last executing test programs: 11.363226519s ago: executing program 4 (id=9138): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x59a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x88000, 0x137}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_raw(r7, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401}, 0x0, 0x0) listen(r8, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES32=r9, @ANYBLOB="000000b9da93ce02b7080000000000007b8af8ff00000000ec5e00000000000006020000f8ffffffb703000000000000b704000000007c95161cea7d5e"], 0x0, 0x5e, 0x0, 0x0, 0x41100}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r12 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r0, r11, 0x0) 10.399240175s ago: executing program 4 (id=9147): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000006f030004000000000000"], 0x0, 0x26}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000001700000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x842, 0x0) r3 = syz_io_uring_setup(0x47e9, &(0x7f0000000080)={0x0, 0x5323, 0x10000, 0x1, 0x100002cf, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r6}, 0x18) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf08, 0x2, 0x1, 0x105}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r9}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 10.349013035s ago: executing program 4 (id=9149): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x5, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r6], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@sysvgroups}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xfffffd26) 10.0180397s ago: executing program 3 (id=9154): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x6e, &(0x7f0000001180)=ANY=[@ANYBLOB="bbbbbbb7bbbbaaaaaaaaaa0086dd6075e70000383a00fe800000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00002c00fe880000000000000000000000000001fe8000000000000000000000000000bb3300000000000000"], 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r2, 0x10, 0x2f5, 0x8) setxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0400000000800000100002000000000010"], 0x2c, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000000080)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8, 0x80, 0x8, 0x6, {{0x9, 0x4, 0x3, 0x4, 0x24, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0x9, [{@private=0xa010101, 0x6}]}, @end]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4046010) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f4}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r6, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup2(r7, r7) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 9.43664917s ago: executing program 4 (id=9158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000000000002000000000000000fc86d5b5803f2ea69f210fad5ee1c0a9956e97388156bc4e5f56b4e46a134f60f750207a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d4, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x28020480) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) 9.370552271s ago: executing program 4 (id=9159): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x204, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x1f0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "85f13c0920a2a13fb731168c7656111336eca4dd824e7bc1d6068589f06cca19"}]}, {0x138, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x81}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x4}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x800c7, @loopback, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3ef0fad594781c092f6861d1736a55bc6e20b249a003f238e0206fd473000bb1"}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sync() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.956227517s ago: executing program 4 (id=9163): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/247, 0xf7}, {0x0}], 0x2) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) 8.884274538s ago: executing program 3 (id=9167): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d0000000000000000", 0xd1, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 5.604267031s ago: executing program 0 (id=9180): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) 5.601062151s ago: executing program 2 (id=9182): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000080)=0xffffffff, 0x3, 0x3) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) unshare(0x100) pipe2(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200000, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='xen_mc_flush_reason\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='cma_release\x00', 0xffffffffffffffff, 0x0, 0x7f}, 0x18) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x0, 0x1000, 0x1c, &(0x7f00000002c0)="2851f9f20612a7c1bd696459c101c62fdc7540876265bdfe4b721db4", 0x1b, 0x0, &(0x7f0000000300)="9eae7b140027427756eb94bce2c5ee7e9b1899c34bced5e3678d75"}) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x1fda3105a74234a4, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000400)=0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000440)={0x2, 0x1000, "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"}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000001480)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='io_uring_submit_sqe\x00', 0xffffffffffffffff, 0x0, 0x407dd671}, 0x18) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) io_uring_setup(0x4c1f, &(0x7f0000001580)={0x0, 0xc6ab, 0x1, 0x2, 0x367, 0x0, r0}) write$selinux_create(0xffffffffffffffff, &(0x7f0000001600)=@access={'system_u:object_r:ptchown_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x1ff}, 0x67) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001700)={0x410, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x67bd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb64}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff4, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1cfa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x410}, 0x1, 0x0, 0x0, 0xc001}, 0x60004000) unshare(0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4c810) splice(r1, &(0x7f0000001d00)=0x7, r2, &(0x7f0000001d40)=0x6, 0x0, 0x5558522e898467fb) openat$vsock(0xffffffffffffff9c, &(0x7f0000001d80), 0x600, 0x0) 5.600703071s ago: executing program 3 (id=9183): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="7d8b253747ceba3b26955b5b1a216c091de1215c9820b99d4fb09ccd45beb01eff55ef96dddffc98b8eabb31685c43b09e4bd2251bb5eee81f772d41d32a762e55c738cd7809695ca18024066083824014056b60560b56ae3bdbc92881ede8cfc8065a690feb2c4ef0d0c4b587f83426cd6185b48259d7971a0780606f2a867a405cd49bfae24fdbe79addb668ae16164f51c76e3203c58dfcc30de79693ed3fbf7a8967db2a64d25a1c819af0eac244423c6818a1ad5b496f7a6bfa662bf43824a922edb08a27064839230b3465b42e42736074860f37ee") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 4.688296035s ago: executing program 0 (id=9184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x5, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@sysvgroups}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xfffffd26) 4.687891535s ago: executing program 1 (id=9185): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x5, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@sysvgroups}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000500)=0x4) 4.687210615s ago: executing program 2 (id=9186): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000080)=0xffffffff, 0x3, 0x3) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) unshare(0x100) pipe2(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200000, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='xen_mc_flush_reason\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='cma_release\x00', 0xffffffffffffffff, 0x0, 0x7f}, 0x18) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x0, 0x1000, 0x1c, &(0x7f00000002c0)="2851f9f20612a7c1bd696459c101c62fdc7540876265bdfe4b721db4", 0x1b, 0x0, &(0x7f0000000300)="9eae7b140027427756eb94bce2c5ee7e9b1899c34bced5e3678d75"}) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x1fda3105a74234a4, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000400)=0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000440)={0x2, 0x1000, "8f594e873f486c330757d99cce04bbc2d1f9be5bfc4301a69d48de3f0a56753d92f0ff33619b5988f320651c591728927d0d030958b0d0ef518a8f190bf8b3a0c5412103e79afb4aa5f82d56ceb88f0a3d0ecf3f931ab26536c9a8513c24549df51571857decfea2439f9e4520dff89401b93ad74d7d9ad0d7aece0dc1cb7871a993482177cc15488f8a28a78eaa16bf5ca87442b2991fadeab1c03128f240554bda433d7573bf121c3df702d66e0aca856f2776e87c133aacf5814ecdbad5558b6d0c0dcf0268ee73305256f11502fa41e5cfa174577bb275ee470f0fe3e4282327c836474f5be39ff23fe84dbe4b54d90ec5ad15c1a2358237f9ed203d666e88ab8344b575e858755ea38e91e8231c23012a1361e43d0edc68111450280576b0c18cde5e1b8d39154a685c9bd2d6debdf8fa4804dec698b124eb406623d510c9847324ef2c14c16a20b6cb3c46e979a4d6161cd9b5b4f98fb04ffe8424ea88c90a5725a7ec084d02850df03ff1e5e9d334159d8ee090e8735cc991bfbbdabb1e724e24d5c27064b4b9866e3f25a0ff133b562824b0bcf3f353162df68c1d92bcfbb86310938dfceeabcb87ca96df0dc3e5f6b9bce9cce1ed221da75d9b9841afeebbe2585913fa9df21513981f48b92d23906aea2c7543bdb033718b823a160539e5ada05344dabe690a624fc19a3a177c7a3b5ce9be4c26826515716ae79c4ecb14d854d77f0c99dbf9fbb44f1adcae0f0ee902b4c05a752acc20a92f979f3023296c8bb7d0d2cbbf2e0093eb409f39fc8f62c1c6a802f62f0d77512f8ddc99a80cda4e08e08237b47ea27571a77270929c9265aa4c331b9f3604cc00e878d2f25d556545e9bc50684c1d033fe7bc8188655468a893a595e0c51846b42f77d9d3677638e7688309d97822a8e74e57c8227ca7d5a6b2c2ef44d39267f2c66640343e3dc220fb61ec20a9e4e585975aa08c3b4c7ec2f8c4c697fd08ac1f34d422356b73a6ba8b0f818b673e87562f9afae9c5095ff22aeba96b00d7de1090f24d76440837007505cde557c21ca14196bf7a7c9846bf002f8b7e9a33559016e5145bb9f0af1cfbda8a1e853b837b356c0c7642fd5568112b011b29c6b68aa4a649bb1ddeeb6aa2338bc880bd35ab29d98400c59ec3076945c012cf3de3771464c60233d7b21daa47f535175b369d8366ea5f55229cf13d62ba30a29ee0dce02f1ef3d752074e02c191be2dc7ecef1c0b79fd06be39a253c524617d9c4508b6987d0e66c46ff6e2a9f0fe3d60ea1d93ed70d41c6c54fe8019a8f41adf467ef818dc3b466cd4ea671ce3a50f0fd8506c6a3c565118f376198a113b1f2e09cf0e6065f8b2e238870ffb49d3873dfa9109070937d2f95336a3ff6c4a1c27fa61114e0d490e9bcbd057dfa52fd940fc7f10a42da39e69b9f3f46858e3134e4f3934fe9277de8c2bd3bbeedb570665c9349ddacb0a1476d97cfee9fda8c5e3d71cbce45bc7589a576863ae1e172ec2e6fe43d2c9da26080a61ad60e3bf390b3f6fc22f126aad65f108e127afcb751efe7eb12ce1413e8fc1706ad0ca5a4b89c51d39d132ff37aaf91bfdd73eb32b56edfbb88f3f2cdcd906c7a978eb5eded6f7848f4d2fa36992760a741f855362108886a7ef940d71278b18f9d9d8fe758e9077f92c957daf6a753581b7ce26979050eef068aa78cdac17201d82bb1aa9dc10c1c83f5d9aabb65ddc3269f35d59226df08b90e9cb4d1b8bcc2ca5db0febcef22909e3db71ae0ae1bcbaacd9e46dc50f48b9da7189f0e3417d93462478c24033c3e550d86ce16089b455e18902c8f8d4e694d48bcdc35c4e24978285d85fb384fd08c010377eba30658b7f7564e64d3907b6b7cd21d0b88d81540c1a1eee0cd377f190480ee35d087f667a463b8155ad800681aa8e02f325f1376da649fecaae1564c5879b31eeacbc4bf4ee4f96cf05fa8a454875fd8c120b47fff2687ae1e092a1024a5c0ac843a8fb34406b1b1482215d134df4412d99df4f3531549146889cea6df2c8e52445355fee0ff059ac2b14dee48bea9f4b5bb2983be870c4776d301d0e5c81cad5fa1ae1ae41e8e196cb2ccc423c6459e558b1a257cb70fa9e2a2389099f4f90bc116e751da3186fd5eb851679b7f7de030962d662a1f3c3b34407609515b7f6c4cda99976ec33889b919f2e22a72985d4d7a33e661da830d1c8e247facd3db0fce35e1fe1550d1559448d0512f8e231d1f1d464f8ca928ce0ae4b56c300dbbc9c89e561f93cf35feb8be31b1e33e7779c51fde8bf5e598ad08fe17f98f9881b2ec6e1e012c4adafc8fe4cf030cf9b110b6aaaa6489cb4336eebc1dfe50da00f54f575b96616202b60e024656bdd70641529f109dff37a775b834551707efa5932357b07ff00a67390c439c8ccae3157a695af062a485a7a1ec965e611e3c3959967588ad7ee13c7b27226c05c3b395bd19da492cd0d20bfd91b5b7afce6a6f6cff0cdd127ab2d818224d2131e1711771bd50a474e1b19a7004de5b2acf6666153398b19a489388414a234700b0ee3630de5ea2c5590960f985c5adf8bbc53e0e2b00a0c31c476ca9ec2547330c51a583bc81003faf041dc07834d70e083a6ed128eab813ddc38579c296725c74df1bffe191c2c8572fe3492ae7134f38b14470050a6df71c226515eb623b50a66bde46a525e6366ea246034c5070c00674e564271f6291cad83016d75a279ac06dd599dd64981d485042dfed7d1b5ae79c0ce6d94906c4f1b75d024dc89c6fbff80ee7f246ce8ae49ff7021a529ff4f67e01f0363e0a3f479df297f1953ab2e86e14fa7a4af577c3f68f5a74514280ab945019e7a99d8d339283441fb786ec7f027d390ae3f02027c3c73091f0f3f05e6fc35bc5034f9563e74c5d3142cc93e9796b2bc05d1c601144eb0f145bf43cd8dd8b95e28c6996d3e722ddbc5299d1cf0163939945361d8a2be15f5c14b5d137f56d76aa93e2ea6136017c78d99c728d761a9f774640e2231a0ec9ba489fd3a7f44b68ca8b39219b9fa99c532dc93db1d10e91fa38f0dfc19f3f81a41fe1d834716bac8c87140b874007da5c1cb1904e398204716d5eef4ae3a63b0b8cc667a88c37ae2823843bdc8e4efb9e2f2f0e995f05c206a7c4fcaa8a5455f065b22c0831aaeb560047fad5bf8c76f6e965acfeb79ec8aae092840a9ad4d1541f839b8ce9635451c5e156d9d6bc9d5ccaa80057b1d5a2a908378cc4eb084b8864ce8ecc24a5a090bb63f03a9efcc3843e8dcee363ea2ca6c565e41b0b8938e38fa3ead012c2f1a1590a9b515db002317051c7e06e8a95602ba94a68dfd4c48373f2583c3e7e52906667a0d0523413ac7d4697524f771ac