last executing test programs: 4.887627137s ago: executing program 1 (id=166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x122880, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r2, 0x0, 0x100000002}, 0x18) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 4.732770299s ago: executing program 1 (id=168): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x20000, &(0x7f0000000c00)={[{@errors_remount}, {@data_ordered}]}, 0xfe, 0x47a, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r5, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) clock_gettime(0x6, &(0x7f00000002c0)) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010027bd7004ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="104e0600016a0300300012801100f6c5829a696467655f736c617665000100001800058004001800060002000e0000000500010003000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0xffff, 0x100, 0x8, 0x20300, r1, 0x1, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c80)={r0, &(0x7f0000000c40)}, 0x20) 3.801980364s ago: executing program 4 (id=187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000080)={0x0, 0xdd1, 0xffffffb2, 0x0, 0x88fd, 0x10}) r4 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x800, 0xb, &(0x7f0000000040)=""/11, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x4, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x3, 0x3, 0x4}], 0x10, 0x4}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000940)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000980)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xf, 0xe, &(0x7f0000000a00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x4, 0x1, 0x3, 0x1, 0xe, 0x50, 0x1}], &(0x7f0000000900)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xe, 0xf, 0xf70}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000200), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000600)=""/181, 0xb5, 0x0, &(0x7f0000000380)=""/21, 0x15}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r5}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x3d, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000800)="b9", 0x1}], 0x1}}], 0x2, 0x0) 3.622151019s ago: executing program 3 (id=190): perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0xca, 0x5, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x2}, 0x9c6, 0xfc, 0x7, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="44010000100001000000000800800000fe80eff8932d2e7415e40000000000aa000000000000000000000000000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000004800010073686132353600"], 0x144}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000400)) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000280)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000480)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x1, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x18) sendfile(r1, r1, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x11, 0x1, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]}) 1.388797449s ago: executing program 2 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.317749454s ago: executing program 2 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.197275404s ago: executing program 2 (id=231): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb41}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x93, 0x40037, 0x976, 0x4, 0x0, 0x5dc8}) 1.157950717s ago: executing program 2 (id=232): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000340)={[{@orlov}, {@nouser_xattr}]}, 0x1, 0x4b7, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c000180"], 0x150}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$qrtr(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002100)="f20fe54a", 0x4}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000000ffff008400000000000100010076cd786b3e2ac9d65f31164b2f2932f6ba4d539ca5fb8fb2408d42c29e46da38dea23538af1a289182448d215020f545c082756b1b3005072def65e7146f5b5a610726a34fc29650fb17d45c2511d0813b0c59d198d6d0bc6fa5cc021abf018aa772ed474edea46f0689da1f4c2539645eb4213169ff59359f2aa81dbda2b300dab73629e4e3ed6a831026fb94168135e3654171b5b842b3a9d63595e1369d8c7fd3a83967fb777998caff22de5ca02f7c87e593088b187374f505f57e89e030c0"], 0x20, 0x1}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000980)={0xa, 0x2, 0x400, @loopback, 0xfffffffd}, 0x71) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0x2, 0x4) shutdown(r2, 0x2) sendto$inet6(r2, &(0x7f0000000740)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="38000000100039042abd7000eaffffff640003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006001000128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600050001", 0x37}], 0x1}, 0x200000e4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0xc001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.105450911s ago: executing program 1 (id=233): perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0xca, 0x5, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x2}, 0x9c6, 0xfc, 0x7, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="44010000100001000000000800800000fe80eff8932d2e7415e40000000000aa000000000000000000000000000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000004800010073686132353600"], 0x144}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000400)) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000280)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x80000}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x800000}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000280)={0xffffffffffffffff, 0x4, 0x9, 0x582, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYBLOB="ce5d3a0d7c799e562fdc03eca2aa1418b7fba70dd23befb9faa97b8b182675887268b2d28854fc636d0836e91be65e60c05786a8737985b2e3f9ca46c4f616d5808689c76d5f097452bdff47253329", @ANYBLOB="b201cca38b4b2d5c8dec04cab9ca409a60d87180043fbecf8deea5cf17b5213594b785a622a675dde963f5ebd0591ac999d78e6dac81ecec8ea0f7f892792245146951a14d59d2df00269b2b93b63247354b221c3cb1fa040cee15ef2ee0164d2f2c721df2909ace152c49db2128d1effe96b9667ea40a200264445cd289fa7571cbe013f2c300c046cee90b7d391a368b4434dcbcc3fa069b73b4a242849456e93238a962adcf8896cb785e86a95bb43c96de3dd8ed0c9f9c02d28d61e3d75457ca5130efbef17b52659fb282d27513e10fb91f9e", @ANYRESHEX, @ANYRES16, @ANYRES8], 0x44}}, 0x40080) getdents(0xffffffffffffffff, 0x0, 0x51) 957.743463ms ago: executing program 1 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000080)={0x0, 0xdd1, 0xffffffb2, 0x0, 0x88fd, 0x10}) r4 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x800, 0xb, &(0x7f0000000040)=""/11, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x4, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x3, 0x3, 0x4}], 0x10, 0x4}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000940)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000980)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xf, 0xe, &(0x7f0000000a00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x4, 0x1, 0x3, 0x1, 0xe, 0x50, 0x1}], &(0x7f0000000900)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xe, 0xf, 0xf70}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000200), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000600)=""/181, 0xb5, 0x0, &(0x7f0000000380)=""/21, 0x15}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x3d, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r5}, 0x94) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000800)="b9", 0x1}], 0x1}}], 0x2, 0x0) 890.239769ms ago: executing program 3 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x300, 0x1, 0x42, 0xfffffffffffffffc}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000001c0)=""/200, 0xc8, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/124, 0x7c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 812.805785ms ago: executing program 1 (id=238): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x20000, &(0x7f0000000c00)={[{@errors_remount}, {@data_ordered}]}, 