] FAT-fs (loop3): Directory bread(block 37) failed [ 43.045135][ T4150] FAT-fs (loop3): Directory bread(block 38) failed [ 43.051821][ T4150] FAT-fs (loop3): Directory bread(block 39) failed [ 43.058441][ T4150] FAT-fs (loop3): Directory bread(block 40) failed [ 43.065321][ T4150] FAT-fs (loop3): Directory bread(block 41) failed [ 43.084240][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.137732][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.179723][ T4154] chnl_net:caif_netlink_parms(): no params data found [ 43.268109][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.275416][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.282616][ T4154] bridge_slave_0: entered allmulticast mode [ 43.288996][ T4154] bridge_slave_0: entered promiscuous mode [ 43.299880][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.307073][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.314494][ T4154] bridge_slave_1: entered allmulticast mode [ 43.320939][ T4154] bridge_slave_1: entered promiscuous mode [ 43.328274][ T31] bridge_slave_1: left allmulticast mode [ 43.333987][ T31] bridge_slave_1: left promiscuous mode [ 43.339715][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.347617][ T31] bridge_slave_0: left allmulticast mode [ 43.353346][ T31] bridge_slave_0: left promiscuous mode [ 43.359064][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.442096][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.452304][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.461775][ T31] bond0 (unregistering): Released all slaves [ 43.477111][ T4176] vlan2: entered allmulticast mode [ 43.493438][ T4154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.505888][ T4154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.519900][ T31] tipc: Disabling bearer [ 43.524967][ T31] tipc: Left network mode [ 43.531931][ T4154] team0: Port device team_slave_0 added [ 43.538469][ T31] hsr_slave_0: left promiscuous mode [ 43.552493][ T31] hsr_slave_1: left promiscuous mode [ 43.568959][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.576615][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.586406][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.593888][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.621125][ T4186] loop4: detected capacity change from 0 to 512 [ 43.635340][ T31] veth1_macvtap: left promiscuous mode [ 43.643610][ T31] veth0_macvtap: left promiscuous mode [ 43.672525][ T4186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.688921][ T4186] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.713411][ T4186] EXT4-fs (loop4): shut down requested (0) [ 43.736245][ T31] team0 (unregistering): Port device team_slave_1 removed [ 43.763162][ T31] team0 (unregistering): Port device team_slave_0 removed [ 43.773210][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.814085][ T4154] team0: Port device team_slave_1 added [ 43.837068][ T4199] syzkaller0: entered promiscuous mode [ 43.842667][ T4199] syzkaller0: entered allmulticast mode [ 43.870790][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.877768][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.903850][ T4154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.938290][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.945354][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.971414][ T4154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.014418][ T4154] hsr_slave_0: entered promiscuous mode [ 44.027182][ T4154] hsr_slave_1: entered promiscuous mode [ 44.033269][ T4154] debugfs: 'hsr0' already exists in 'hsr' [ 44.039022][ T4154] Cannot create hsr debugfs directory [ 44.165007][ T4154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.178081][ T4154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.190459][ T4154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.203596][ T4154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.284675][ T4154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.311575][ T4154] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.338400][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.345520][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.373660][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.380857][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.464894][ T4267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 44.504726][ T4154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.742016][ T4154] veth0_vlan: entered promiscuous mode [ 44.744940][ T4298] infiniband syz!: set down [ 44.752150][ T4298] infiniband syz!: added team_slave_0 [ 44.754151][ T4154] veth1_vlan: entered promiscuous mode [ 44.795827][ T4154] veth0_macvtap: entered promiscuous mode [ 44.804509][ T4154] veth1_macvtap: entered promiscuous mode [ 44.815757][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.833038][ T4298] RDS/IB: syz!: added [ 44.846811][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.861653][ T4298] smc: adding ib device syz! with port count 1 [ 44.868131][ T4298] smc: ib device syz! port 1 has pnetid [ 44.870384][ T3454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.889312][ T3454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.898954][ T3454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.907901][ T3454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.578116][ T4337] lo: entered allmulticast mode [ 45.618073][ T4337] tunl0: entered allmulticast mode [ 45.664824][ T4337] gre0: entered allmulticast mode [ 45.710084][ T4337] gretap0: entered allmulticast mode [ 45.717816][ T4337] erspan0: entered allmulticast mode [ 45.727000][ T4337] ip_vti0: entered allmulticast mode [ 45.737466][ T4337] ip6_vti0: entered allmulticast mode [ 45.748263][ T4337] sit0: entered allmulticast mode [ 45.756296][ T4337] ip6tnl0: entered allmulticast mode [ 45.764035][ T4337] ip6gre0: entered allmulticast mode [ 45.774642][ T4337] syz_tun: entered allmulticast mode [ 45.782228][ T4337] ip6gretap0: entered allmulticast mode [ 45.789408][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.796618][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.802889][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 45.802902][ T29] audit: type=1400 audit(1755730820.922:923): avc: denied { ioctl } for pid=4339 comm="syz.3.281" path="socket:[7044]" dev="sockfs" ino=7044 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.804538][ T4343] netlink: 14 bytes leftover after parsing attributes in process `syz.4.282'. [ 45.812700][ T4337] bridge0: entered allmulticast mode [ 45.856391][ T4337] vcan0: entered