75f08c49c0bb6164ac3f46be8f39b5e3828e09975bb5b58ed014950b1ee3529b76d40923afc992f61f12684f2ffef39a29b0c0d173e491bb6eb52ee39da05282d9cc6c31fa500800f332ac9daad0abaef39813cb2c06d68d18de94b36b47c294feaebdb5bcfc769e2b16e67bfeddf1adc649ee11f1fa04fc83bb65887d68840113c36b69d1bc2c8d767a96c11d41bb5d80d826d6c3ab1ac3b8baa5409527330c8f9e329a72cb69a0a68158f9c6498aefbbfcd294411ed560424d47e76db0c97e75f36488021a117261423843cf564206aa104bd821da38ace2e328c58e50d3d4c96d0ce91e0a8345384010d6c4078724f0db8ecdcfc23f47c0a50616aa967794690968f749792d614a06da507159b4c2e06e47cabe858e7591767ddd5441f6bbb549901ee50ba6fb4e14e123e4d7427a6210414796dda5581fbd2e5966683788ed8b89639088d95307cbc8ae39740afbc107737f921117959aba5b83ff54c8201301ba446c19a17a17151914f721d46a4891c777b055c2a87bbef2048ce7fc953cd3460805e91445faa13ead9e38304d72547cdf6a4f62ee59907e7a5a3d89d2336fccd410275cd2901e342e041009b644d25cfa7e62854b92976aedea2269f56c0ac67b3a877ddbbb640eca021c662a83f4a1c080ca897f08bb1223bdbbe0f010d350f5856eef79a51c9cf75bc496f032dedbaa54e7e050f0b8468bf31f3217a768a7dc7d537ac693a992c96104a0824aa80c12e615b1714926f5118e142320193fb0f7835213c76fcf237e0a845b0b4b5efea5fae62fbe016b92e80c8e2e4435f6b6cf45e225dc974540f1404b913eee68988f87d1c3a0287141eca5ab207fec4d51333bf376c4d5e178eabdb4374aaf1c9815f922a7728fac2137f749bc4b3e51b57740434ce2bae40e21027f812646fda5b9ec96a582fa2984dc4df0bb0919de85762f73505520052d294a06eb7c6a463bf9dae6b474b124d19f76c6a40865028818f7f501b062781269cadbcf303e5a1cb7753e83009721ed8c32871d7aedee5e737cad5800f99f7d2f65781961c836aa14a1a031a8334a5c311e8fd0258f65794d75bd8787d148b20cd57d0fee1379fde8fa52b3bc13da91007a2b831676ae300f2df78813b4816ac468d01ace306418d1d2bbfff6ab9894b2cfde58257957471cb07d2c67fe114157f093b21e20c3c385918429e6829e5ceb88b7e0fa47575fe208b4330da702c1b2455a6d01ed33170fb8c968073b53bfcd2bb36fec933f3a7e21a01df58670cf060f39c41e5b80994b54e69b6b9fe93e748939086eb1cf603542c6e9ac4ec2d7be5058ec7c108c5e17884709eb0f7c892d7e1327ff7d258ba7127c61cc8aca38c9c14a31ec992c79396eba9d7c6e547c9f50c7710c04856221a18a847ea1d6ce8bc462d48fce6acec9c3de9bb1907819d86cee4b4dd1950aba3cfd72c2c668796041284514f7eb5ff7b0fa091a1e3c369c2f3f737bf8daf5376f782d6f2121a4931ce055060b176eb1dab77790cfc6a4278049c02aa2815a9d3fc235a412478ff07665cf8b0454019b0491cd1c1f449d347722ab5987c7a041d90b4abc901567bdef28392aa2546a45f8ba257c339c144fc7697b86409e2b9b62cc91d8d75ed1c95187bfba4b92e53464505f1f601958db943d7ef914124fde2d7ac232b1e0db7ec01b77f6d64a5ee7070566121d8faf7d6a71d7d9c962bf990bfe0cdecc886646e1b65dd61b163b85cab9eef078ab0130137d95703d4fa4b97cba9c58617c767e1fd1edb709aa3e4fb8470d7fa726b21b7c7f6ced6e54e1fe3c1334bcb7bea264df586ab6940c8ee4a1f17123e69708ef27e631aa16800457ecb1aa6b9331a50178ff70b1d615916a75f378c4900eaed71a3a5a43f5698beb5e32b7702f4df509a09aaa88614d96fb3d716a69ef6f79ae7f468b5ef07da177598c189f65d15172b28610bfd384b09b938cc85e962115e2e8733eb0d9d364973d80cedafd9e617c1fe238abeb586ffd5761c23d706b10a1a8aaad381292af96b290b75d31a170486f475b9ebdd898e162566044d00dcb6435a015bf4e362d679c3a120e14df42f4d7d772c50de1727763730647318b5692fa51a2f11556955c26e8af756148b21069d79cf1f1d79af99f18263c429ff100b827409f8669df8015a2f35c427fe5027369fb7d79cd6c694645fe443840ec20770657e8db1fb4a16102bdfcee1f61ca3959d2cad78fb972118a2e19c00fd0f6c9e90b7437393733f5fa721a9a5e9a723aefca29aec4334ecaf9e448e9492662f8ebe77c1d6b08d2f9b03430d168cfbbd7c45b82495075517163a637dc9c6e80b225020999c9bc2013c1fbe9803bb532c23e7a49c748843e4eb4109ea0a2c5e1c5e00ddb2d46f6afbf8c05d584005b86"}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000001480)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='io_uring_submit_sqe\x00', 0xffffffffffffffff, 0x0, 0x407dd671}, 0x18) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) io_uring_setup(0x4c1f, &(0x7f0000001580)={0x0, 0xc6ab, 0x1, 0x2, 0x367, 0x0, r0}) write$selinux_create(0xffffffffffffffff, &(0x7f0000001600)=@access={'system_u:object_r:ptchown_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x1ff}, 0x67) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001700)={0x400, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x67bd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb64}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff4, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1cfa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x400}, 0x1, 0x0, 0x0, 0xc001}, 0x60004000) unshare(0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4c810) splice(r1, &(0x7f0000001d00)=0x7, r2, &(0x7f0000001d40)=0x6, 0x0, 0x5558522e898467fb) openat$vsock(0xffffffffffffff9c, &(0x7f0000001d80), 0x600, 0x0) 3.674658911s ago: executing program 0 (id=9187): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0}, 0x94) write(r2, &(0x7f0000004200)='t', 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x66) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 3.673528762s ago: executing program 1 (id=9188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="0eceae1464e18aa5000000006667955d180100002a20702500000000030000007b1af8ff00000015bfa100000000000007010000f8e3ffffb702000008000000b7000006000083850400002d00000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000000000002000000000000000fc86d5b5803f2ea69f210fad5ee1c0a9956e97388156bc4e5f56b4e46a134f60f750207a0fafd3daa1eca21dfa5bc5e995ac0c68dee5047470246afda23fe20d915f51a88e7a5017d995ebed7c918ad78a8bb1f800562289eb667c2a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d4, &(0x7f0000000080)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r5) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80) unshare(0x28020480) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000074"], 0x24, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0xfe, 0x0, &(0x7f0000000080)) 3.673022591s ago: executing program 2 (id=9189): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[], 0x94, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@v3={0x3000000, [{0x0, 0x7}, {0x415050c5, 0x3}]}, 0x18, 0x2) pipe2$9p(&(0x7f0000001900), 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'sit0\x00', 0x0}) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_DISCARDURB(r7, 0x550b, 0x0) 2.53490611s ago: executing program 0 (id=9190): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x5, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@sysvgroups}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 2.53430135s ago: executing program 1 (id=9191): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.53391323s ago: executing program 2 (id=9192): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[], 0x94, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@v3={0x3000000, [{0x0, 0x7}, {0x415050c5, 0x3}]}, 0x18, 0x2) pipe2$9p(&(0x7f0000001900), 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'sit0\x00', 0x0}) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_DISCARDURB(r7, 0x550b, 0x0) 2.5335927s ago: executing program 3 (id=9193): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000004200)='t', 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x66) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 2.51545385s ago: executing program 1 (id=9194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.311646289s ago: executing program 0 (id=9195): socket$pppoe(0x18, 0x1, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x7]}, 0x8) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000240)=0x8) r1 = socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000300), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000400), {[{{@ip={@loopback, @local, 0x0, 0xff, 'ip6erspan0\x00', 'tunl0\x00', {}, {}, 0xff, 0x1, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0x1, 0x2, 0x2, 0x6], 0x1, 0x6}, {0x0, [0x6, 0x4, 0x1, 0x1], 0x3, 0xb41855f4ef5261cd}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x400, 0xd42], 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x8, 0x6, 0x10001, 0x3, 0x2, 0x6, 0x8c77]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000340)=0x1, 0x4) socket$pppoe(0x18, 0x1, 0x0) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000000000aee167320000757935d075d1f9e7b96424"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20c006, &(0x7f0000000380)={[], [{@appraise_type}]}, 0x1, 0x44d, &(0x7f00000006c0)="$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") 1.310957129s ago: executing program 1 (id=9196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x2, &(0x7f0000000180)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='GPL\x00', 0xd, 0xa0, &(0x7f0000000680)=""/160, 0x40f00, 0x1, '\x00', r2, @fallback=0xf2a139624a18019e, r3, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x10, 0x9, 0xa52}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000800)=[r0], 0x0, 0x10, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x21, &(0x7f0000000400)={0x11, 0x4305, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.306485439s ago: executing program 2 (id=9197): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000003c0)="7d8b253747ceba3b26955b5b1a216c091de1215c9820b99d4fb09ccd45beb01eff55ef96dddffc98b8eabb31685c43b09e4bd2251bb5eee81f772d41d32a762e55c738cd7809695ca18024066083824014056b60560b56ae3bdbc92881ede8cfc8065a690feb2c4ef0d0c4b587f83426cd6185b48259d7971a0780606f2a867a405cd49bfae24fdbe79addb668ae16164f51c76e3203c58dfcc30de79693ed3fbf7a8967db2a64d25a1c819af0eac244423c6818a1ad5b496f7a6bfa662bf43824a922edb08a27064839230b3465b42e42736074860f37ee") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 1.305555989s ago: executing program 3 (id=9198): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x5, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@sysvgroups}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 2.39358ms ago: executing program 0 (id=9199): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x6e, &(0x7f0000001180)=ANY=[@ANYBLOB="bbbbbbb7bbbbaaaaaaaaaa0086dd6075e70000383a00fe800000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00002c00fe880000000000000000000000000001fe8000000000000000000000000000bb3300000000000000"], 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r2, 0x10, 0x2f5, 0x8) setxattr$system_posix_acl(&(0x7f0000000440)='./file1\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000800000100002000000000010"], 0x2c, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000000080)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8, 0x80, 0x8, 0x6, {{0x9, 0x4, 0x3, 0x4, 0x24, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0x9, [{@private=0xa010101, 0x6}]}, @end]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4046010) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f4}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r6, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup2(r7, r7) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 1.48987ms ago: executing program 1 (id=9200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="0eceae1464e18aa5000000006667955d180100002a20702500000000030000007b1af8ff00000015bfa100000000000007010000f8e3ffffb702000008000000b7000006000083850400002d00000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000000000002000000000000000fc86d5b5803f2ea69f210fad5ee1c0a9956e97388156bc4e5f56b4e46a134f60f750207a0fafd3daa1eca21dfa5bc5e995ac0c68dee5047470246afda23fe20d915f51a88e7a5017d995ebed7c918ad78a8bb1f800562289eb667c2a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d4, &(0x7f0000000080)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r5) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) unshare(0x28020480) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000074"], 0x24, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0xfe, 0x0, &(0x7f0000000080)) 719.94µs ago: executing program 2 (id=9201): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 0s ago: executing program 3 (id=9202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000004200)='t', 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x66) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ][T22371] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 523.821880][T30700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8740'. [ 523.846350][T30700] loop2: detected capacity change from 0 to 512 [ 523.854910][T30703] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8739'. [ 523.902174][T30700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 523.902213][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.933653][T30706] loop4: detected capacity change from 0 to 512 [ 523.947090][T30700] EXT4-fs (loop2): orphan cleanup on readonly fs [ 523.963844][T30700] __quota_error: 395 callbacks suppressed [ 523.963858][T30700] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 523.979033][T30700] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 523.988514][T30700] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8740: Failed to acquire dquot type 1 [ 524.005616][T30700] EXT4-fs (loop2): 1 truncate cleaned up [ 524.013809][T30706] EXT4-fs (loop4): 1 orphan inode deleted [ 524.022918][T30700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 