0xfe, 0x47a, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r5, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) clock_gettime(0x6, &(0x7f00000002c0)) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010027bd7004ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="104e0600016a0300300012801100f6c5829a696467655f736c617665000100001800058004001800060002000e0000000500010003000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0xffff, 0x100, 0x8, 0x20300, r1, 0x1, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c80)={r0, &(0x7f0000000c40)}, 0x20) 612.112401ms ago: executing program 0 (id=240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 590.687492ms ago: executing program 0 (id=241): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 513.354649ms ago: executing program 0 (id=242): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00005da000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000045f000/0x3000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x3b, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r1, 0x0, 0x80000001}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 512.892689ms ago: executing program 0 (id=243): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 426.218546ms ago: executing program 0 (id=244): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbb41}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) capget(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x93, 0x40037, 0x976, 0x4, 0x0, 0x5dc8}) 78.267904ms ago: executing program 0 (id=245): perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0xca, 0x5, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x2}, 0x9c6, 0xfc, 0x7, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="44010000100001000000000800800000fe80eff8932d2e7415e40000000000aa000000000000000000000000000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000004800010073686132353600"], 0x144}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000400)) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000280)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x80000}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x800000}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000280)={0xffffffffffffffff, 0x4, 0x9, 0x582, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYBLOB="ce5d3a0d7c799e562fdc03eca2aa1418b7fba70dd23befb9faa97b8b182675887268b2d28854fc636d0836e91be65e60c05786a8737985b2e3f9ca46c4f616d5808689c76d5f097452bdff47253329", @ANYBLOB="b201cca38b4b2d5c8dec04cab9ca409a60d87180043fbecf8deea5cf17b5213594b785a622a675dde963f5ebd0591ac999d78e6dac81ecec8ea0f7f892792245146951a14d59d2df00269b2b93b63247354b221c3cb1fa040cee15ef2ee0164d2f2c721df2909ace152c49db2128d1effe96b9667ea40a200264445cd289fa7571cbe013f2c300c046cee90b7d391a368b4434dcbcc3fa069b73b4a242849456e93238a962adcf8896cb785e86a95bb43c96de3dd8ed0c9f9c02d28d61e3d75457ca5130efbef17b52659fb282d27513e10fb91f9e", @ANYRESHEX, @ANYRES16, @ANYRES8], 0x44}}, 0x40080) getdents(0xffffffffffffffff, 0x0, 0x51) 0s ago: executing program 3 (id=248): perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0xca, 0x5, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x2}, 0x9c6, 0xfc, 0x7, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002b8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="44010000100001000000000800800000fe80eff8932d2e7415e40000000000aa000000000000000000000000000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000200010000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000004800010073686132353600"], 0x144}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000400)) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000280)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000480)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x1, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x18) sendfile(r1, r1, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x11, 0x1, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 22.456946][ T29] audit: type=1400 audit(1756350627.945:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.457804][ T3291] cgroup: Unknown subsys name 'net' [ 22.479679][ T29] audit: type=1400 audit(1756350627.945:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.507102][ T29] audit: type=1400 audit(1756350627.975:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.760222][ T3291] cgroup: Unknown subsys name 'cpuset' [ 22.766342][ T3291] cgroup: Unknown subsys name 'rlimit' [ 22.895382][ T29] audit: type=1400 audit(1756350628.385:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.918720][ T29] audit: type=1400 audit(1756350628.385:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.931269][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.939604][ T29] audit: type=1400 audit(1756350628.385:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.968444][ T29] audit: type=1400 audit(1756350628.385:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.980816][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.988778][ T29] audit: type=1400 audit(1756350628.395:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.022256][ T29] audit: type=1400 audit(1756350628.395:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.045479][ T29] audit: type=1400 audit(1756350628.445:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.119778][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 24.146768][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.213404][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 24.249414][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.256531][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.263848][ T3303] bridge_slave_0: entered allmulticast mode [ 24.270307][ T3303] bridge_slave_0: entered promiscuous mode [ 24.278624][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.285699][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.292853][ T3303] bridge_slave_1: entered allmulticast mode [ 24.299189][ T3303] bridge_slave_1: entered promiscuous mode [ 24.314127][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.321180][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.328282][ T3311] bridge_slave_0: entered allmulticast mode [ 24.334665][ T3311] bridge_slave_0: entered promiscuous mode [ 24.341167][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 24.350696][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 24.370147][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.377200][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.384729][ T3311] bridge_slave_1: entered allmulticast mode [ 24.391008][ T3311] bridge_slave_1: entered promiscuous mode [ 24.406281][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.429253][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.464627][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.477740][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.484828][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.491991][ T3309] bridge_slave_0: entered allmulticast mode [ 24.498322][ T3309] bridge_slave_0: entered promiscuous mode [ 24.509912][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.523067][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.530626][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.537687][ T3309] bridge_slave_1: entered allmulticast mode [ 24.544263][ T3309] bridge_slave_1: entered promiscuous mode [ 24.551026][ T3303] team0: Port device team_slave_0 added [ 24.579354][ T3303] team0: Port device team_slave_1 added [ 24.598149][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.605265][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.613403][ T3304] bridge_slave_0: entered allmulticast mode [ 24.619877][ T3304] bridge_slave_0: entered promiscuous mode [ 24.631686][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.641309][ T3311] team0: Port device team_slave_0 added [ 24.647837][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.661155][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.668256][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.675444][ T3301] bridge_slave_0: entered allmulticast mode [ 24.681829][ T3301] bridge_slave_0: entered promiscuous mode [ 24.688128][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.695198][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.702638][ T3304] bridge_slave_1: entered allmulticast mode [ 24.708986][ T3304] bridge_slave_1: entered promiscuous mode [ 24.720508][ T3311] team0: Port device team_slave_1 added [ 24.726430][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.733388][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.759302][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.773797][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.780940][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.788745][ T3301] bridge_slave_1: entered allmulticast mode [ 24.795133][ T3301] bridge_slave_1: entered promiscuous mode [ 24.815170][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.822148][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.848178][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.859382][ T3309] team0: Port device team_slave_0 added [ 24.866081][ T3309] team0: Port device team_slave_1 added [ 24.881308][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.902148][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.912237][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.921630][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.928620][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.954882][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.966524][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.973478][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.999440][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.015316][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.024667][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.031613][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.057517][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.080917][ T3304] team0: Port device team_slave_0 added [ 25.091133][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.098056][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.124100][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.149393][ T3304] team0: Port device team_slave_1 added [ 25.162672][ T3303] hsr_slave_0: entered promiscuous mode [ 25.168674][ T3303] hsr_slave_1: entered promiscuous mode [ 25.185131][ T3301] team0: Port device team_slave_0 added [ 25.206323][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.213292][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.239289][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.253288][ T3301] team0: Port device team_slave_1 added [ 25.265554][ T3311] hsr_slave_0: entered promiscuous mode [ 25.271616][ T3311] hsr_slave_1: entered promiscuous mode [ 25.277507][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 25.283260][ T3311] Cannot create hsr debugfs directory [ 25.293727][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.300723][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.326672][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.343533][ T3309] hsr_slave_0: entered promiscuous mode [ 25.349515][ T3309] hsr_slave_1: entered promiscuous mode [ 25.355439][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 25.361166][ T3309] Cannot create hsr debugfs directory [ 25.396173][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.403176][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.429186][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.440484][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.447414][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.473343][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.516835][ T3304] hsr_slave_0: entered promiscuous mode [ 25.522988][ T3304] hsr_slave_1: entered promiscuous mode [ 25.528759][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 25.534559][ T3304] Cannot create hsr debugfs directory [ 25.579207][ T3301] hsr_slave_0: entered promiscuous mode [ 25.585268][ T3301] hsr_slave_1: entered promiscuous mode [ 25.591179][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 25.596887][ T3301] Cannot create hsr debugfs directory [ 25.703345][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.711911][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.728487][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.743715][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.760221][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.775503][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.788691][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.804121][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.825372][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.839909][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.848385][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.859433][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.878186][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.893650][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.902996][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.928554][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.937606][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.951674][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.965816][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.972889][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.997429][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.004572][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.016798][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.040188][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.048932][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.059224][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.068084][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.079653][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.108692][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.116743][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.123807][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.142424][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.149491][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.173117][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.191709][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.202733][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.209847][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.219727][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.226779][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.244361][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.264232][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.277002][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.284140][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.297732][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.314118][ T1569] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.321326][ T1569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.342562][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.357262][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.377095][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.406610][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.417025][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.430383][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.437445][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.445749][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.452785][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.521192][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.531680][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.551355][ T3303] veth0_vlan: entered promiscuous mode [ 26.559661][ T3303] veth1_vlan: entered promiscuous mode [ 26.586830][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.602620][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.617472][ T3303] veth0_macvtap: entered promiscuous mode [ 26.640716][ T3303] veth1_macvtap: entered promiscuous mode [ 26.663597][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.692985][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.704249][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.727432][ T3309] veth0_vlan: entered promiscuous mode [ 26.758365][ T1901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.771768][ T3311] veth0_vlan: entered promiscuous mode [ 26.779329][ T3311] veth1_vlan: entered promiscuous mode [ 26.787926][ T1901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.801630][ T1901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.810666][ T1901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.821153][ T3309] veth1_vlan: entered promiscuous mode [ 26.829258][ T3304] veth0_vlan: entered promiscuous mode [ 26.848003][ T3301] veth0_vlan: entered promiscuous mode [ 26.858550][ T3304] veth1_vlan: entered promiscuous mode [ 26.866729][ T3301] veth1_vlan: entered promiscuous mode [ 26.874267][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.882096][ T3309] veth0_macvtap: entered promiscuous mode [ 26.901053][ T3309] veth1_macvtap: entered promiscuous mode [ 26.923820][ T3311] veth0_macvtap: entered promiscuous mode [ 26.945346][ T3304] veth0_macvtap: entered promiscuous mode [ 26.958235][ T3304] veth1_macvtap: entered promiscuous mode [ 26.967841][ T3311] veth1_macvtap: entered promiscuous mode [ 26.977511][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.995489][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.004779][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.013017][ T3301] veth0_macvtap: entered promiscuous mode [ 27.019995][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.033453][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.043018][ T3301] veth1_macvtap: entered promiscuous mode [ 27.058663][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.071601][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.081229][ T1901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.106853][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.114889][ T1901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.130896][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.137816][ T3472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.140141][ T1901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.172696][ T1901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.183376][ T1901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.205145][ T1901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.248140][ T1901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.259585][ C1] hrtimer: interrupt took 29588 ns [ 27.269348][ T1901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.283242][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 27.291431][ T1901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.336091][ T1901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.347152][ T1901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.366399][ T1901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.376577][ T1901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.396041][ T1901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.407782][ T3493] tipc: Started in network mode [ 27.412721][ T3493] tipc: Node identity ac14140f, cluster identity 4711 [ 27.420876][ T3493] tipc: New replicast peer: 255.255.255.83 [ 27.426741][ T3493] tipc: Enabled bearer , priority 10 [ 27.457783][ T1901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.475229][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 27.475242][ T29] audit: type=1400 audit(1756350632.965:173): avc: denied { execute } for pid=3474 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 27.496007][ T3501] 8021q: VLANs not supported on tunl0 [ 27.527621][ T29] audit: type=1326 audit(1756350632.985:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 27.550731][ T29] audit: type=1326 audit(1756350632.985:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 27.573811][ T29] audit: type=1400 audit(1756350633.015:176): avc: denied { cpu } for pid=3483 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.594543][ T29] audit: type=1400 audit(1756350633.085:177): avc: denied { write } for pid=3497 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.616351][ T29] audit: type=1400 audit(1756350633.105:178): avc: denied { create } for pid=3502 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 27.635835][ T29] audit: type=1400 audit(1756350633.125:179): avc: denied { getopt } for pid=3502 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 27.741725][ T3506] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 27.748247][ T3506] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 27.750448][ T29] audit: type=1400 audit(1756350633.235:180): avc: denied { write } for pid=3509 comm="syz.1.11" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.755955][ T3506] vhci_hcd vhci_hcd.0: Device attached [ 27.877481][ T29] audit: type=1400 audit(1756350633.365:181): avc: denied { create } for pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 27.923747][ T29] audit: type=1400 audit(1756350633.365:182): avc: denied { setopt } for pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 27.943614][ T3513] loop4: detected capacity change from 0 to 512 [ 27.956441][ T3513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 27.971712][ T3513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.984926][ T3513] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.989480][ T3510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 28.014711][ T3510] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3510 comm=syz.1.11 [ 28.027960][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.050229][ T3519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13'. [ 28.059718][ T3404] usb 2-1: SetAddress Request (2) to port 0 [ 28.065644][ T3404] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 28.075868][ T3519] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3519 comm=syz.4.13 [ 28.101848][ T3521] loop1: detected capacity change from 0 to 512 [ 28.138390][ T3521] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.185461][ T3521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.212471][ T3521] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.235150][ T3532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 28.249200][ T3532] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18'. [ 28.258630][ T3532] netlink: zone id is out of range [ 28.264114][ T3532] netlink: zone id is out of range [ 28.269653][ T3532] netlink: zone id is out of range [ 28.274199][ T3528] loop3: detected capacity change from 0 to 512 [ 28.275196][ T3532] netlink: zone id is out of range [ 28.286564][ T3532] netlink: zone id is out of range [ 28.291893][ T3532] netlink: zone id is out of range [ 28.297121][ T3532] netlink: zone id is out of range [ 28.302915][ T3532] netlink: zone id is out of range [ 28.308683][ T3532] netlink: zone id is out of range [ 28.314013][ T3532] netlink: zone id is out of range [ 28.321413][ T3528] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.336903][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.348552][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.365566][ T3528] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.437624][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.448326][ T3507] vhci_hcd: connection closed [ 28.448689][ T41] vhci_hcd: stop threads [ 28.457786][ T41] vhci_hcd: release socket [ 28.462593][ T41] vhci_hcd: disconnect device [ 28.475228][ T3545] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 28.548667][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 28.557406][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 28.559664][ T3411] tipc: Node number set to 2886997007 [ 28.631182][ T3548] vlan2: entered allmulticast mode [ 28.656397][ T3548] dummy0: entered allmulticast mode [ 28.676841][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 28.685579][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 28.698213][ T3553] vlan2: entered allmulticast mode [ 28.703874][ T3553] dummy0: entered allmulticast mode [ 28.719619][ T3549] wireguard0: entered promiscuous mode [ 28.725104][ T3549] wireguard0: entered allmulticast mode [ 28.771592][ T3553] Zero length message leads to an empty skb [ 28.981159][ T3570] loop0: detected capacity change from 0 to 512 [ 28.987903][ T3570] EXT4-fs: Ignoring removed nobh option [ 28.998479][ T3570] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.30: iget: bad i_size value: 38620345925642 [ 29.019858][ T3570] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.30: couldn't read orphan inode 15 (err -117) [ 29.071353][ T3570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.293962][ T3579] vlan2: entered allmulticast mode [ 29.299168][ T3579] dummy0: entered allmulticast mode [ 29.318628][ T3580] vlan2: entered allmulticast mode [ 29.551638][ T3588] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 29.658188][ T1569] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 29.671230][ T1569] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 29.684466][ T1569] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.684466][ T1569] [ 29.694145][ T1569] EXT4-fs (loop0): Total free blocks count 0 [ 29.700150][ T1569] EXT4-fs (loop0): Free/Dirty block details [ 29.706137][ T1569] EXT4-fs (loop0): free_blocks=0 [ 29.711698][ T1569] EXT4-fs (loop0): dirty_blocks=16000 [ 29.717144][ T1569] EXT4-fs (loop0): Block reservation details [ 29.723215][ T1569] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 29.733946][ T3586] netlink: 'syz.3.34': attribute type 6 has an invalid length. [ 29.738526][ T1569] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 30.072117][ T3607] vlan2: entered allmulticast mode [ 30.098991][ T3609] loop2: detected capacity change from 0 to 512 [ 30.105315][ T3607] dummy0: entered allmulticast mode [ 30.114586][ T3609] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.133698][ T3616] netlink: 72 bytes leftover after parsing attributes in process `syz.1.45'. [ 30.153910][ T3611] vlan2: entered allmulticast mode [ 30.164612][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.177871][ T3618] loop3: detected capacity change from 0 to 512 [ 30.184376][ T3618] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.187027][ T3609] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.211266][ T3618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.239623][ T3388] IPVS: starting estimator thread 0... [ 30.241721][ T3618] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.270320][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.293162][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.306917][ T3625] loop4: detected capacity change from 0 to 512 [ 30.320402][ T3625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.350334][ T3623] IPVS: using max 2736 ests per chain, 136800 per kthread [ 30.436565][ T3635] vlan2: entered allmulticast mode [ 30.480427][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.510567][ T3625] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.537257][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.562403][ T3641] vlan2: entered allmulticast mode [ 30.655512][ T3642] loop2: detected capacity change from 0 to 1024 [ 30.662953][ T3642] ======================================================= [ 30.662953][ T3642] WARNING: The mand mount option has been deprecated and [ 30.662953][ T3642] and is ignored by this kernel. Remove the mand [ 30.662953][ T3642] option from the mount to silence this warning. [ 30.662953][ T3642] ======================================================= [ 30.698742][ T3642] EXT4-fs: inline encryption not supported [ 30.704573][ T3642] EXT4-fs: Ignoring removed i_version option [ 30.720291][ T3642] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 30.812020][ T3642] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.51: lblock 2 mapped to illegal pblock 2 (length 1) [ 30.828693][ T3642] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.51: lblock 0 mapped to illegal pblock 48 (length 1) [ 30.843764][ T3642] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.51: Failed to acquire dquot type 0 [ 30.855867][ T3642] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 30.865777][ T3642] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.51: mark_inode_dirty error [ 30.878038][ T3642] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 30.888861][ T3642] EXT4-fs (loop2): 1 orphan inode deleted [ 30.895154][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.024897][ T1569] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.039409][ T1569] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 31.073715][ T3642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.088478][ T3642] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.51: Invalid inode table block 1 in block_group 0 [ 31.102582][ T3642] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 31.112345][ T3642] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.51: mark_inode_dirty error [ 31.173872][ T3652] vlan2: entered allmulticast mode [ 31.254609][ T3653] loop4: detected capacity change from 0 to 1024 [ 31.262296][ T3653] EXT4-fs: inline encryption not supported [ 31.268178][ T3653] EXT4-fs: Ignoring removed i_version option [ 31.433878][ T3653] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.458932][ T3653] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.53: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.477708][ T3653] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.53: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.495244][ T3653] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.53: Failed to acquire dquot type 0 [ 31.508715][ T3653] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 31.526823][ T3656] loop1: detected capacity change from 0 to 1024 [ 31.533217][ T3653] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.53: mark_inode_dirty error [ 31.544428][ T3653] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 31.554816][ T3653] EXT4-fs (loop4): 1 orphan inode deleted [ 31.561536][ T3653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.563731][ T3656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.587134][ T56] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.603365][ T3658] syzkaller0: entered allmulticast mode [ 31.615287][ T3658] capability: warning: `syz.2.57' uses deprecated v2 capabilities in a way that may be insecure [ 31.628791][ T3658] syzkaller0 (unregistering): left allmulticast mode [ 31.640069][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 31.652484][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.652817][ T3653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.671692][ T3653] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.53: Invalid inode table block 1 in block_group 0 [ 31.684457][ T3653] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 31.694403][ T3653] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.53: mark_inode_dirty error [ 31.712874][ T3665] vlan2: entered allmulticast mode [ 31.793134][ T3669] vlan2: entered allmulticast mode [ 31.886342][ T3669] syz.1.60 (3669) used greatest stack depth: 10840 bytes left [ 31.984455][ T3680] vlan2: entered allmulticast mode [ 32.062269][ T3683] loop1: detected capacity change from 0 to 1024 [ 32.072616][ T3680] syz.0.66 (3680) used greatest stack depth: 10792 bytes left [ 32.137387][ T3683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.169256][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.258591][ T3698] loop4: detected capacity change from 0 to 512 [ 32.267170][ T3698] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.281148][ T3698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.308888][ T3699] loop1: detected capacity change from 0 to 512 [ 32.318771][ T3698] EXT4-fs (loop4): 1 truncate cleaned up [ 32.324784][ T3699] EXT4-fs: Ignoring removed i_version option [ 32.330975][ T3699] EXT4-fs: Ignoring removed nobh option [ 32.339455][ T3698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.353660][ T3699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.378933][ T3699] EXT4-fs (loop1): 1 truncate cleaned up [ 32.387420][ T3699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.418633][ T3699] EXT4-fs (loop1): shut down requested (0) [ 32.438666][ T3699] __nla_validate_parse: 4 callbacks suppressed [ 32.438680][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.455173][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.486914][ T29] kauditd_printk_skb: 786 callbacks suppressed [ 32.487010][ T29] audit: type=1400 audit(1756350643.980:963): avc: denied { watch } for pid=3704 comm="syz.0.73" path="/proc/29" dev="proc" ino=4791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 32.525872][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.549487][ T3710] loop1: detected capacity change from 0 to 512 [ 32.565384][ T3710] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.585588][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.620700][ T3710] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.658131][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.706332][ T3718] syz.1.78 (3718) used greatest stack depth: 10592 bytes left [ 32.711080][ T29] audit: type=1326 audit(1756350644.190:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737031][ T29] audit: type=1326 audit(1756350644.190:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737083][ T29] audit: type=1326 audit(1756350644.190:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737107][ T29] audit: type=1326 audit(1756350644.190:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737134][ T29] audit: type=1326 audit(1756350644.190:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737231][ T29] audit: type=1326 audit(1756350644.190:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737279][ T29] audit: type=1326 audit(1756350644.190:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737304][ T29] audit: type=1326 audit(1756350644.190:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.737329][ T29] audit: type=1326 audit(1756350644.190:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 32.826857][ T3722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'. [ 32.978781][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 33.000013][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 33.009312][ T3722] hsr_slave_0: left promiscuous mode [ 33.020154][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.029480][ T3722] hsr_slave_1: left promiscuous mode [ 33.064781][ T3724] loop2: detected capacity change from 0 to 512 [ 33.073094][ T3724] EXT4-fs: Ignoring removed i_version option [ 33.087337][ T3724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.092864][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 33.108593][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 33.117658][ T3732] loop1: detected capacity change from 0 to 512 [ 33.147979][ T3732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.159699][ T3404] usb 2-1: device descriptor read/8, error -110 [ 33.161338][ T3723] wireguard0: entered promiscuous mode [ 33.171455][ T3723] wireguard0: entered allmulticast mode [ 33.249755][ T3724] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.282201][ T3724] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz.2.80: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 33.313418][ T3732] EXT4-fs (loop1): 1 truncate cleaned up [ 33.320250][ T3404] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 33.329516][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.338353][ T3724] EXT4-fs (loop2): Remounting filesystem read-only [ 33.420392][ T3741] loop4: detected capacity change from 0 to 1024 [ 33.427254][ T3741] EXT4-fs: inline encryption not supported [ 33.433103][ T3741] EXT4-fs: Ignoring removed i_version option [ 33.502720][ T3741] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.516668][ T3741] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.85: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.531629][ T3741] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.85: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.545847][ T3741] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.85: Failed to acquire dquot type 0 [ 33.557365][ T3741] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 33.571356][ T3741] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.85: mark_inode_dirty error [ 33.582982][ T3741] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 33.593855][ T3741] EXT4-fs (loop4): 1 orphan inode deleted [ 33.600172][ T3741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.720583][ T56] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.722099][ T3404] usb 2-1: enqueue for inactive port 0 [ 33.747507][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 33.759697][ T3404] usb 2-1: enqueue for inactive port 0 [ 33.759719][ T3404] usb 2-1: enqueue for inactive port 0 [ 33.780633][ T3741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.791618][ T3741] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.85: Invalid inode table block 1 in block_group 0 [ 33.804812][ T3741] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 33.817329][ T3741] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.85: mark_inode_dirty error [ 33.881757][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.890919][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.906580][ T3749] vlan2: entered allmulticast mode [ 33.938799][ T3754] loop1: detected capacity change from 0 to 512 [ 33.961268][ T3754] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.017566][ T3754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.030571][ T3754] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.071260][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.085347][ T3771] hub 9-0:1.0: USB hub found [ 34.090196][ T3771] hub 9-0:1.0: 8 ports detected [ 34.137969][ T3773] loop1: detected capacity change from 0 to 512 [ 34.144679][ T3773] EXT4-fs: Ignoring removed orlov option [ 34.150404][ T3773] ext4: Unknown parameter 'nouser_xattr' [ 34.193089][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 34.235051][ T3784] loop4: detected capacity change from 0 to 512 [ 34.235252][ T3773] can0: slcan on ttyS3. [ 34.242846][ T3784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.266627][ T3784] EXT4-fs (loop4): 1 truncate cleaned up [ 34.274436][ T3784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.298795][ T3789] loop3: detected capacity change from 0 to 512 [ 34.351211][ T3773] can0 (unregistered): slcan off ttyS3. [ 34.365835][ T3773] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 34.373593][ T3773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.96'. [ 34.420735][ T3800] vlan2: entered allmulticast mode [ 34.425916][ T3800] dummy0: entered allmulticast mode [ 34.521377][ T3789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.530565][ T3789] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.667198][ T3829] loop1: detected capacity change from 0 to 512 [ 34.687200][ T3829] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.732544][ T3829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.762603][ T3829] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.788383][ T3404] usb usb2-port1: attempt power cycle [ 34.802781][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.030194][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.044379][ T3847] loop8: detected capacity change from 0 to 16384 [ 35.053136][ T3847] loop0: detected capacity change from 0 to 256 [ 35.073936][ T3847] FAT-fs (loop0): codepage cp932 not found [ 35.155222][ T3860] loop1: detected capacity change from 0 to 512 [ 35.167005][ T3860] EXT4-fs: Ignoring removed orlov option [ 35.172749][ T3860] ext4: Unknown parameter 'nouser_xattr' [ 35.186765][ T3800] syz.2.103 (3800) used greatest stack depth: 10512 bytes left [ 35.221545][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 35.233312][ T3860] can0: slcan on ttyS3. [ 35.238331][ T3860] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 35.291576][ T3859] can0 (unregistered): slcan off ttyS3. [ 35.336556][ T3874] loop2: detected capacity change from 0 to 512 [ 35.351258][ T3874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.360142][ T3863] loop8: detected capacity change from 16384 to 16383 [ 35.421055][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.520643][ T3874] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.634443][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.690663][ T3896] syzkaller0: entered allmulticast mode [ 35.712659][ T3895] syzkaller0: left allmulticast mode [ 35.834743][ T3914] loop2: detected capacity change from 0 to 512 [ 35.857188][ T3914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.895580][ T3914] EXT4-fs (loop2): 1 truncate cleaned up [ 35.911046][ T3914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.101568][ T3930] vlan2: entered allmulticast mode [ 36.188888][ T3931] loop0: detected capacity change from 0 to 1024 [ 36.195933][ T3931] EXT4-fs: inline encryption not supported [ 36.202409][ T3931] EXT4-fs: Ignoring removed i_version option [ 36.211242][ T3931] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.266406][ T3931] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.129: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.282662][ T3931] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.129: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.299621][ T3931] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.129: Failed to acquire dquot type 0 [ 36.312087][ T3931] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 36.321912][ T3931] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.129: mark_inode_dirty error [ 36.333418][ T3931] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 36.344308][ T3931] EXT4-fs (loop0): 1 orphan inode deleted [ 36.350686][ T3931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.426875][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.447237][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 36.493517][ T3931] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.517372][ T3931] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.129: Invalid inode table block 1 in block_group 0 [ 36.531552][ T3931] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 36.541794][ T3931] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.129: mark_inode_dirty error [ 36.615865][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.861215][ T3947] loop4: detected capacity change from 0 to 1024 [ 36.868007][ T3947] EXT4-fs: inline encryption not supported [ 36.874452][ T3947] EXT4-fs: Ignoring removed i_version option [ 36.934755][ T3947] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.977781][ T3953] loop1: detected capacity change from 0 to 256 [ 36.993622][ T3947] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.135: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.008390][ T3947] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.135: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.023206][ T3947] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.135: Failed to acquire dquot type 0 [ 37.034731][ T3947] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 37.046242][ T3947] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.135: mark_inode_dirty error [ 37.058281][ T3947] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 37.068498][ T3947] EXT4-fs (loop4): 1 orphan inode deleted [ 37.075143][ T3947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.141069][ T3404] usb usb2-port1: unable to enumerate USB device [ 37.149349][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.174265][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 37.191395][ T3947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.200825][ T3947] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.135: Invalid inode table block 1 in block_group 0 [ 37.213770][ T3947] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 37.224107][ T3947] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.135: mark_inode_dirty error [ 37.240974][ T3959] loop0: detected capacity change from 0 to 512 [ 37.260619][ T3953] FAT-fs (loop1): codepage cp932 not found [ 37.349693][ T3965] vlan2: entered allmulticast mode [ 37.557599][ T3975] loop2: detected capacity change from 0 to 512 [ 37.571416][ T3979] vlan2: entered allmulticast mode [ 37.598376][ T3975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.639490][ T3975] EXT4-fs (loop2): 1 truncate cleaned up [ 37.646164][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.663347][ T3959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.678601][ T29] kauditd_printk_skb: 933 callbacks suppressed [ 37.678615][ T29] audit: type=1326 audit(1756350649.170:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 37.708807][ T29] audit: type=1326 audit(1756350649.170:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 37.745322][ T3979] syz.4.146 (3979) used greatest stack depth: 10480 bytes left [ 37.774251][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.789718][ T29] audit: type=1326 audit(1756350649.250:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 37.813776][ T29] audit: type=1326 audit(1756350649.250:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 37.837266][ T29] audit: type=1326 audit(1756350649.250:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 37.860680][ T29] audit: type=1326 audit(1756350649.260:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 37.884815][ T29] audit: type=1326 audit(1756350649.260:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 37.908466][ T29] audit: type=1326 audit(1756350649.270:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 38.082376][ T29] audit: type=1326 audit(1756350649.550:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 38.106447][ T29] audit: type=1326 audit(1756350649.550:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c402bebe9 code=0x7ffc0000 [ 38.142372][ T3992] loop4: detected capacity change from 0 to 512 [ 38.151525][ T3992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.172996][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.225095][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.288717][ T4000] hub 9-0:1.0: USB hub found [ 38.312951][ T3992] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.325729][ T4000] hub 9-0:1.0: 8 ports detected [ 38.422755][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.621453][ T4028] loop3: detected capacity change from 0 to 512 [ 38.632776][ T4028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.651954][ T4025] loop4: detected capacity change from 0 to 256 [ 38.694130][ T4028] EXT4-fs (loop3): 1 truncate cleaned up [ 38.729312][ T4028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.745443][ T4025] FAT-fs (loop4): codepage cp932 not found [ 38.838619][ T4038] loop1: detected capacity change from 0 to 512 [ 39.420461][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.589069][ T4068] loop0: detected capacity change from 0 to 512 [ 39.620040][ T4068] EXT4-fs: Ignoring removed orlov option [ 39.625711][ T4068] ext4: Unknown parameter 'nouser_xattr' [ 39.647147][ T4068] __nla_validate_parse: 1 callbacks suppressed [ 39.647162][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 39.669481][ T4068] can0: slcan on ttyS3. [ 39.674923][ T4068] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 39.682675][ T4068] netlink: 224 bytes leftover after parsing attributes in process `syz.0.180'. [ 39.760668][ T4067] can0 (unregistered): slcan off ttyS3. [ 39.786316][ T4091] loop2: detected capacity change from 0 to 512 [ 39.821441][ T4091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.850234][ T4091] EXT4-fs (loop2): 1 truncate cleaned up [ 39.860339][ T4091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.001508][ T4109] loop3: detected capacity change from 0 to 256 [ 40.054890][ T4109] FAT-fs (loop3): codepage cp932 not found [ 40.217026][ T4137] loop0: detected capacity change from 0 to 256 [ 40.281516][ T4137] FAT-fs (loop0): codepage cp932 not found [ 40.528684][ T4155] loop0: detected capacity change from 0 to 512 [ 40.583269][ T4155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.594066][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.619276][ T4155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.715599][ T4155] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.820746][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.125897][ T4172] syzkaller0: entered allmulticast mode [ 41.164283][ T4171] syzkaller0: left allmulticast mode [ 41.243031][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.287298][ T4184] loop3: detected capacity change from 0 to 256 [ 41.319787][ T4184] FAT-fs (loop3): codepage cp932 not found [ 41.335681][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.380866][ T4191] loop2: detected capacity change from 0 to 512 [ 41.405391][ T4191] EXT4-fs: Ignoring removed orlov option [ 41.411123][ T4191] ext4: Unknown parameter 'nouser_xattr' [ 41.438611][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 41.450285][ T4191] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 41.457919][ T4191] netlink: 224 bytes leftover after parsing attributes in process `syz.2.217'. [ 41.585697][ T4203] loop0: detected capacity change from 0 to 256 [ 41.645893][ T4203] FAT-fs (loop0): codepage cp932 not found [ 42.055157][ T4221] hub 9-0:1.0: USB hub found [ 42.060635][ T4221] hub 9-0:1.0: 8 ports detected [ 42.334534][ T4229] syzkaller0: entered allmulticast mode [ 42.377126][ T4228] syzkaller0: left allmulticast mode [ 42.409629][ T4231] loop2: detected capacity change from 0 to 512 [ 42.416469][ T4231] EXT4-fs: Ignoring removed orlov option [ 42.422219][ T4231] ext4: Unknown parameter 'nouser_xattr' [ 42.434056][ T4231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 42.445541][ T4231] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 42.453250][ T4231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.232'. [ 42.512445][ T4235] loop1: detected capacity change from 0 to 256 [ 42.540662][ T4235] FAT-fs (loop1): codepage cp932 not found [ 42.631779][ T4241] net_ratelimit: 5 callbacks suppressed [ 42.631795][ T4241] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 42.724457][ T4241] syz.1.236 (4241) used greatest stack depth: 10456 bytes left [ 42.757576][ T4246] loop1: detected capacity change from 0 to 512 [ 43.134863][ T4264] syzkaller0: entered allmulticast mode [ 43.209624][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 43.209641][ T29] audit: type=1326 audit(1756350654.680:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.239756][ T29] audit: type=1326 audit(1756350654.680:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.262970][ T29] audit: type=1326 audit(1756350654.680:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.286885][ T29] audit: type=1326 audit(1756350654.680:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.310685][ T29] audit: type=1326 audit(1756350654.680:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.334107][ T29] audit: type=1326 audit(1756350654.680:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.357950][ T29] audit: type=1326 audit(1756350654.680:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.381895][ T29] audit: type=1326 audit(1756350654.680:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.405225][ T29] audit: type=1326 audit(1756350654.680:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.429151][ T29] audit: type=1326 audit(1756350654.680:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5abee0ebe9 code=0x7ffc0000 [ 43.453556][ T4263] syzkaller0: left allmulticast mode [ 43.481298][ T4268] loop2: detected capacity change from 0 to 512 [ 43.490033][ T4268] EXT4-fs: Ignoring removed orlov option [ 43.495757][ T4268] ext4: Unknown parameter 'nouser_xattr' [ 43.510389][ T4266] loop0: detected capacity change from 0 to 256 [ 43.539267][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 43.578787][ T4266] FAT-fs (loop0): codepage cp932 not found [ 43.583253][ T4268] can0: slcan on ttyS3. [ 43.610130][ T4274] loop3: detected capacity change from 0 to 256 [ 43.617280][ T2993] ================================================================== [ 43.625369][ T2993] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 43.634227][ T2993] [ 43.636544][ T2993] read-write to 0xffff8881005f1838 of 8 bytes by task 4274 on cpu 0: [ 43.644593][ T2993] __filemap_add_folio+0x5b9/0x7d0 [ 43.649703][ T2993] filemap_add_folio+0x98/0x1b0 [ 43.654546][ T2993] __filemap_get_folio+0x31e/0x6b0 [ 43.659649][ T2993] bdev_getblk+0x14d/0x3b0 [ 43.664052][ T2993] __bread_gfp+0x51/0x250 [ 43.668369][ T2993] fat_fill_super+0x372/0x1ce0 [ 43.673116][ T2993] vfat_fill_super+0x24/0x30 [ 43.677693][ T2993] get_tree_bdev_flags+0x291/0x300 [ 43.682788][ T2993] get_tree_bdev+0x1f/0x30 [ 43.687191][ T2993] vfat_get_tree+0x1c/0x30 [ 43.691594][ T2993] vfs_get_tree+0x54/0x1d0 [ 43.695994][ T2993] do_new_mount+0x207/0x5e0 [ 43.700740][ T2993] path_mount+0x4a4/0xb20 [ 43.705054][ T2993] __se_sys_mount+0x28f/0x2e0 [ 43.709715][ T2993] __x64_sys_mount+0x67/0x80 [ 43.714289][ T2993] x64_sys_call+0x2b4d/0x2ff0 [ 43.718947][ T2993] do_syscall_64+0xd2/0x200 [ 43.723438][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.729316][ T2993] [ 43.731619][ T2993] read to 0xffff8881005f1838 of 8 bytes by task 2993 on cpu 1: [ 43.739142][ T2993] filemap_write_and_wait_range+0x59/0x340 [ 43.744937][ T2993] bdev_release+0xeb/0x3d0 [ 43.749342][ T2993] blkdev_release+0x15/0x20 [ 43.753848][ T2993] __fput+0x298/0x650 [ 43.757820][ T2993] fput_close_sync+0x6e/0x120 [ 43.762484][ T2993] __x64_sys_close+0x56/0xf0 [ 43.767053][ T2993] x64_sys_call+0x2738/0x2ff0 [ 43.771711][ T2993] do_syscall_64+0xd2/0x200 [ 43.776196][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.782068][ T2993] [ 43.784370][ T2993] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 43.791462][ T2993] [ 43.793763][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 43.799904][ T2993] CPU: 1 UID: 0 PID: 2993 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.809166][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.819200][ T2993] ================================================================== [ 43.889996][ T4268] can0 (unregistered): slcan off ttyS3. [ 43.892086][ T4274] FAT-fs (loop3): codepage cp932 not found [ 43.910687][ T4268] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 43.918359][ T4268] netlink: 224 bytes leftover after parsing attributes in process `syz.2.246'.