allmulticast mode [ 45.862838][ T4337] bond0: entered allmulticast mode [ 45.868067][ T4337] bond_slave_0: entered allmulticast mode [ 45.873974][ T4337] bond_slave_1: entered allmulticast mode [ 45.881441][ T4337] team0: entered allmulticast mode [ 45.886591][ T4337] team_slave_0: entered allmulticast mode [ 45.892485][ T4337] team_slave_1: entered allmulticast mode [ 45.901755][ T4337] nlmon0: entered allmulticast mode [ 45.908000][ T4337] caif0: entered allmulticast mode [ 45.913543][ T4337] batadv0: entered allmulticast mode [ 45.920865][ T4337] vxcan0: entered allmulticast mode [ 45.926999][ T4337] vxcan1: entered allmulticast mode [ 45.933656][ T4337] veth0: entered allmulticast mode [ 45.940604][ T4337] veth1: entered allmulticast mode [ 45.947320][ T4337] wg0: entered allmulticast mode [ 45.955049][ T4337] wg1: entered allmulticast mode [ 45.961549][ T4337] wg2: entered allmulticast mode [ 45.967561][ T4337] veth0_to_bridge: entered allmulticast mode [ 45.977590][ T4337] veth1_to_bridge: entered allmulticast mode [ 45.986146][ T4337] veth0_to_bond: entered allmulticast mode [ 45.995367][ T4337] veth1_to_bond: entered allmulticast mode [ 46.002958][ T4337] veth0_to_team: entered allmulticast mode [ 46.011748][ T4337] veth1_to_team: entered allmulticast mode [ 46.019805][ T4337] veth0_to_batadv: entered allmulticast mode [ 46.027395][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.035163][ T4337] batadv_slave_0: entered allmulticast mode [ 46.042647][ T4337] veth1_to_batadv: entered allmulticast mode [ 46.050819][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.058232][ T4337] batadv_slave_1: entered allmulticast mode [ 46.065781][ T4337] xfrm0: entered allmulticast mode [ 46.072633][ T4337] veth0_to_hsr: entered allmulticast mode [ 46.085072][ T4337] hsr_slave_0: entered allmulticast mode [ 46.092838][ T4337] veth1_to_hsr: entered allmulticast mode [ 46.100277][ T4337] hsr_slave_1: entered allmulticast mode [ 46.107106][ T4337] hsr0: entered allmulticast mode [ 46.113479][ T4337] veth1_virt_wifi: entered allmulticast mode [ 46.127597][ T4337] veth0_virt_wifi: entered allmulticast mode [ 46.135077][ T4337] veth1_vlan: entered allmulticast mode [ 46.142516][ T4337] veth0_vlan: entered allmulticast mode [ 46.151836][ T4337] vlan0: entered allmulticast mode [ 46.157081][ T4337] vlan1: entered allmulticast mode [ 46.162739][ T4337] macvlan0: entered allmulticast mode [ 46.169279][ T4337] macvlan1: entered allmulticast mode [ 46.176337][ T4337] ipvlan0: entered allmulticast mode [ 46.182813][ T4337] ipvlan1: entered allmulticast mode [ 46.188382][ T4337] veth1_macvtap: entered allmulticast mode [ 46.199654][ T4337] veth0_macvtap: entered allmulticast mode [ 46.207821][ T4337] macvtap0: entered allmulticast mode [ 46.214255][ T4337] macsec0: entered allmulticast mode [ 46.228133][ T4337] geneve0: entered allmulticast mode [ 46.241217][ T4337] geneve1: entered allmulticast mode [ 46.247717][ T4337] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 46.255738][ T4337] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 46.264467][ T4337] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 46.272562][ T4337] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 46.280555][ T4337] bridge1: entered allmulticast mode [ 46.308248][ T4343] bond0 (unregistering): Released all slaves [ 46.325369][ T3454] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.346838][ T3454] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.381725][ T3454] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.394422][ T3454] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.418647][ T29] audit: type=1326 audit(1755730821.562:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 46.426662][ T4362] loop4: detected capacity change from 0 to 512 [ 46.464015][ T4362] msdos: Bad value for 'uid' [ 46.468646][ T4362] msdos: Bad value for 'uid' [ 46.480086][ T29] audit: type=1326 audit(1755730821.562:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 46.503702][ T29] audit: type=1326 audit(1755730821.562:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 46.527065][ T29] audit: type=1326 audit(1755730821.562:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc9c5eec23 code=0x7ffc0000 [ 46.550415][ T29] audit: type=1326 audit(1755730821.562:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc9c5ed69f code=0x7ffc0000 [ 46.573620][ T29] audit: type=1326 audit(1755730821.562:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efc9c5eec77 code=0x7ffc0000 [ 46.596916][ T29] audit: type=1326 audit(1755730821.562:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc9c5ed550 code=0x7ffc0000 [ 46.620162][ T29] audit: type=1326 audit(1755730821.562:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc9c5ee7eb code=0x7ffc0000 [ 46.635062][ T4364] loop5: detected capacity change from 0 to 8192 [ 46.643535][ T29] audit: type=1326 audit(1755730821.612:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efc9c5ed84a code=0x7ffc0000 [ 46.744589][ T4370] netlink: 'syz.1.294': attribute type 10 has an invalid length. [ 46.778844][ T4370] team0: left allmulticast mode [ 46.791761][ T4370] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.800247][ T4370] team0: entered allmulticast mode [ 46.805626][ T4370] bond0: (slave team0): Enslaving as an active interface with an up link [ 46.819962][ T4370] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.828089][ T4370] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 46.872011][ T4376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.140966][ T4401] loop1: detected capacity change from 0 to 2048 [ 47.189012][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.207970][ T4401] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.288633][ T4401] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.300: bit already cleared for inode 15 [ 47.304334][ T4416] loop5: detected capacity change from 0 to 128 [ 47.316063][ T4421] mmap: syz.4.303 (4421) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.342429][ T4416] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.385189][ T4416] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.545714][ T4433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.308'. [ 47.567751][ T4435] netlink: zone id is out of range [ 47.581724][ T4435] netlink: zone id is out of range [ 47.589309][ T4435] netlink: zone id is out of range [ 47.594488][ T4435] netlink: zone id is out of range [ 47.640139][ T4435] netlink: zone id is out of range [ 47.652063][ T4435] netlink: zone id is out of range [ 47.669296][ T4435] netlink: zone id is out of range [ 47.678232][ T4435] netlink: zone id is out of range [ 47.684459][ T4435] netlink: zone id is out of range [ 47.760501][ T4154] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.781720][ T4446] vlan2: entered allmulticast mode [ 47.827755][ T4429] loop3: detected capacity change from 0 to 512 [ 47.846475][ T4429] EXT4-fs: Ignoring removed nobh option [ 47.932852][ T4429] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.306: corrupted inode contents [ 47.960213][ T4457] netlink: 'syz.5.318': attribute type 10 has an invalid length. [ 47.971707][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.005366][ T4457] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.023888][ T4457] bond0: (slave team0): Enslaving as an active interface with an up link [ 48.042392][ T4429] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.306: mark_inode_dirty error [ 48.060574][ T4429] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.306: corrupted inode contents [ 48.073758][ T4429] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.306: mark_inode_dirty error [ 48.085274][ T4457] siw: device registration error -23 [ 48.086047][ T4429] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.306: Failed to acquire dquot type 0 [ 48.094857][ T4466] loop4: detected capacity change from 0 to 512 [ 48.102751][ T4429] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.306: corrupted inode contents [ 48.125653][ T4429] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.306: mark_inode_dirty error [ 48.140981][ T4429] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.306: corrupted inode contents [ 48.178239][ T4466] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 48.188099][ T4466] EXT4-fs (loop4): group descriptors corrupted! [ 48.221696][ T4429] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.306: mark_inode_dirty error [ 48.250846][ T4476] loop5: detected capacity change from 0 to 128 [ 48.262580][ T4429] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.306: corrupted inode contents [ 48.285720][ T4476] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.285986][ T4429] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 48.307195][ T4476] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.318865][ T4429] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.306: corrupted inode contents [ 48.347368][ T4154] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.356536][ T4429] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.306: mark_inode_dirty error [ 48.380439][ T4429] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 48.392319][ T4429] EXT4-fs (loop3): 1 truncate cleaned up [ 48.398450][ T4429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.414082][ T4429] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.505520][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 48.524302][ T4486] vxlan0: entered promiscuous mode [ 48.536201][ T4338] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.551544][ T4338] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.570288][ T4338] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.581326][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.657202][ T4493] loop0: detected capacity change from 0 to 1024 [ 48.704191][ T4493] EXT4-fs: Ignoring removed orlov option [ 48.737250][ T4493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.856200][ T4496] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.329: bg 0: block 88: padding at end of block bitmap is not set [ 48.976031][ T4427] syz.3.306 (4427) used greatest stack depth: 7112 bytes left [ 48.984253][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.091665][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.105580][ T4504] loop4: detected capacity change from 0 to 2048 [ 49.142561][ T4504] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.333: bad orphan inode 61 [ 49.171081][ T4504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.262660][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.355960][ T4521] loop1: detected capacity change from 0 to 2048 [ 49.384605][ T4521] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.348: bad orphan inode 61 [ 49.407008][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.448746][ T4524] loop4: detected capacity change from 0 to 128 [ 49.470656][ T4524] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.558275][ T4524] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.576770][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.340'. [ 49.604432][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.606940][ T4532] vlan2: entered allmulticast mode [ 49.618846][ T4532] veth1_virt_wifi: entered allmulticast mode [ 49.637122][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.649380][ T4538] loop1: detected capacity change from 0 to 128 [ 49.742500][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 49.752048][ T4542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.852372][ T4549] bond0: (slave team0): Releasing backup interface [ 49.885083][ T4556] loop3: detected capacity change from 0 to 512 [ 49.898117][ T4549] bridge_slave_0: left allmulticast mode [ 49.903944][ T4549] bridge_slave_0: left promiscuous mode [ 49.909622][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.919676][ T4549] bridge_slave_1: left allmulticast mode [ 49.925451][ T4549] bridge_slave_1: left promiscuous mode [ 49.931234][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.941785][ T4556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.955911][ T4556] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.966811][ T4549] bond0: (slave bond_slave_0): Releasing backup interface [ 49.984780][ T4549] bond0: (slave bond_slave_1): Releasing backup interface [ 49.996020][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.010921][ T4549] team0: Port device team_slave_0 removed [ 50.020919][ T4549] team0: Port device team_slave_1 removed [ 50.030984][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.038827][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.049589][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.057047][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.550959][ T3389] IPVS: starting estimator thread 0... [ 50.640095][ T4575] IPVS: using max 2832 ests per chain, 141600 per kthread [ 50.733986][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 50.842679][ T4580] sd 0:0:1:0: device reset [ 50.896193][ T4583] vlan2: entered allmulticast mode [ 50.991895][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 