524.035816][T30706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.052689][T16199] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 524.062495][T16199] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 524.080703][T30713] 9pnet_virtio: no channels available for device 127.0.0.1 [ 524.088537][T30706] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.103533][T30700] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 524.111560][ T29] audit: type=1326 audit(1750823170.738:29647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.1.8742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34cfe929 code=0x7ffc0000 [ 524.136573][ T29] audit: type=1326 audit(1750823170.738:29648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.1.8742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b34cfe929 code=0x7ffc0000 [ 524.137377][T30713] loop1: detected capacity change from 0 to 256 [ 524.160362][ T29] audit: type=1326 audit(1750823170.738:29649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.1.8742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34cfe929 code=0x7ffc0000 [ 524.190033][ T29] audit: type=1326 audit(1750823170.738:29650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.1.8742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b34cfe929 code=0x7ffc0000 [ 524.213666][ T29] audit: type=1326 audit(1750823170.738:29651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.1.8742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34cfe929 code=0x7ffc0000 [ 524.237554][ T29] audit: type=1326 audit(1750823170.738:29652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.1.8742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f2b34cfe929 code=0x7ffc0000 [ 524.261047][ T29] audit: type=1326 audit(1750823170.738:29653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30712 comm="syz.1.8742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b34cfe929 code=0x7ffc0000 [ 524.285734][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.298971][T30706] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 524.367069][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.436243][T30730] loop0: detected capacity change from 0 to 1024 [ 524.443032][T30730] EXT4-fs: Ignoring removed bh option [ 524.448575][T30730] EXT4-fs: inline encryption not supported [ 524.513733][T30732] siw: device registration error -23 [ 524.525056][T30730] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 524.536893][T30730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 524.547385][T30730] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.8747: lblock 2 mapped to illegal pblock 2 (length 1) [ 524.562265][T30730] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.8747: lblock 0 mapped to illegal pblock 48 (length 1) [ 525.260097][T30734] loop4: detected capacity change from 0 to 512 [ 525.280839][T30734] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 525.281838][T30700] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 525.281838][T30700] [ 525.291163][T30730] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8747: Failed to acquire dquot type 0 [ 525.319141][T30730] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 525.330154][T30730] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.8747: mark_inode_dirty error [ 525.341898][T30734] EXT4-fs (loop4): 1 truncate cleaned up [ 525.348101][T30734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.350252][T21460] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 525.396352][T30730] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 525.407030][T30730] EXT4-fs (loop0): 1 orphan inode deleted [ 525.413887][T30730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.426590][T16205] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 525.441846][T16205] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 525.592474][T30751] siw: device registration error -23 [ 525.656577][T30743] lo speed is unknown, defaulting to 1000 [ 525.941546][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.952200][T22371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.966146][T30743] chnl_net:caif_netlink_parms(): no params data found [ 525.968306][T22371] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 525.991824][T22371] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 526.002080][T22371] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 526.103935][T30743] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.111146][T30743] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.118495][T30743] bridge_slave_0: entered allmulticast mode [ 526.125798][T30743] bridge_slave_0: entered promiscuous mode [ 526.132932][T30756] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8752'. [ 526.142005][T30743] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.149116][T30743] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.156473][T30743] bridge_slave_1: entered allmulticast mode [ 526.164067][T30743] bridge_slave_1: entered promiscuous mode [ 526.174059][T16199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.333344][T30765] loop4: detected capacity change from 0 to 512 [ 526.375095][T30769] loop0: detected capacity change from 0 to 512 [ 526.383101][T30769] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 526.396018][T30769] EXT4-fs (loop0): 1 truncate cleaned up [ 526.402601][T30769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.455380][T16199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.471323][T30768] loop1: detected capacity change from 0 to 1024 [ 526.478974][T30768] EXT4-fs: Ignoring removed orlov option [ 526.489491][T30743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.505764][T30768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.510598][T30743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.520940][T30765] EXT4-fs (loop4): 1 orphan inode deleted [ 526.537777][T30765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.550378][T16205] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 526.563057][T30765] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.576075][T16199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.587405][T30765] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 526.596681][T30743] team0: Port device team_slave_0 added [ 526.603588][T30743] team0: Port device team_slave_1 added [ 526.631158][T16199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.644487][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.644669][T30743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.660446][T30743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.686431][T30743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.697823][T30743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.704890][T30743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.730936][T30743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.766938][T19293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.767324][T30743] hsr_slave_0: entered promiscuous mode [ 526.782055][T30743] hsr_slave_1: entered promiscuous mode [ 526.788000][T30743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.795740][T30743] Cannot create hsr debugfs directory [ 526.826957][T16199] bridge_slave_1: left allmulticast mode [ 526.832678][T16199] bridge_slave_1: left promiscuous mode [ 526.838389][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.853379][T16199] bridge_slave_0: left allmulticast mode [ 526.855872][T30780] 9pnet_virtio: no channels available for device 127.0.0.1 [ 526.859100][T16199] bridge_slave_0: left promiscuous mode [ 526.872001][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.886960][T30780] loop1: detected capacity change from 0 to 256 [ 526.979329][T22371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.032313][T16199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.042497][T16199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.052003][T16199] bond0 (unregistering): Released all slaves [ 527.104858][T16199] hsr_slave_0: left promiscuous mode [ 527.110706][T16199] hsr_slave_1: left promiscuous mode [ 527.116847][T16199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.124439][T16199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.132919][T16199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.140387][T16199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.140625][T30791] siw: device registration error -23 [ 527.158952][T16199] veth1_macvtap: left promiscuous mode [ 527.164562][T16199] veth0_macvtap: left promiscuous mode [ 527.170406][T16199] veth1_vlan: left promiscuous mode [ 527.175702][T16199] veth0_vlan: left promiscuous mode [ 527.288969][T16199] team0 (unregistering): Port device team_slave_1 removed [ 527.299666][T16199] team0 (unregistering): Port device team_slave_0 removed [ 527.340915][ T36] lo speed is unknown, defaulting to 1000 [ 527.346674][ T36] infiniband syz0: ib_query_port failed (-19) [ 527.362101][T30793] loop3: detected capacity change from 0 to 512 [ 527.390043][T30797] loop0: detected capacity change from 0 to 128 [ 527.390047][T30793] EXT4-fs (loop3): 1 orphan inode deleted [ 527.396811][T30797] EXT4-fs: test_dummy_encryption option not supported [ 527.410929][T30793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.424463][T30793] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.475527][T16191] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 527.488524][T30793] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 527.515262][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.534247][T30800] loop0: detected capacity change from 0 to 1024 [ 527.542694][T30800] EXT4-fs: Ignoring removed bh option [ 527.548140][T30800] EXT4-fs: inline encryption not supported [ 527.552629][T30802] loop3: detected capacity change from 0 to 128 [ 527.554714][T30800] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.570881][T30802] EXT4-fs: test_dummy_encryption option not supported [ 527.583630][T30800] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 527.593545][T30800] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.8761: lblock 2 mapped to illegal pblock 2 (length 1) [ 527.607784][T30800] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.8761: lblock 0 mapped to illegal pblock 48 (length 1) [ 527.622788][T30800] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8761: Failed to acquire dquot type 0 [ 527.634261][T30800] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 527.645360][T30800] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.8761: mark_inode_dirty error [ 527.657152][T30800] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 527.668843][T30800] EXT4-fs (loop0): 1 orphan inode deleted [ 527.675368][T30800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.688539][ T41] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.703296][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 527.732292][T30743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 527.748941][T30743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 527.764376][T30743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 527.773264][T30743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.803089][T30814] loop4: detected capacity change from 0 to 512 [ 527.892390][T30743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.915683][T30814] EXT4-fs (loop4): 1 orphan inode deleted [ 527.924399][T30743] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.969470][T30818] loop3: detected capacity change from 0 to 512 [ 527.976993][T30818] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 527.991323][T30818] EXT4-fs (loop3): 1 truncate cleaned up [ 527.997850][T30818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.092249][T30814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.111642][T16191] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.118738][T16191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.127383][T16205] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 528.140859][T30814] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.154751][T30821] loop1: detected capacity change from 0 to 128 [ 528.169746][T30821] EXT4-fs: test_dummy_encryption option not supported [ 528.173110][T16205] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.183660][T16205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.194033][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.218983][T30823] loop4: detected capacity change from 0 to 512 [ 528.230911][T30823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 528.248883][T30823] EXT4-fs (loop4): 1 truncate cleaned up [ 528.267137][T30823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.269981][T30743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.316580][T22371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.326954][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.344663][T22371] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 528.386803][T22371] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 528.396935][T22371] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 528.457443][T30845] loop4: detected capacity change from 0 to 256 [ 528.481259][T30743] veth0_vlan: entered promiscuous mode [ 528.490739][T30743] veth1_vlan: entered promiscuous mode [ 528.502316][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.515697][T30743] veth0_macvtap: entered promiscuous mode [ 528.523181][T30743] veth1_macvtap: entered promiscuous mode [ 528.533302][T30846] loop1: detected capacity change from 0 to 512 [ 528.540521][T30846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 528.555143][T30743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.566855][T30846] EXT4-fs (loop1): 1 truncate cleaned up [ 528.573266][T30846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.573378][T30743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.621396][T30743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.630162][T30743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.638998][T30743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.647767][T30743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.752246][T30865] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8773'. [ 528.793511][T30867] loop3: detected capacity change from 0 to 512 [ 528.802060][T30867] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 528.822682][T30866] loop4: detected capacity change from 0 to 128 [ 528.829297][T30866] EXT4-fs: test_dummy_encryption option not supported [ 528.863101][T30867] EXT4-fs (loop3): 1 truncate cleaned up [ 528.869162][T30867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.875647][T30874] loop0: detected capacity change from 0 to 512 [ 529.173801][T30874] EXT4-fs (loop0): 1 orphan inode deleted [ 529.386415][T30874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.402551][T30874] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.464410][T30881] loop2: detected capacity change from 0 to 512 [ 529.473596][T30881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 529.496667][T30881] EXT4-fs (loop2): 1 truncate cleaned up [ 529.503273][T30881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.546703][T30884] loop4: detected capacity change from 0 to 512 [ 529.555479][T30884] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 529.569222][T30884] EXT4-fs (loop4): 1 truncate cleaned up [ 529.577103][T30884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.779997][T16205] __quota_error: 129 callbacks suppressed [ 529.780032][T16205] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 529.795566][T16205] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 529.818865][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.840532][T19293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.855549][T30874] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 529.874980][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.889086][T22371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.957163][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.978045][T30894] loop1: detected capacity change from 0 to 1024 [ 529.993766][T30894] EXT4-fs: Ignoring removed bh option [ 530.008379][T30891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8781'. [ 530.020522][T30894] EXT4-fs: inline encryption not supported [ 530.041998][T30894] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 530.073740][T30894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 530.091100][T30894] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.8778: lblock 2 mapped to illegal pblock 2 (length 1) [ 530.144600][T30894] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 530.196826][T30894] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.8778: lblock 0 mapped to illegal pblock 48 (length 1) [ 530.235754][T30906] loop2: detected capacity change from 0 to 512 [ 530.243634][T30906] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 530.261203][T30906] EXT4-fs (loop2): 1 truncate cleaned up [ 530.267806][T30906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.449728][T30894] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 530.458881][T30894] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.8778: Failed to acquire dquot type 0 [ 530.472857][T30894] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 530.488721][T30894] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.8778: mark_inode_dirty error [ 530.510094][T30894] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 530.520618][T30894] EXT4-fs (loop1): 1 orphan inode deleted [ 530.526655][T30894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.540658][T16199] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 530.564350][T16199] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 530.572967][T16199] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 530.584876][T30912] loop3: detected capacity change from 0 to 512 [ 530.602048][T30912] EXT4-fs (loop3): 1 orphan inode deleted [ 530.608455][T30912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.621420][T16191] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 530.631232][T16191] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 530.631486][T30912] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.663993][T30912] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 530.686200][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.695332][T30918] loop4: detected capacity change from 0 to 1024 [ 530.696437][T30919] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8785'. [ 530.702184][T30918] EXT4-fs: Ignoring removed orlov option [ 530.725924][T30922] loop3: detected capacity change from 0 to 128 [ 530.732948][T30918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.755498][T30922] EXT4-fs: test_dummy_encryption option not supported [ 530.766665][T19293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.780634][T19293] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 530.820769][T19293] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 530.849682][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.867943][T19293] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 531.000886][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.093142][ T29] audit: type=1326 audit(1750823177.718:29774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30928 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 531.116960][ T29] audit: type=1326 audit(1750823177.718:29775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30928 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 531.140653][ T29] audit: type=1326 audit(1750823177.718:29776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30928 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 531.164289][ T29] audit: type=1326 audit(1750823177.728:29777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30928 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 531.187811][ T29] audit: type=1326 audit(1750823177.728:29778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30928 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 531.256241][T30939] loop0: detected capacity change from 0 to 512 [ 531.263440][T30939] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 531.309436][T30939] EXT4-fs (loop0): 1 truncate cleaned up [ 531.315592][T30939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.355445][T30949] loop2: detected capacity change from 0 to 512 [ 531.383807][T30951] loop1: detected capacity change from 0 to 128 [ 531.398149][T30951] EXT4-fs: test_dummy_encryption option not supported [ 531.418743][T30949] EXT4-fs (loop2): 1 orphan inode deleted [ 531.424965][T30949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.438017][T16199] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 531.522112][T30955] loop4: detected capacity change from 0 to 512 [ 531.543382][T30955] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 531.553849][T30949] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.567845][T30955] EXT4-fs (loop4): 1 truncate cleaned up [ 531.574616][T30955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.803758][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.848405][T22371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.873220][T30963] loop3: detected capacity change from 0 to 1024 [ 531.875166][T30965] loop0: detected capacity change from 0 to 128 [ 531.893971][T30963] EXT4-fs: Ignoring removed orlov option [ 531.895431][T30965] EXT4-fs: test_dummy_encryption option not supported [ 531.927401][T30963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.956945][T30974] loop2: detected capacity change from 0 to 256 [ 531.965943][T30976] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8801'. [ 532.096445][T30984] loop1: detected capacity change from 0 to 1024 [ 532.103282][T30984] EXT4-fs: Ignoring removed orlov option [ 532.113675][T30984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.251147][T30990] loop0: detected capacity change from 0 to 512 [ 532.259348][T30990] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 532.296977][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.316769][T30990] EXT4-fs (loop0): 1 truncate cleaned up [ 532.323468][T30990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.510633][T30998] loop4: detected capacity change from 0 to 512 [ 532.519359][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.533278][T30998] EXT4-fs (loop4): 1 orphan inode deleted [ 532.543018][T31002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8807'. [ 532.559369][T31002] loop3: detected capacity change from 0 to 512 [ 532.559892][T16194] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 532.578047][T31002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 532.578558][T30998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.587666][T31002] EXT4-fs (loop3): orphan cleanup on readonly fs [ 532.600467][T30998] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.605841][T31002] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8807: Failed to acquire dquot type 1 [ 532.627732][T31002] EXT4-fs (loop3): 1 truncate cleaned up [ 532.634233][T31002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 532.656336][T31002] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 532.676556][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.696306][T19293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.884551][T22371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.988768][T31012] loop4: detected capacity change from 0 to 512 [ 532.998478][T31012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 533.016461][T31012] EXT4-fs (loop4): 1 truncate cleaned up [ 533.023183][T31012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.283803][T31026] loop0: detected capacity change from 0 to 128 [ 533.290474][T31026] EXT4-fs: test_dummy_encryption option not supported [ 533.318689][T31029] loop2: detected capacity change from 0 to 512 [ 533.322065][T31031] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8814'. [ 533.343141][T31030] loop0: detected capacity change from 0 to 1024 [ 533.350074][T31030] EXT4-fs: Ignoring removed orlov option [ 533.358225][T31029] EXT4-fs (loop2): 1 orphan inode deleted [ 533.366056][T31030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.370397][T31029] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.388943][T31002] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 533.388943][T31002] [ 533.402266][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 533.410421][T31037] loop1: detected capacity change from 0 to 512 [ 533.431928][T31037] EXT4-fs (loop1): 1 orphan inode deleted [ 533.438413][T31037] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.449729][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 533.469366][T31037] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 533.497951][T31044] loop3: detected capacity change from 0 to 1024 [ 533.505046][T31044] EXT4-fs: Ignoring removed orlov option [ 533.637724][T31051] loop1: detected capacity change from 0 to 1024 [ 533.644682][T31051] EXT4-fs: Ignoring removed orlov option [ 533.804867][T31054] loop2: detected capacity change from 0 to 512 [ 534.050130][T31054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 534.077120][T31054] EXT4-fs (loop2): 1 truncate cleaned up [ 534.247269][T31059] loop4: detected capacity change from 0 to 512 [ 534.259400][T31059] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 534.276283][T31059] EXT4-fs (loop4): 1 truncate cleaned up [ 534.513181][T31072] loop2: detected capacity change from 0 to 128 [ 534.519690][T31072] EXT4-fs: test_dummy_encryption option not supported [ 534.598289][T31078] loop2: detected capacity change from 0 to 256 [ 534.624650][T31084] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8829'. [ 534.636365][T31083] loop1: detected capacity change from 0 to 512 [ 534.686302][T31090] loop0: detected capacity change