50.991908][ T29] audit: type=1326 audit(1755730826.142:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.042374][ T4587] loop1: detected capacity change from 0 to 1024 [ 51.064313][ T4587] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.074180][ T29] audit: type=1326 audit(1755730826.182:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.074218][ T29] audit: type=1326 audit(1755730826.182:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.120908][ T29] audit: type=1326 audit(1755730826.182:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.144277][ T29] audit: type=1326 audit(1755730826.182:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.167800][ T29] audit: type=1326 audit(1755730826.182:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.191230][ T29] audit: type=1326 audit(1755730826.182:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.214600][ T29] audit: type=1326 audit(1755730826.182:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f33644febe9 code=0x7ffc0000 [ 51.237958][ T29] audit: type=1326 audit(1755730826.182:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33644fec23 code=0x7ffc0000 [ 51.261558][ T29] audit: type=1326 audit(1755730826.182:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33644fd69f code=0x7ffc0000 [ 51.263138][ T4587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.307272][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.360'. [ 51.316429][ T4594] netlink: 'syz.5.360': attribute type 20 has an invalid length. [ 51.329552][ T3454] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.338983][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.360'. [ 51.347965][ T4594] netlink: 'syz.5.360': attribute type 20 has an invalid length. [ 51.356398][ T3454] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.365436][ T3454] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.384757][ T3454] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.404120][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.474570][ T4601] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 51.523159][ T4601] team0: Port device dummy0 added [ 51.555353][ T4601] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 51.584524][ T4601] team0: Port device dummy0 removed [ 51.596172][ T4601] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.654536][ T4607] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 51.671416][ T4607] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 51.682538][ T4607] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 51.702759][ T4607] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 51.759589][ T4607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.803809][ T4607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.832103][ T4607] bond0 (unregistering): (slave team0): Releasing backup interface [ 51.851733][ T4607] team0: left allmulticast mode [ 51.858307][ T4607] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 51.868253][ T4607] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 51.877860][ T4607] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 51.886564][ T4607] bond0 (unregistering): Released all slaves [ 52.196065][ T4624] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 52.214773][ T4626] netlink: 'syz.5.372': attribute type 1 has an invalid length. [ 52.226141][ T4624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.240566][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 52.277359][ T4624] bond1 (unregistering): Released all slaves [ 52.399144][ T3389] IPVS: starting estimator thread 0... [ 52.450455][ T4639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.542619][ T4638] IPVS: using max 2880 ests per chain, 144000 per kthread [ 52.618413][ T4646] loop1: detected capacity change from 0 to 512 [ 52.639062][ T4646] EXT4-fs: Ignoring removed nobh option [ 52.742997][ T4649] loop3: detected capacity change from 0 to 512 [ 52.767401][ T4646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.377: corrupted inode contents [ 52.818724][ T4649] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 52.828456][ T4649] EXT4-fs (loop3): group descriptors corrupted! [ 52.964484][ T4646] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.377: mark_inode_dirty error [ 53.043274][ T4646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.377: corrupted inode contents [ 53.083549][ T4646] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.377: mark_inode_dirty error [ 53.122422][ T4646] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.377: Failed to acquire dquot type 0 [ 53.148584][ T4646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.377: corrupted inode contents [ 53.269273][ T4646] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.377: mark_inode_dirty error [ 53.373702][ T4646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.377: corrupted inode contents [ 53.473682][ T4646] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.377: mark_inode_dirty error [ 53.541002][ T4646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.377: corrupted inode contents [ 53.580954][ T4646] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 53.596459][ T4646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.377: corrupted inode contents [ 53.636476][ T4646] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.377: mark_inode_dirty error [ 53.739408][ T4646] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 53.773026][ T4646] EXT4-fs (loop1): 1 truncate cleaned up [ 53.808165][ T4646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.885423][ T4646] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.971308][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 54.120939][ T4742] lo: entered allmulticast mode [ 54.127490][ T4742] tunl0: entered allmulticast mode [ 54.136464][ T4742] gre0: entered allmulticast mode [ 54.145314][ T4742] gretap0: entered allmulticast mode [ 54.161862][ T4742] erspan0: entered allmulticast mode [ 54.169258][ T4742] ip_vti0: entered allmulticast mode [ 54.181603][ T4742] ip6_vti0: entered allmulticast mode [ 54.198625][ T4742] sit0: entered allmulticast mode [ 54.206434][ T4742] ip6tnl0: entered allmulticast mode [ 54.213730][ T4742] ip6gre0: entered allmulticast mode [ 54.221192][ T4742] syz_tun: entered allmulticast mode [ 54.227417][ T4742] ip6gretap0: entered allmulticast mode [ 54.235360][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.242635][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.250649][ T4742] bridge0: entered allmulticast mode [ 54.257514][ T4742] vcan0: entered allmulticast