from 0 to 1024 [ 534.700301][T31090] EXT4-fs: Ignoring removed orlov option [ 534.772216][T31083] EXT4-fs (loop1): 1 orphan inode deleted [ 534.778612][T31083] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.477324][T31100] lo speed is unknown, defaulting to 1000 [ 535.483193][T31100] lo speed is unknown, defaulting to 1000 [ 535.489248][T31100] lo speed is unknown, defaulting to 1000 [ 535.495998][T31100] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 535.507354][T31100] lo speed is unknown, defaulting to 1000 [ 535.513416][T31100] lo speed is unknown, defaulting to 1000 [ 535.519457][T31100] lo speed is unknown, defaulting to 1000 [ 535.525621][T31100] lo speed is unknown, defaulting to 1000 [ 535.531710][T31100] lo speed is unknown, defaulting to 1000 [ 535.553974][T31099] loop2: detected capacity change from 0 to 512 [ 535.561225][T31099] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 535.635042][T31099] EXT4-fs (loop2): 1 truncate cleaned up [ 535.951629][T31112] loop0: detected capacity change from 0 to 1024 [ 536.003631][T31115] loop1: detected capacity change from 0 to 512 [ 536.019289][T31112] EXT4-fs: Ignoring removed orlov option [ 536.028211][T31114] loop4: detected capacity change from 0 to 512 [ 536.042315][T31115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 536.053764][T31114] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 536.064265][T31115] EXT4-fs (loop1): 1 truncate cleaned up [ 536.077790][T31114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 536.085874][T31114] __quota_error: 107 callbacks suppressed [ 536.085889][T31114] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 536.101215][T31114] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 536.110656][T31114] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8841: Failed to acquire dquot type 1 [ 536.129793][T31114] EXT4-fs (loop4): 1 truncate cleaned up [ 536.179939][T31114] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 536.335774][T31128] loop2: detected capacity change from 0 to 512 [ 536.342578][T31128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 536.353510][T31128] EXT4-fs (loop2): 1 truncate cleaned up [ 536.616667][T31137] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8845'. [ 536.783598][T31114] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 536.783598][T31114] [ 536.853743][T31143] siw: device registration error -23 [ 537.096259][T31150] loop4: detected capacity change from 0 to 512 [ 537.104570][T31150] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 537.121254][T31150] EXT4-fs (loop4): 1 truncate cleaned up [ 537.185960][T31148] loop2: detected capacity change from 0 to 256 [ 537.405570][T31157] loop2: detected capacity change from 0 to 1024 [ 537.414595][T31157] EXT4-fs: Ignoring removed bh option [ 537.431234][T31157] EXT4-fs: inline encryption not supported [ 537.440618][T31157] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 537.447826][T31159] loop0: detected capacity change from 0 to 1024 [ 537.476499][T31157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 537.487992][T31159] EXT4-fs: Ignoring removed orlov option [ 537.502928][T31157] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8850: lblock 2 mapped to illegal pblock 2 (length 1) [ 537.527510][T31157] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 537.535907][T31157] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.8850: lblock 0 mapped to illegal pblock 48 (length 1) [ 537.559890][T31157] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 537.568732][T31157] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8850: Failed to acquire dquot type 0 [ 537.580898][T31165] loop3: detected capacity change from 0 to 128 [ 537.589321][T31157] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 537.599028][T31157] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8850: mark_inode_dirty error [ 537.609321][T31165] EXT4-fs: test_dummy_encryption option not supported [ 537.618380][T31157] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 537.644518][T31157] EXT4-fs (loop2): 1 orphan inode deleted [ 537.663317][ T31] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 537.717106][ T31] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 537.725602][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 537.935092][T31179] loop4: detected capacity change from 0 to 256 [ 537.945698][T31180] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8857'. [ 537.964296][ T29] audit: type=1326 audit(1750823184.568:29880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31169 comm="syz.4.8855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a80d1e929 code=0x7ffc0000 [ 537.987990][ T29] audit: type=1326 audit(1750823184.568:29881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31169 comm="syz.4.8855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a80d1e929 code=0x7ffc0000 [ 538.011593][ T29] audit: type=1326 audit(1750823184.568:29882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31169 comm="syz.4.8855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a80d1e929 code=0x7ffc0000 [ 538.035169][ T29] audit: type=1326 audit(1750823184.568:29883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31169 comm="syz.4.8855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a80d1e929 code=0x7ffc0000 [ 538.058739][ T29] audit: type=1326 audit(1750823184.568:29884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31169 comm="syz.4.8855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a80d1e929 code=0x7ffc0000 [ 538.108163][T31174] loop3: detected capacity change from 0 to 512 [ 538.116710][T31174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 538.128934][T31174] EXT4-fs (loop3): 1 truncate cleaned up [ 538.139080][T31188] loop0: detected capacity change from 0 to 512 [ 538.160715][T30743] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 538.193727][T30743] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 538.231226][T30743] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 538.261446][T31188] EXT4-fs (loop0): 1 orphan inode deleted [ 538.274740][T31188] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.287297][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 538.300180][T31204] loop1: detected capacity change from 0 to 1024 [ 538.307251][T31204] EXT4-fs: Ignoring removed orlov option [ 538.316766][T31209] loop4: detected capacity change from 0 to 256 [ 538.324240][T31188] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 538.418599][T31219] 9pnet_virtio: no channels available for device 127.0.0.1 [ 538.434759][T31219] loop0: detected capacity change from 0 to 256 [ 538.436224][T31226] loop3: detected capacity change from 0 to 128 [ 538.448945][T31226] EXT4-fs: test_dummy_encryption option not supported [ 538.491266][T31230] loop0: detected capacity change from 0 to 128 [ 538.498101][T31230] EXT4-fs: test_dummy_encryption option not supported [ 538.508723][T31232] loop3: detected capacity change from 0 to 1024 [ 538.515929][T31232] EXT4-fs: Ignoring removed orlov option [ 538.603885][T31240] loop4: detected capacity change from 0 to 1024 [ 538.620723][T31240] EXT4-fs: Ignoring removed bh option [ 538.626355][T31240] EXT4-fs: inline encryption not supported [ 538.635913][T31240] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 538.686195][T31248] loop1: detected capacity change from 0 to 512 [ 538.694675][T31240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 538.707111][T31240] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.8872: lblock 2 mapped to illegal pblock 2 (length 1) [ 538.738140][T31248] EXT4-fs (loop1): 1 orphan inode deleted [ 538.745086][T31240] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.8872: lblock 0 mapped to illegal pblock 48 (length 1) [ 538.759689][T31248] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.763894][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 538.771158][T31240] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8872: Failed to acquire dquot type 0 [ 538.793763][T31240] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 538.803690][T31256] 9pnet_virtio: no channels available for device 127.0.0.1 [ 538.803924][T31240] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8872: mark_inode_dirty error [ 538.820275][T31256] loop0: detected capacity change from 0 to 256 [ 538.824027][T31240] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 538.839020][T31240] EXT4-fs (loop4): 1 orphan inode deleted [ 538.860026][ T31] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 538.899443][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 538.966224][T31263] loop0: detected capacity change from 0 to 128 [ 538.983085][T31263] EXT4-fs: test_dummy_encryption option not supported [ 539.061864][T31273] loop0: detected capacity change from 0 to 128 [ 539.078992][T31273] EXT4-fs: test_dummy_encryption option not supported [ 539.112022][T31264] lo speed is unknown, defaulting to 1000 [ 539.209327][T31264] chnl_net:caif_netlink_parms(): no params data found [ 539.246816][T31264] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.253987][T31264] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.261308][T31264] bridge_slave_0: entered allmulticast mode [ 539.268142][T31264] bridge_slave_0: entered promiscuous mode [ 539.275506][T31264] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.282720][T31264] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.290230][T31264] bridge_slave_1: entered allmulticast mode [ 539.297252][T31264] bridge_slave_1: entered promiscuous mode [ 539.320809][T31293] siw: device registration error -23 [ 539.345728][T16205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.360555][T31264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.378894][T31264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.405839][T31264] team0: Port device team_slave_0 added [ 539.432729][T20550] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 539.448545][T16205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.461741][T20550] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 539.473885][T31264] team0: Port device team_slave_1 added [ 539.479668][T20550] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 539.508624][T31264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.515666][T31264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.541640][T31264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.555846][T31264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.562854][T31264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.588908][T31264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.619664][T31298] loop2: detected capacity change from 0 to 1024 [ 539.626560][T31298] EXT4-fs: Ignoring removed orlov option [ 539.636915][T16205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.647416][T31296] loop4: detected capacity change from 0 to 512 [ 539.655223][T31296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 539.670060][T31296] EXT4-fs (loop4): orphan cleanup on readonly fs [ 539.677027][T31296] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8889: Failed to acquire dquot type 1 [ 539.689649][T31296] EXT4-fs (loop4): 1 truncate cleaned up [ 539.692281][T31264] hsr_slave_0: entered promiscuous mode [ 539.701456][T31264] hsr_slave_1: entered promiscuous mode [ 539.707377][T31264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.715320][T31264] Cannot create hsr debugfs directory [ 539.721058][T31296] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 539.733048][T16205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.807163][T16205] bridge_slave_1: left allmulticast mode [ 539.812870][T16205] bridge_slave_1: left promiscuous mode [ 539.818544][T16205] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.826861][T16205] bridge_slave_0: left allmulticast mode [ 539.832643][T16205] bridge_slave_0: left promiscuous mode [ 539.838454][T16205] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.912425][T16205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.922167][T16205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.931694][T16205] bond0 (unregistering): Released all slaves [ 539.982461][T16205] tipc: Disabling bearer [ 539.987731][T16205] tipc: Disabling bearer [ 539.993778][T16205] tipc: Left network mode [ 540.010557][T16205] hsr_slave_0: left promiscuous mode [ 540.016826][T16205] hsr_slave_1: left promiscuous mode [ 540.023132][T16205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.030709][T16205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.038493][T16205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.045965][T16205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.056574][T16205] veth1_macvtap: left promiscuous mode [ 540.062362][T16205] veth0_macvtap: left promiscuous mode [ 540.067957][T16205] veth1_vlan: left promiscuous mode [ 540.073490][T16205] veth0_vlan: left promiscuous mode [ 540.097561][T31313] loop3: detected capacity change from 0 to 128 [ 540.106120][T31313] EXT4-fs: test_dummy_encryption option not supported [ 540.167250][T16205] team0 (unregistering): Port device team_slave_1 removed [ 540.176824][T16205] team0 (unregistering): Port device team_slave_0 removed [ 540.220421][T31318] loop3: detected capacity change from 0 to 128 [ 540.226979][T31318] EXT4-fs: test_dummy_encryption option not supported [ 540.424683][T31296] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 540.424683][T31296] [ 540.443372][T31327] loop0: detected capacity change from 0 to 1024 [ 540.450294][T31327] EXT4-fs: Ignoring removed bh option [ 540.455805][T31327] EXT4-fs: inline encryption not supported [ 540.462938][T31327] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 540.473939][T31327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 540.476904][T31264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.484573][T31327] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.8898: lblock 2 mapped to illegal pblock 2 (length 1) [ 540.503337][T31327] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.8898: lblock 0 mapped to illegal pblock 48 (length 1) [ 540.505451][T31264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.525029][T31327] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8898: Failed to acquire dquot type 0 [ 540.538536][T31264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.546119][T31327] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 540.557574][T31264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.565625][T31327] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.8898: mark_inode_dirty error [ 540.580743][T31327] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 540.591412][T31327] EXT4-fs (loop0): 1 orphan inode deleted [ 540.627057][T16194] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 540.642429][T16194] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 540.657013][T31264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.669041][T31264] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.678842][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.685943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.713276][T31264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.723761][T31264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.742897][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.749998][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.902861][T31264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.043254][T31355] loop2: detected capacity change from 0 to 1024 [ 541.048478][T31264] veth0_vlan: entered promiscuous mode [ 541.050108][T31355] EXT4-fs: Ignoring removed orlov option [ 541.058349][T31264] veth1_vlan: entered promiscuous mode [ 541.075853][T31264] veth0_macvtap: entered promiscuous mode [ 541.083241][T31264] veth1_macvtap: entered promiscuous mode [ 541.094181][T31264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.105121][T31264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.114788][T31264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.123805][T31264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.132614][T31264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.141404][T31264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.172789][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 541.172805][ T29] audit: type=1400 audit(1750823187.808:30039): avc: denied { write } for pid=31264 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 541.204669][ T29] audit: type=1400 audit(1750823187.808:30040): avc: denied { open } for pid=31264 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 541.255369][T22371] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 541.263294][T31361] 9pnet_virtio: no channels available for device 127.0.0.1 [ 541.273848][T22371] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 541.278623][ T29] audit: type=1326 audit(1750823187.908:30041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.286740][T22371] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 541.311472][ T29] audit: type=1326 audit(1750823187.948:30042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.344226][ T29] audit: type=1326 audit(1750823187.978:30043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.347309][T31361] loop1: detected capacity change from 0 to 256 [ 541.367980][ T29] audit: type=1326 audit(1750823187.978:30044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.397704][ T29] audit: type=1326 audit(1750823187.978:30045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.421310][ T29] audit: type=1326 audit(1750823187.978:30046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.444933][ T29] audit: type=1326 audit(1750823187.978:30047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.516021][ T29] audit: type=1326 audit(1750823187.978:30048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31360 comm="syz.1.8880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 541.545456][T31370] loop4: detected capacity change from 0 to 128 [ 541.554423][T31370] EXT4-fs: test_dummy_encryption option not supported [ 541.560651][T31372] loop1: detected capacity change from 0 to 128 [ 541.568014][T31372] EXT4-fs: test_dummy_encryption option not supported [ 541.657826][T31377] siw: device registration error -23 [ 541.699334][T31379] loop2: detected capacity change from 0 to 512 [ 541.706474][T31379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.717101][T31379] EXT4-fs (loop2): orphan cleanup on readonly fs [ 541.724710][T31379] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8908: Failed to acquire dquot type 1 [ 541.736803][T31379] EXT4-fs (loop2): 1 truncate cleaned up [ 541.744889][T31379] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 542.093603][T31388] loop3: detected capacity change from 0 to 512 [ 542.111922][T31388] EXT4-fs (loop3): 1 orphan inode deleted [ 542.118342][T31388] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.130120][T16199] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 542.157953][T31392] loop3: detected capacity change from 0 to 512 [ 542.172133][T31392] EXT4-fs (loop3): 1 orphan inode deleted [ 542.178273][T31392] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.189734][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 542.201944][T31392] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 542.402921][T31403] loop3: detected capacity change from 0 to 1024 [ 542.409642][T31403] EXT4-fs: Ignoring removed bh option [ 542.415106][T31403] EXT4-fs: inline encryption not supported [ 542.421349][T31403] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 542.432254][T31403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 542.442212][T31403] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.8914: lblock 2 mapped to illegal pblock 2 (length 1) [ 542.456623][T31403] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.8914: lblock 0 mapped to illegal pblock 48 (length 1) [ 542.471335][T31403] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8914: Failed to acquire dquot type 0 [ 542.482846][T31403] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 542.492588][T31403] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.8914: mark_inode_dirty error [ 542.504069][T31403] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 542.514466][T31403] EXT4-fs (loop3): 1 orphan inode deleted [ 542.523637][T31379] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 542.523637][T31379] [ 542.537595][T16199] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 542.552583][T16199] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 543.187040][T20887] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 543.200471][T20887] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 543.210176][T20887] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 543.309246][T31414] 9pnet_virtio: no channels available for device 127.0.0.1 [ 543.322036][T31414] loop0: detected capacity change from 0 to 256 [ 543.402579][T31420] siw: device registration error -23 [ 543.600073][T31426] loop0: detected capacity change from 0 to 512 [ 544.382230][T31426] EXT4-fs (loop0): 1 orphan inode deleted [ 544.396180][T31426] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.410820][T16199] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 544.620583][T31437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8924'. [ 544.638066][T31437] loop3: detected capacity change from 0 to 512 [ 544.645448][T31437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 544.650053][T31426] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 544.668981][T31437] EXT4-fs (loop3): orphan cleanup on readonly fs [ 544.676962][T31437] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8924: Failed to acquire dquot type 1 [ 544.677423][T31430] loop1: detected capacity change from 0 to 512 [ 544.695883][T31430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 544.764440][T31430] EXT4-fs (loop1): 1 truncate cleaned up [ 544.781281][T31442] loop2: detected capacity change from 0 to 512 [ 544.789436][T31442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 544.802734][T31442] EXT4-fs (loop2): 1 truncate cleaned up [ 544.862080][T31437] EXT4-fs (loop3): 1 truncate cleaned up [ 544.992805][T31445] loop4: detected capacity change from 0 to 1024 [ 545.001014][T31437] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 545.010600][T31445] EXT4-fs: Ignoring removed orlov option [ 545.227890][T31460] 9pnet_virtio: no channels available for device 127.0.0.1 [ 545.236350][T31437] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 545.236350][T31437] [ 545.259729][T31460] loop4: detected capacity change from 0 to 256 [ 545.270044][T31451] loop0: detected capacity change from 0 to 512 [ 545.277138][T31451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 545.288629][T31451] EXT4-fs (loop0): 1 truncate cleaned up [ 545.316438][T31455] loop2: detected capacity change from 0 to 512 [ 545.323581][T31455] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 545.336362][T31455] EXT4-fs (loop2): 1 truncate cleaned up [ 545.384439][T31477] loop4: detected capacity change from 0 to 256 [ 545.411114][T31470] loop3: detected capacity change from 0 to 256 [ 545.457381][T31486] loop2: detected capacity change from 0 to 1024 [ 545.464108][T31486] EXT4-fs: Ignoring removed orlov option [ 545.481429][T31490] loop4: detected capacity change from 0 to 512 [ 545.502595][T31490] EXT4-fs (loop4): 1 orphan inode deleted [ 545.509077][T31490] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.522934][T16199] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 545.536261][T31490] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 545.725630][T31502] loop2: detected capacity change from 0 to 1024 [ 545.732769][T31502] EXT4-fs: Ignoring removed orlov option [ 546.197412][T31510] 9pnet_virtio: no channels available for device 127.0.0.1 [ 546.206924][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 546.206938][ T29] audit: type=1326 audit(1750823192.838:30301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.243011][T31510] loop1: detected capacity change from 0 to 256 [ 546.258651][ T29] audit: type=1326 audit(1750823192.868:30302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.282372][ T29] audit: type=1326 audit(1750823192.868:30303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.306008][ T29] audit: type=1326 audit(1750823192.868:30304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.329758][ T29] audit: type=1326 audit(1750823192.868:30305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.353520][ T29] audit: type=1326 audit(1750823192.868:30306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.376999][ T29] audit: type=1326 audit(1750823192.868:30307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.400866][ T29] audit: type=1326 audit(1750823192.868:30308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.402404][T31523] loop0: detected capacity change from 0 to 256 [ 546.424359][ T29] audit: type=1326 audit(1750823192.868:30309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.424387][ T29] audit: type=1326 audit(1750823192.868:30310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 546.519737][T31522] loop2: detected capacity change from 0 to 512 [ 546.532879][T31522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 546.568907][T31522] EXT4-fs (loop2): 1 truncate cleaned up [ 546.589740][T31531] loop4: detected capacity change from 0 to 512 [ 546.600464][T31531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.629418][T31531] EXT4-fs (loop4): orphan cleanup on readonly fs [ 546.663934][T31539] loop1: detected capacity change from 0 to 256 [ 546.689859][T31531] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8945: Failed to acquire dquot type 1 [ 546.712497][T31546] loop2: detected capacity change from 0 to 512 [ 