mode [ 54.265103][ T4742] bond0: entered allmulticast mode [ 54.270413][ T4742] bond_slave_0: entered allmulticast mode [ 54.276260][ T4742] bond_slave_1: entered allmulticast mode [ 54.284942][ T4742] team0: entered allmulticast mode [ 54.290270][ T4742] team_slave_0: entered allmulticast mode [ 54.296232][ T4742] team_slave_1: entered allmulticast mode [ 54.305401][ T4742] dummy0: entered allmulticast mode [ 54.312500][ T4742] nlmon0: entered allmulticast mode [ 54.319130][ T4742] caif0: entered allmulticast mode [ 54.325879][ T4742] batadv0: entered allmulticast mode [ 54.332925][ T4742] vxcan0: entered allmulticast mode [ 54.338942][ T4742] vxcan1: entered allmulticast mode [ 54.346132][ T4742] veth0: entered allmulticast mode [ 54.352927][ T4742] veth1: entered allmulticast mode [ 54.359929][ T4742] wg1: entered allmulticast mode [ 54.381201][ T4742] wg2: entered allmulticast mode [ 54.387461][ T4742] veth0_to_bridge: entered allmulticast mode [ 54.403034][ T4742] veth1_to_bridge: entered allmulticast mode [ 54.419369][ T4742] veth0_to_bond: entered allmulticast mode [ 54.437201][ T4742] veth1_to_bond: entered allmulticast mode [ 54.445114][ T4742] veth0_to_team: entered allmulticast mode [ 54.453460][ T4742] veth1_to_team: entered allmulticast mode [ 54.461698][ T4742] veth0_to_batadv: entered allmulticast mode [ 54.468910][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.476834][ T4742] batadv_slave_0: entered allmulticast mode [ 54.494683][ T4742] veth1_to_batadv: entered allmulticast mode [ 54.501927][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.509500][ T4742] batadv_slave_1: entered allmulticast mode [ 54.516708][ T4742] xfrm0: entered allmulticast mode [ 54.523051][ T4742] veth0_to_hsr: entered allmulticast mode [ 54.530490][ T4742] hsr_slave_0: entered allmulticast mode [ 54.536774][ T4742] veth1_to_hsr: entered allmulticast mode [ 54.544960][ T4742] hsr_slave_1: entered allmulticast mode [ 54.562097][ T4742] hsr0: entered allmulticast mode [ 54.568408][ T4742] veth1_virt_wifi: entered allmulticast mode [ 54.577146][ T4742] veth0_virt_wifi: entered allmulticast mode [ 54.581454][ T4644] syz.1.377 (4644) used greatest stack depth: 6152 bytes left [ 54.585733][ T4742] veth1_vlan: entered allmulticast mode [ 54.605062][ T4745] loop5: detected capacity change from 0 to 2048 [ 54.611830][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.639264][ T4745] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.392: bad orphan inode 61 [ 54.681083][ T4742] veth0_vlan: entered allmulticast mode [ 54.687873][ T4745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.708340][ T4742] vlan0: entered allmulticast mode [ 54.713658][ T4742] vlan1: entered allmulticast mode [ 54.720600][ T4742] macvlan0: entered allmulticast mode [ 54.754798][ T4154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.764676][ T4742] macvlan1: entered allmulticast mode [ 54.773280][ T4742] ipvlan0: entered allmulticast mode [ 54.778645][ T4742] ipvlan1: entered allmulticast mode [ 54.800265][ T4742] veth1_macvtap: entered allmulticast mode [ 54.809176][ T4742] veth0_macvtap: entered allmulticast mode [ 54.830505][ T4742] macvtap0: entered allmulticast mode [ 54.842614][ T4742] macsec0: entered allmulticast mode [ 54.859607][ T4742] geneve0: entered allmulticast mode [ 54.901522][ T4742] geneve1: entered allmulticast mode [ 54.920891][ T4742] netdevsim netdevsim3 eth0: entered allmulticast mode [ 54.928027][ T4742] netdevsim netdevsim3 eth1: entered allmulticast mode [ 54.948497][ T4742] netdevsim netdevsim3 eth2: entered allmulticast mode [ 54.955663][ T4742] netdevsim netdevsim3 eth3: entered allmulticast mode [ 54.976799][ T4660] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.000944][ T4660] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.009387][ T4662] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.027630][ T4662] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.063433][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 55.085273][ T4766] vlan0: entered allmulticast mode [ 55.101338][ T4766] dummy0: entered allmulticast mode [ 55.213858][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 55.520841][ T4808] net_ratelimit: 13 callbacks suppressed [ 55.520859][ T4808] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 55.596796][ T4821] tipc: Started in network mode [ 55.601820][ T4821] tipc: Node identity ac14140f, cluster identity 4711 [ 55.613836][ T4821] tipc: New replicast peer: 255.255.255.255 [ 55.619906][ T4821] tipc: Enabled bearer , priority 10 [ 56.010079][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 56.010097][ T29] audit: type=1326 audit(1755730831.152:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.039763][ T29] audit: type=1326 audit(1755730831.152:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.063261][ T29] audit: type=1326 audit(1755730831.152:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.087190][ T29] audit: type=1326 audit(1755730831.222:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.110617][ T29] audit: type=1326 audit(1755730831.222:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.199381][ T29] audit: type=1326 audit(1755730831.342:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.222932][ T29] audit: type=1326 audit(1755730831.342:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.246350][ T29] audit: type=1326 audit(1755730831.342:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.273786][ T29] audit: type=1326 audit(1755730831.342:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.297296][ T29] audit: type=1326 audit(1755730831.352:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4828 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9c5eebe9 code=0x7ffc0000 [ 56.417269][ T4842] loop3: detected capacity change from 0 to 512 [ 56.437358][ T4842] EXT4-fs: Ignoring removed orlov option [ 56.650829][ T3389] tipc: Node number set to 2886997007 [ 56.662944][ T4842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.733306][ T4842] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.767393][ T4842] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.416: iget: bad i_size value: 2533274857506816 [ 56.833351][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.845661][ T4857] ipvlan2: entered promiscuous mode [ 56.862009][ T4857] bridge0: port 1(ipvlan2) entered blocking state [ 56.868480][ T4857] bridge0: port 1(ipvlan2) entered disabled state [ 56.895788][ T4857] ipvlan2: entered allmulticast mode [ 56.901138][ T4857] bridge0: entered allmulticast mode [ 