546.721775][T31546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.741823][T31531] EXT4-fs (loop4): 1 truncate cleaned up [ 546.766649][T31546] EXT4-fs (loop2): orphan cleanup on readonly fs [ 546.783922][T31546] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8947: Failed to acquire dquot type 1 [ 546.796705][T31531] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 546.814819][T31556] loop1: detected capacity change from 0 to 1024 [ 546.820693][T31540] lo speed is unknown, defaulting to 1000 [ 546.828805][T31546] EXT4-fs (loop2): 1 truncate cleaned up [ 546.835190][T31556] EXT4-fs: Ignoring removed orlov option [ 546.846700][T31546] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 546.891396][T31540] chnl_net:caif_netlink_parms(): no params data found [ 546.941458][T31540] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.948556][T31540] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.956319][T31540] bridge_slave_0: entered allmulticast mode [ 546.963031][T31540] bridge_slave_0: entered promiscuous mode [ 546.970278][T31540] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.977514][T31540] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.984838][T31540] bridge_slave_1: entered allmulticast mode [ 546.991391][T31540] bridge_slave_1: entered promiscuous mode [ 547.010167][T31540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.020849][T31540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.042045][T31540] team0: Port device team_slave_0 added [ 547.048866][T31540] team0: Port device team_slave_1 added [ 547.066970][T31540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.074026][T31540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.100093][T31540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.111382][T31540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.118321][T31540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.144369][T31540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.162529][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.184761][T31571] loop1: detected capacity change from 0 to 1024 [ 547.191507][T31571] EXT4-fs: Ignoring removed orlov option [ 547.200702][T31540] hsr_slave_0: entered promiscuous mode [ 547.207136][T31540] hsr_slave_1: entered promiscuous mode [ 547.213125][T31540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.220754][T31540] Cannot create hsr debugfs directory [ 547.228421][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.274975][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.333786][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.393454][T31531] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 547.393454][T31531] [ 547.427575][ T31] bridge_slave_1: left allmulticast mode [ 547.433314][ T31] bridge_slave_1: left promiscuous mode [ 547.438982][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.447105][ T31] bridge_slave_0: left allmulticast mode [ 547.452807][ T31] bridge_slave_0: left promiscuous mode [ 547.458547][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.524162][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.533832][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.543331][T31546] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 547.543331][T31546] [ 547.543504][ T31] bond0 (unregistering): Released all slaves [ 547.624894][ T31] hsr_slave_0: left promiscuous mode [ 547.630677][ T31] hsr_slave_1: left promiscuous mode [ 547.638228][ T31] veth1_macvtap: left promiscuous mode [ 547.643962][ T31] veth0_macvtap: left promiscuous mode [ 547.649463][ T31] veth1_vlan: left promiscuous mode [ 547.654860][ T31] veth0_vlan: left promiscuous mode [ 547.755609][ T31] team0 (unregistering): Port device team_slave_1 removed [ 547.766184][ T31] team0 (unregistering): Port device team_slave_0 removed [ 547.838720][T31586] loop2: detected capacity change from 0 to 512 [ 547.845454][T31586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 547.856742][T31586] EXT4-fs (loop2): 1 truncate cleaned up [ 548.023069][T31540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 548.031706][T31540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 548.040533][T31540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 548.049308][T31540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 548.085456][T31540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.096531][T31540] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.105802][T16199] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.112865][T16199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.123926][T16199] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.131067][T16199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.186361][T31540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.239997][T31540] veth0_vlan: entered promiscuous mode [ 548.247618][T31540] veth1_vlan: entered promiscuous mode [ 548.262168][T31540] veth0_macvtap: entered promiscuous mode [ 548.269021][T31540] veth1_macvtap: entered promiscuous mode [ 548.279014][T31540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.289524][T31540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.298844][T31540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.307738][T31540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.316554][T31540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.325366][T31540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.370639][T31606] 9pnet_virtio: no channels available for device 127.0.0.1 [ 548.396066][T31606] loop1: detected capacity change from 0 to 256 [ 548.431390][T31611] loop0: detected capacity change from 0 to 256 [ 549.276854][T31626] siw: device registration error -23 [ 549.360336][T31628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8962'. [ 549.458699][T31628] loop3: detected capacity change from 0 to 512 [ 549.479597][T31628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 549.491119][T31628] EXT4-fs (loop3): orphan cleanup on readonly fs [ 549.497829][T31628] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8962: Failed to acquire dquot type 1 [ 549.510439][T31628] EXT4-fs (loop3): 1 truncate cleaned up [ 549.517497][T31628] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 550.250740][T31628] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 550.250740][T31628] [ 550.518834][T31644] loop0: detected capacity change from 0 to 512 [ 550.526554][T31644] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 550.546169][T31648] loop1: detected capacity change from 0 to 512 [ 550.555361][T31648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 550.576419][T31644] EXT4-fs (loop0): 1 truncate cleaned up [ 550.576537][T31648] EXT4-fs (loop1): 1 truncate cleaned up [ 550.592506][T31639] loop4: detected capacity change from 0 to 512 [ 550.630010][T31639] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 550.655008][T31638] loop2: detected capacity change from 0 to 512 [ 550.673596][T31639] EXT4-fs (loop4): 1 truncate cleaned up [ 550.693921][T31638] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 550.705955][T31638] EXT4-fs (loop2): 1 truncate cleaned up [ 550.828595][T31657] loop0: detected capacity change from 0 to 1024 [ 550.870190][T31657] EXT4-fs: Ignoring removed orlov option [ 551.066571][T31663] loop1: detected capacity change from 0 to 512 [ 551.073632][T31663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 551.090837][T31663] EXT4-fs (loop1): 1 truncate cleaned up [ 551.177382][T31676] loop1: detected capacity change from 0 to 128 [ 551.191589][T31676] EXT4-fs: test_dummy_encryption option not supported [ 551.414388][T31687] loop4: detected capacity change from 0 to 512 [ 551.421775][T31687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 551.433424][T31687] EXT4-fs (loop4): 1 truncate cleaned up [ 551.536011][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 551.536023][ T29] audit: type=1326 audit(1750823198.168:30471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.584462][T31686] loop2: detected capacity change from 0 to 256 [ 551.629417][T31697] loop3: detected capacity change from 0 to 512 [ 551.650161][ T29] audit: type=1326 audit(1750823198.198:30472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.673874][ T29] audit: type=1326 audit(1750823198.198:30473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.697476][ T29] audit: type=1326 audit(1750823198.198:30474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.702620][T31697] EXT4-fs (loop3): 1 orphan inode deleted [ 551.721107][ T29] audit: type=1326 audit(1750823198.198:30475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.721137][ T29] audit: type=1326 audit(1750823198.198:30476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.721160][ T29] audit: type=1326 audit(1750823198.198:30477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.727078][ T31] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 551.750523][ T29] audit: type=1326 audit(1750823198.198:30478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.774022][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 551.777061][T31697] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.797671][ T29] audit: type=1326 audit(1750823198.198:30479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31680 comm="syz.2.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 551.853021][T31705] loop0: detected capacity change from 0 to 1024 [ 551.900734][T31705] EXT4-fs: Ignoring removed orlov option [ 551.932148][T31711] loop3: detected capacity change from 0 to 512 [ 551.991946][T31714] loop2: detected capacity change from 0 to 128 [ 551.998753][T31714] EXT4-fs: test_dummy_encryption option not supported [ 552.009232][T31711] EXT4-fs (loop3): 1 orphan inode deleted [ 552.025334][T31711] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.036061][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 552.096138][T31726] loop2: detected capacity change from 0 to 1024 [ 552.119340][T31726] EXT4-fs: Ignoring removed orlov option [ 552.136813][T31719] loop1: detected capacity change from 0 to 512 [ 552.143979][T31719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 552.158174][T31719] EXT4-fs (loop1): 1 truncate cleaned up [ 552.303961][T31742] loop1: detected capacity change from 0 to 128 [ 552.328703][T31742] EXT4-fs: test_dummy_encryption option not supported [ 552.391037][T31745] loop1: detected capacity change from 0 to 128 [ 552.410692][T31745] vfat: Unknown parameter 'ceph' [ 552.419307][T31749] loop3: detected capacity change from 0 to 128 [ 552.430047][T31751] dvmrp1: entered allmulticast mode [ 552.440983][T31751] dvmrp1: left allmulticast mode [ 552.446248][T31749] ext4 filesystem being mounted at /517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 552.881275][T31756] loop1: detected capacity change from 0 to 1024 [ 552.896577][T31756] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 552.907590][T31756] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 552.953497][T31756] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 552.996559][T31756] EXT4-fs (loop1): invalid journal inode [ 553.007728][T31756] EXT4-fs (loop1): can't get journal size [ 553.020874][T31760] netlink: 312 bytes leftover after parsing attributes in process `syz.3.8994'. [ 553.031355][T31756] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.8995: blocks 2-2 from inode overlap system zone [ 553.053364][T31756] EXT4-fs (loop1): failed to initialize system zone (-117) [ 553.064124][T31756] EXT4-fs (loop1): mount failed [ 553.106189][T31759] loop2: detected capacity change from 0 to 256 [ 553.286121][T31774] loop1: detected capacity change from 0 to 512 [ 553.293019][T31774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 553.303513][T31768] loop3: detected capacity change from 0 to 256 [ 553.304861][T31774] EXT4-fs (loop1): 1 truncate cleaned up [ 553.323347][T31779] loop2: detected capacity change from 0 to 1024 [ 553.352025][T31779] EXT4-fs: Ignoring removed orlov option [ 553.366887][T31784] loop3: detected capacity change from 0 to 128 [ 553.373711][T31784] EXT4-fs: test_dummy_encryption option not supported [ 553.447608][T31783] loop4: detected capacity change from 0 to 512 [ 553.460968][T31783] ext4: Unknown parameter 'appraise_type' [ 553.515841][T31790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9002'. [ 553.584170][T31791] loop3: detected capacity change from 0 to 512 [ 553.601564][T31791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.614946][T31791] EXT4-fs (loop3): orphan cleanup on readonly fs [ 553.626730][T31793] loop2: detected capacity change from 0 to 256 [ 553.639182][T31791] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9002: Failed to acquire dquot type 1 [ 553.659227][T31791] EXT4-fs (loop3): 1 truncate cleaned up [ 553.677286][T31790] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 553.679010][T31797] 9pnet_virtio: no channels available for device 127.0.0.1 [ 