56.910835][ T4857] ipvlan2: left allmulticast mode [ 56.915893][ T4857] bridge0: left allmulticast mode [ 57.020832][ T4866] netlink: 'syz.4.425': attribute type 4 has an invalid length. [ 57.053413][ T4866] netlink: 'syz.4.425': attribute type 4 has an invalid length. [ 57.164271][ T4879] bond2: entered promiscuous mode [ 57.169365][ T4879] bond2: entered allmulticast mode [ 57.176012][ T4879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.188212][ T4879] bond2 (unregistering): Released all slaves [ 57.251318][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 57.264836][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 57.361510][ T4888] loop5: detected capacity change from 0 to 512 [ 57.371914][ T4888] EXT4-fs: Ignoring removed nobh option [ 57.413603][ T4888] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.435: corrupted inode contents [ 57.474047][ T4888] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.435: mark_inode_dirty error [ 57.492755][ T4888] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.435: corrupted inode contents [ 57.506331][ T4888] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.435: mark_inode_dirty error [ 57.523142][ T4888] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.435: Failed to acquire dquot type 0 [ 57.539479][ T4888] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.435: corrupted inode contents [ 57.571092][ T4888] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.435: mark_inode_dirty error [ 57.804067][ T4888] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.435: corrupted inode contents [ 57.857368][ T4888] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.435: mark_inode_dirty error [ 57.889004][ T4888] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.435: corrupted inode contents [ 58.007552][ T4888] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 58.053012][ T4888] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.435: corrupted inode contents [ 58.286076][ T4888] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.435: mark_inode_dirty error [ 58.290314][ T4941] lo: left allmulticast mode [ 58.302180][ T4941] tunl0: left allmulticast mode [ 58.307161][ T4941] gre0: left allmulticast mode [ 58.312082][ T4941] gretap0: left allmulticast mode [ 58.317206][ T4941] erspan0: left allmulticast mode [ 58.322321][ T4941] ip_vti0: left allmulticast mode [ 58.327421][ T4941] ip6_vti0: left allmulticast mode [ 58.332708][ T4941] sit0: left allmulticast mode [ 58.337982][ T4941] ip6tnl0: left allmulticast mode [ 58.343128][ T4941] ip6gre0: left allmulticast mode [ 58.348225][ T4941] syz_tun: left allmulticast mode [ 58.353401][ T4941] ip6gretap0: left allmulticast mode [ 58.358843][ T4941] bridge0: left allmulticast mode [ 58.364045][ T4941] vcan0: left allmulticast mode [ 58.371486][ T4888] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 58.376339][ T4941] nlmon0: left allmulticast mode [ 58.385719][ T4941] caif0: left allmulticast mode [ 58.391386][ T4941] batadv0: left allmulticast mode [ 58.396596][ T4941] vxcan0: left allmulticast mode [ 58.401660][ T4941] vxcan1: left allmulticast mode [ 58.406734][ T4941] veth0: left allmulticast mode [ 58.411822][ T4941] veth1: left allmulticast mode [ 58.416815][ T4941] wg0: left allmulticast mode [ 58.421699][ T4941] wg1: left allmulticast mode [ 58.423575][ T4888] EXT4-fs (loop5): 1 truncate cleaned up [ 58.426521][ T4941] wg2: left allmulticast mode [ 58.426571][ T4941] veth0_to_bridge: left allmulticast mode [ 58.442979][ T4941] veth1_to_bridge: left allmulticast mode [ 58.448883][ T4941] veth0_to_bond: left allmulticast mode [ 58.453104][ T4888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.454670][ T4941] bond_slave_0: left allmulticast mode [ 58.454721][ T4941] veth1_to_bond: left allmulticast mode [ 58.454811][ T4941] bond_slave_1: left allmulticast mode [ 58.484039][ T4941] veth0_to_team: left allmulticast mode [ 58.489709][ T4941] team_slave_0: left allmulticast mode [ 58.495369][ T4941] veth1_to_team: left allmulticast mode [ 58.501105][ T4941] team_slave_1: left allmulticast mode [ 58.506623][ T4941] veth0_to_batadv: left allmulticast mode [ 58.512541][ T4941] batadv_slave_0: left allmulticast mode [ 58.513279][ T4888] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.518388][ T4941] veth1_to_batadv: left allmulticast mode [ 58.518487][ T4941] batadv_slave_1: left allmulticast mode [ 58.518593][ T4941] xfrm0: left allmulticast mode [ 58.518751][ T4941] veth0_to_hsr: left allmulticast mode [ 58.518885][ T4941] veth1_to_hsr: left allmulticast mode [ 58.519083][ T4941] hsr0: left allmulticast mode [ 58.519096][ T4941] hsr_slave_0: left allmulticast mode [ 58.519110][ T4941] hsr_slave_1: left allmulticast mode [ 58.519237][ T4941] veth1_virt_wifi: left allmulticast mode [ 58.519287][ T4941] veth0_virt_wifi: left allmulticast mode [ 58.519408][ T4941] veth1_vlan: left allmulticast mode [ 58.519545][ T4941] vlan0: left allmulticast mode [ 58.519599][ T4941] vlan1: left allmulticast mode [ 58.519715][ T4941] macvlan0: left allmulticast mode [ 58.519800][ T4941] macvlan1: left allmulticast mode [ 58.519849][ T4941] ipvlan0: left allmulticast mode [ 58.519916][ T4941] ipvlan1: left allmulticast mode [ 58.519927][ T4941] veth0_vlan: left allmulticast mode [ 58.520037][ T4941] veth1_macvtap: left allmulticast mode [ 58.520157][ T4941] veth0_macvtap: left allmulticast mode [ 58.520205][ T4941] macvtap0: left allmulticast mode [ 58.520265][ T4941] macsec0: left allmulticast mode [ 58.520318][ T4941] geneve0: left allmulticast mode [ 58.520442][ T4941] geneve1: left allmulticast mode [ 58.565381][ T4941] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 58.678608][ T4941] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 58.686550][ T4941] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 58.694039][ T4941] bridge1: left allmulticast mode [ 58.701052][ T4941] vxlan0: left promiscuous mode [ 58.707219][ T4662] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.707749][ T4154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.717255][ T4662] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.735483][ T4662] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.801989][ T4662] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.046615][ T4955] loop4: detected capacity change from 0 to 512 [ 59.089254][ T4955] EXT4-fs: Ignoring removed nobh option [ 59.113353][ T4955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.448: corrupted inode contents [ 59.189092][ T4974] veth0: entered promiscuous mode [ 59.208411][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 59.218551][ T4955] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.448: mark_inode_dirty error [ 59.243464][ T4974] veth0 (unregistering): left promiscuous mode [ 59.285051][ T4955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.448: corrupted inode contents [ 59.300292][ T4955] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.448: mark_inode_dirty error [ 59.313126][ T4955] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.448: Failed to acquire dquot type 0 [ 59.332879][ T4955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.448: corrupted inode contents [ 59.346833][ T4955] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.448: mark_inode_dirty error [ 59.364730][ T4955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.448: corrupted inode contents [ 59.377591][ T4955] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.448: mark_inode_dirty error [ 59.389510][ T4955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.448: corrupted inode contents [ 59.401896][ T4955] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 59.420108][ T4955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.448: corrupted inode contents [ 59.438539][ T4955] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.448: mark_inode_dirty error [ 59.497437][ T4991] wg2: entered promiscuous mode [ 59.502401][ T4991] wg2: entered allmulticast mode [ 59.508753][ T4955] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 59.540860][ T4955] EXT4-fs (loop4): 1 truncate cleaned up [ 59.546892][ T4955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.648549][ T4955] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.805182][ T5006] bridge: RTM_NEWNEIGH with invalid ether address [ 59.852239][ T5010] netlink: 5 bytes leftover after parsing attributes in process `syz.1.471'. [ 59.866834][ T5010] 0ªî{X¹¦: renamed from gretap0 [ 59.878945][ T5010] 0ªî{X¹¦: entered allmulticast mode [ 59.960667][ T5010] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 59.977090][ T5013] pim6reg1: entered promiscuous mode [ 59.982588][ T5013] pim6reg1: entered allmulticast mode [ 60.152619][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.820099][ T5039] Unsupported ieee802154 address type: 0 [ 61.028534][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 61.028551][ T29] audit: type=1326 audit(1755730836.172:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91a5da5ba7 code=0x7ffc0000 [ 61.087450][ T29] audit: type=1326 audit(1755730836.212:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91a5d4add9 code=0x7ffc0000 [ 61.110978][ T29] audit: type=1326 audit(1755730836.212:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91a5da5ba7 code=0x7ffc0000 [ 61.134713][ T29] audit: type=1326 audit(1755730836.212:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91a5d4add9 code=0x7ffc0000 [ 61.158106][ T29] audit: type=1326 audit(1755730836.212:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f91a5daebe9 code=0x7ffc0000 [ 61.181467][ T29] audit: type=1326 audit(1755730836.212:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91a5da5ba7 code=0x7ffc0000 [ 61.204712][ T29] audit: type=1326 audit(1755730836.212:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91a5d4add9 code=0x7ffc0000 [ 61.228215][ T29] audit: type=1326 audit(1755730836.212:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f91a5daebe9 code=0x7ffc0000 [ 61.251641][ T29] audit: type=1326 audit(1755730836.222:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91a5da5ba7 code=0x7ffc0000 [ 61.274973][ T29] audit: type=1326 audit(1755730836.222:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.0.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91a5d4add9 code=0x7ffc0000 [ 61.344026][ T5056] loop5: detected capacity change from 0 to 2048 [ 61.391164][ T5056] loop5: p1 < > p4 [ 61.401020][ T5056] loop5: p4 size 8388608 extends beyond EOD, truncated [ 61.418656][ T2990] loop5: p1 < > p4 [ 61.430664][ T2990] loop5: p4 size 8388608 extends beyond EOD, truncated [ 61.482687][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 61.528284][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 61.545910][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 61.546673][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 61.605255][ T5072] loop3: detected capacity change from 0 to 512 [ 61.606337][ T5072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.616035][ T5071] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 61.617407][ T5072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.617487][ T5072] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.623719][ T5071] team0: Port device dummy0 added [ 61.626265][ T5071] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 61.626717][ T5071] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.630115][ T5071] team0: Failed to send options change via netlink (err -105) [ 61.630182][ T5071] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.630346][ T5071] team0: Port device dummy0 removed [ 61.632334][ T5071] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.801670][ T5084] syz.1.501 uses obsolete (PF_INET,SOCK_PACKET) [ 61.817417][ T5084] loop1: detected capacity change from 0 to 512 [ 61.825342][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.826045][ T5084] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.846192][ T5084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.858602][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.504'. [ 61.884743][ T5084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.893240][ T5084] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.912859][ T5084] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.501: Allocating blocks 41-42 which overlap fs metadata [ 61.927605][ T5088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5088 comm=syz.0.504 [ 61.928496][ T5084] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.501: Allocating blocks 41-42 which overlap fs metadata [ 61.956402][ T5084] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.501: Failed to acquire dquot type 1 [ 61.968214][ T5084] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.991919][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.501: corrupted inode contents [ 62.011049][ T5084] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.501: mark_inode_dirty error [ 62.024336][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.501: corrupted inode contents [ 62.036744][ T5084] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.501: mark_inode_dirty error [ 62.049373][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.501: corrupted inode contents [ 62.063369][ T5084] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 62.077009][ T5084] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.501: corrupted inode contents [ 62.089246][ T5084] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.501: mark_inode_dirty error [ 62.100656][ T5084] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 62.110760][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 62.116668][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.147914][ T5084] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.173630][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.189387][ T5103] loop3: detected capacity change from 0 to 512 [ 62.212603][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.234013][ T5103] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.330567][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.713000][ T5131] loop3: detected capacity change from 0 to 2048 [ 62.724031][ T5131] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.737436][ T5131] EXT4-fs: Mount option(s) incompatible with ext2 [ 63.399600][ T5153] 9pnet: p9_errstr2errno: server reported unknown error [ 63.479755][ T5156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 63.488859][ T5156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 63.609176][ T5158] loop4: detected capacity change from 0 to 128 [ 63.809277][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 63.828075][ T5169] syzkaller0: entered promiscuous mode [ 63.833644][ T5169] syzkaller0: entered allmulticast mode [ 63.912569][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.028910][ T5193] netlink: 5 bytes leftover after parsing attributes in process `syz.3.544'. [ 64.038914][ T5193] 0ªX¹¦D: renamed from gretap0 [ 64.052195][ T5193] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 64.095207][ T5195] syz.4.545 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.140900][ T5200] loop4: detected capacity change from 0 to 164 [ 64.172193][ T5200] syz.4.547: attempt to access beyond end of device [ 64.172193][ T5200] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.187626][ T5200] syz.4.547: attempt to access beyond end of device [ 64.187626][ T5200] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.245136][ T5207] loop3: detected capacity change from 0 to 128 [ 65.406722][ T5238] netlink: 'syz.5.557': attribute type 10 has an invalid length. [ 65.423113][ T5238] team0: Port device dummy0 added [ 65.441706][ T5238] netlink: 'syz.5.557': attribute type 10 has an invalid length. [ 65.457007][ T5238] team0: Port device dummy0 removed [ 65.473079][ T5238] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.525315][ T5245] loop1: detected capacity change from 0 to 512 [ 65.534636][ T5245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.552227][ T5245] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.566573][ T5245] EXT4-fs (loop1): 1 truncate cleaned up [ 65.573443][ T5245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.621896][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.636080][ T5254] macvlan2: entered promiscuous mode [ 65.641528][ T5254] macvlan2: entered allmulticast mode [ 65.648197][ T5254] bond1: entered promiscuous mode [ 65.653807][ T5254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.672114][ T5254] bond1: left promiscuous mode [ 66.405033][ T5267] loop0: detected capacity change from 0 to 128 [ 66.490483][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 66.490499][ T29] audit: type=1400 audit(1755730841.642:2278): avc: denied { write } for pid=5270 comm="syz.4.571" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.770055][ T29] audit: type=1400 audit(1755730841.672:2279): avc: denied { block_suspend } for pid=5264 comm="syz.3.570" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.116654][ T5269] ================================================================== [ 67.124768][ T5269] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 67.132701][ T5269] [ 67.135004][ T5269] write to 0xffff888119498e14 of 4 bytes by task 5267 on cpu 1: [ 67.142603][ T5269] xas_set_mark+0x12b/0x140 [ 67.147108][ T5269] tag_pages_for_writeback+0xc2/0x290 [ 67.152458][ T5269] writeback_iter+0x340/0x820 [ 67.157110][ T5269] mpage_writepages+0x87/0x1250 [ 67.161955][ T5269] fat_writepages+0x24/0x30 [ 67.166434][ T5269] do_writepages+0x1c3/0x310 [ 67.171001][ T5269] file_write_and_wait_range+0x156/0x2c0 [ 67.176617][ T5269] __generic_file_fsync+0x46/0x140 [ 67.181734][ T5269] fat_file_fsync+0x49/0x100 [ 67.186315][ T5269] vfs_fsync_range+0x10d/0x130 [ 67.191064][ T5269] generic_file_write_iter+0x1b8/0x2f0 [ 67.196519][ T5269] iter_file_splice_write+0x663/0xa60 [ 67.201887][ T5269] direct_splice_actor+0x153/0x2a0 [ 67.206992][ T5269] splice_direct_to_actor+0x30f/0x680 [ 67.212343][ T5269] do_splice_direct+0xda/0x150 [ 67.217084][ T5269] do_sendfile+0x380/0x650 [ 67.221514][ T5269] __x64_sys_sendfile64+0x105/0x150 [ 67.226725][ T5269] x64_sys_call+0x2bb0/0x2ff0 [ 67.231403][ T5269] do_syscall_64+0xd2/0x200 [ 67.235895][ T5269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.241805][ T5269] [ 67.244122][ T5269] read to 0xffff888119498e14 of 4 bytes by task 5269 on cpu 0: [ 67.251643][ T5269] __writeback_single_inode+0x1f9/0x7c0 [ 67.257184][ T5269] writeback_single_inode+0x167/0x3e0 [ 67.262537][ T5269] sync_inode_metadata+0x5b/0x90 [ 67.267743][ T5269] __generic_file_fsync+0xf8/0x140 [ 67.272866][ T5269] fat_file_fsync+0x49/0x100 [ 67.277432][ T5269] vfs_fsync_range+0x10d/0x130 [ 67.282181][ T5269] generic_file_write_iter+0x1b8/0x2f0 [ 67.287617][ T5269] iter_file_splice_write+0x663/0xa60 [ 67.292966][ T5269] direct_splice_actor+0x153/0x2a0 [ 67.298059][ T5269] splice_direct_to_actor+0x30f/0x680 [ 67.303425][ T5269] do_splice_direct+0xda/0x150 [ 67.308182][ T5269] do_sendfile+0x380/0x650 [ 67.312609][ T5269] __x64_sys_sendfile64+0x105/0x150 [ 67.317788][ T5269] x64_sys_call+0x2bb0/0x2ff0 [ 67.322443][ T5269] do_syscall_64+0xd2/0x200 [ 67.327016][ T5269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.332888][ T5269] [ 67.335190][ T5269] value changed: 0x02000021 -> 0x04000021 [ 67.340879][ T5269] [ 67.343205][ T5269] Reported by Kernel Concurrency Sanitizer on: [ 67.349339][ T5269] CPU: 0 UID: 0 PID: 5269 Comm: syz.0.568 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.358945][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.368987][ T5269] ==================================================================