553.703973][T31797] loop4: detected capacity change from 0 to 256 [ 553.732614][T31802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9006'. [ 553.898782][T31805] loop2: detected capacity change from 0 to 512 [ 553.905558][T31805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 553.916537][T31805] EXT4-fs (loop2): 1 truncate cleaned up [ 553.922910][T31805] EXT4-fs mount: 127 callbacks suppressed [ 553.922923][T31805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.054466][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.346667][T31790] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 554.346667][T31790] [ 554.370781][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 554.487714][T31823] loop3: detected capacity change from 0 to 1024 [ 554.495530][T31823] EXT4-fs: Ignoring removed orlov option [ 554.503039][T31823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.575985][T31826] siw: device registration error -23 [ 554.584211][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.883026][T31834] loop2: detected capacity change from 0 to 512 [ 554.891275][T31834] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 554.989949][T31834] EXT4-fs (loop2): 1 truncate cleaned up [ 554.996741][T31834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.191285][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.245736][T31839] FAULT_INJECTION: forcing a failure. [ 555.245736][T31839] name failslab, interval 1, probability 0, space 0, times 0 [ 555.258402][T31839] CPU: 1 UID: 0 PID: 31839 Comm: syz.3.9017 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 555.258432][T31839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.258446][T31839] Call Trace: [ 555.258461][T31839] [ 555.258469][T31839] __dump_stack+0x1d/0x30 [ 555.258492][T31839] dump_stack_lvl+0xe8/0x140 [ 555.258514][T31839] dump_stack+0x15/0x1b [ 555.258532][T31839] should_fail_ex+0x265/0x280 [ 555.258578][T31839] should_failslab+0x8c/0xb0 [ 555.258603][T31839] kmem_cache_alloc_node_noprof+0x57/0x320 [ 555.258631][T31839] ? __alloc_skb+0x101/0x320 [ 555.258658][T31839] __alloc_skb+0x101/0x320 [ 555.258687][T31839] alloc_skb_with_frags+0x7d/0x470 [ 555.258743][T31839] ? plist_check_list+0x1e4/0x210 [ 555.258797][T31839] ? perf_cgroup_switch+0x138/0x480 [ 555.258837][T31839] ? ref_tracker_alloc+0x1f2/0x2f0 [ 555.258869][T31839] sock_alloc_send_pskb+0x43a/0x4f0 [ 555.258891][T31839] ? __rcu_read_unlock+0x4f/0x70 [ 555.258910][T31839] ? __rcu_read_unlock+0x4f/0x70 [ 555.258975][T31839] packet_sendmsg+0x225b/0x3240 [ 555.259000][T31839] ? __rcu_read_unlock+0x4f/0x70 [ 555.259032][T31839] ? avc_has_perm+0xd3/0x150 [ 555.259113][T31839] ? selinux_socket_sendmsg+0x175/0x1b0 [ 555.259153][T31839] ? __pfx_packet_sendmsg+0x10/0x10 [ 555.259233][T31839] __sock_sendmsg+0x142/0x180 [ 555.259259][T31839] __sys_sendto+0x268/0x330 [ 555.259294][T31839] __x64_sys_sendto+0x76/0x90 [ 555.259380][T31839] x64_sys_call+0x2eb6/0x2fb0 [ 555.259398][T31839] do_syscall_64+0xd2/0x200 [ 555.259414][T31839] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 555.259445][T31839] ? clear_bhb_loop+0x40/0x90 [ 555.259465][T31839] ? clear_bhb_loop+0x40/0x90 [ 555.259489][T31839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.259600][T31839] RIP: 0033:0x7f1b9a82e929 [ 555.259620][T31839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.259639][T31839] RSP: 002b:00007f1b98e97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 555.259660][T31839] RAX: ffffffffffffffda RBX: 00007f1b9aa55fa0 RCX: 00007f1b9a82e929 [ 555.259674][T31839] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000005 [ 555.259744][T31839] RBP: 00007f1b98e97090 R08: 0000200000000200 R09: 0000000000000014 [ 555.259758][T31839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.259771][T31839] R13: 0000000000000000 R14: 00007f1b9aa55fa0 R15: 00007ffeeeeea148 [ 555.259841][T31839] [ 555.656268][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.704345][T31857] loop0: detected capacity change from 0 to 512 [ 555.712145][T31857] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 555.726513][T31857] EXT4-fs (loop0): 1 truncate cleaned up [ 555.732788][T31857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.748591][T31847] loop3: detected capacity change from 0 to 512 [ 555.772159][T31847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.784930][T31864] loop1: detected capacity change from 0 to 256 [ 555.794891][T31847] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.805648][T31865] loop4: detected capacity change from 0 to 256 [ 555.867344][T31877] FAULT_INJECTION: forcing a failure. [ 555.867344][T31877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.880574][T31877] CPU: 0 UID: 0 PID: 31877 Comm: syz.1.9025 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 555.880678][T31877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.880690][T31877] Call Trace: [ 555.880695][T31877] [ 555.880702][T31877] __dump_stack+0x1d/0x30 [ 555.880720][T31877] dump_stack_lvl+0xe8/0x140 [ 555.880776][T31877] dump_stack+0x15/0x1b [ 555.880790][T31877] should_fail_ex+0x265/0x280 [ 555.880816][T31877] should_fail+0xb/0x20 [ 555.880840][T31877] should_fail_usercopy+0x1a/0x20 [ 555.880923][T31877] _copy_from_user+0x1c/0xb0 [ 555.880943][T31877] __sys_sendto+0x19e/0x330 [ 555.881033][T31877] __x64_sys_sendto+0x76/0x90 [ 555.881058][T31877] x64_sys_call+0x2eb6/0x2fb0 [ 555.881141][T31877] do_syscall_64+0xd2/0x200 [ 555.881157][T31877] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 555.881182][T31877] ? clear_bhb_loop+0x40/0x90 [ 555.881202][T31877] ? clear_bhb_loop+0x40/0x90 [ 555.881300][T31877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.881323][T31877] RIP: 0033:0x7f6ea58fe929 [ 555.881341][T31877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.881386][T31877] RSP: 002b:00007f6ea3f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 555.881406][T31877] RAX: ffffffffffffffda RBX: 00007f6ea5b25fa0 RCX: 00007f6ea58fe929 [ 555.881424][T31877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 555.881437][T31877] RBP: 00007f6ea3f67090 R08: 0000200000000100 R09: 0000000000000010 [ 555.881450][T31877] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 555.881464][T31877] R13: 0000000000000000 R14: 00007f6ea5b25fa0 R15: 00007ffe5e83c7b8 [ 555.881563][T31877] [ 556.073928][T31883] loop2: detected capacity change from 0 to 256 [ 556.095247][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.360764][T31904] siw: device registration error -23 [ 556.476325][T31540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.568118][T31908] siw: device registration error -23 [ 556.645073][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 556.651317][ T29] audit: type=1326 audit(1750823203.278:30780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bcb7e929 code=0x7ffc0000 [ 556.677370][ T29] audit: type=1326 audit(1750823203.308:30781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc1bcb7e929 code=0x7ffc0000 [ 556.757401][T31914] loop0: detected capacity change from 0 to 128 [ 556.799873][ T29] audit: type=1326 audit(1750823203.308:30782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1bcb7e963 code=0x7ffc0000 [ 556.823446][ T29] audit: type=1326 audit(1750823203.308:30783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc1bcb7d3df code=0x7ffc0000 [ 556.846873][ T29] audit: type=1326 audit(1750823203.308:30784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc1bcb7e9b7 code=0x7ffc0000 [ 556.870482][ T29] audit: type=1326 audit(1750823203.388:30785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1bcb7d290 code=0x7ffc0000 [ 556.894178][ T29] audit: type=1326 audit(1750823203.388:30786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1bcb7e52b code=0x7ffc0000 [ 556.917797][ T29] audit: type=1326 audit(1750823203.418:30787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1bcb7d58a code=0x7ffc0000 [ 556.941217][ T29] audit: type=1326 audit(1750823203.418:30788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1bcb7d58a code=0x7ffc0000 [ 556.964734][ T29] audit: type=1326 audit(1750823203.418:30789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31913 comm="syz.0.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc1bcb7d197 code=0x7ffc0000 [ 557.045656][T31919] 9pnet_virtio: no channels available for device 127.0.0.1 [ 557.058560][T31923] ipvlan2: entered promiscuous mode [ 557.065571][T31919] loop1: detected capacity change from 0 to 256 [ 557.066541][T31923] bridge0: port 3(ipvlan2) entered blocking state [ 557.078681][T31923] bridge0: port 3(ipvlan2) entered disabled state [ 557.090020][T31923] ipvlan2: entered allmulticast mode [ 557.095341][T31923] bridge0: entered allmulticast mode [ 557.101272][T31923] ipvlan2: left allmulticast mode [ 557.106341][T31923] bridge0: left allmulticast mode [ 557.140713][T31926] loop0: detected capacity change from 0 to 128 [ 557.156142][T31926] FAULT_INJECTION: forcing a failure. [ 557.156142][T31926] name failslab, interval 1, probability 0, space 0, times 0 [ 557.168880][T31926] CPU: 1 UID: 0 PID: 31926 Comm: syz.0.9039 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 557.168933][T31926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.168948][T31926] Call Trace: [ 557.168957][T31926] [ 557.169023][T31926] __dump_stack+0x1d/0x30 [ 557.169042][T31926] dump_stack_lvl+0xe8/0x140 [ 557.169063][T31926] dump_stack+0x15/0x1b [ 557.169081][T31926] should_fail_ex+0x265/0x280 [ 557.169114][T31926] should_failslab+0x8c/0xb0 [ 557.169219][T31926] kmem_cache_alloc_noprof+0x50/0x310 [ 557.169246][T31926] ? audit_log_start+0x365/0x6c0 [ 557.169344][T31926] audit_log_start+0x365/0x6c0 [ 557.169373][T31926] audit_seccomp+0x48/0x100 [ 557.169398][T31926] ? __seccomp_filter+0x68c/0x10d0 [ 557.169424][T31926] __seccomp_filter+0x69d/0x10d0 [ 557.169509][T31926] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 557.169541][T31926] ? vfs_write+0x75e/0x8e0 [ 557.169568][T31926] ? __rcu_read_unlock+0x4f/0x70 [ 557.169611][T31926] ? __fget_files+0x184/0x1c0 [ 557.169649][T31926] __secure_computing+0x82/0x150 [ 557.169674][T31926] syscall_trace_enter+0xcf/0x1e0 [ 557.169701][T31926] do_syscall_64+0xac/0x200 [ 557.169717][T31926] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 557.169778][T31926] ? clear_bhb_loop+0x40/0x90 [ 557.169802][T31926] ? clear_bhb_loop+0x40/0x90 [ 557.169824][T31926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.169904][T31926] RIP: 0033:0x7fc1bcb7e929 [ 557.170035][T31926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.170050][T31926] RSP: 002b:00007fc1bb1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 557.170130][T31926] RAX: ffffffffffffffda RBX: 00007fc1bcda5fa0 RCX: 00007fc1bcb7e929 [ 557.170144][T31926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 557.170156][T31926] RBP: 00007fc1bb1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 557.170166][T31926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.170177][T31926] R13: 0000000000000000 R14: 00007fc1bcda5fa0 R15: 00007fff37e6a218 [ 557.170229][T31926] [ 557.439003][T31935] loop0: detected capacity change from 0 to 128 [ 557.445757][T31935] EXT4-fs: test_dummy_encryption option not supported [ 557.531883][T31940] loop1: detected capacity change from 0 to 512 [ 557.541845][T31940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.554612][T31940] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.572482][T31940] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.9045: iget: bad i_size value: 2533274857506816 [ 557.609689][T31946] loop2: detected capacity change from 0 to 512 [ 557.616618][T31946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 557.654946][T31940] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.9045: iget: bad i_size value: 2533274857506816 [ 557.668046][T31946] EXT4-fs (loop2): 1 truncate cleaned up [ 557.674192][T31946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.719516][T31956] netlink: 'syz.0.9050': attribute type 1 has an invalid length. [ 557.765766][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.776892][T31957] siw: device registration error -23 [ 557.906851][T31961] netlink: 'syz.0.9053': attribute type 30 has an invalid length. [ 557.917398][T31961] atomic_op ffff888104693d28 conn xmit_atomic 0000000000000000 [ 557.961510][T31963] loop0: detected capacity change from 0 to 128 [ 557.968490][T31963] EXT4-fs: test_dummy_encryption option not supported [ 558.076683][T31967] loop0: detected capacity change from 0 to 128 [ 558.083465][T31967] EXT4-fs: test_dummy_encryption option not supported [ 558.276386][T31972] siw: device registration error -23 [ 558.354802][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.468639][T31978] loop2: detected capacity change from 0 to 256 [ 558.640105][T31989] loop2: detected capacity change from 0 to 512 [ 558.646989][T31989] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 558.658662][T31989] EXT4-fs (loop2): 1 truncate cleaned up [ 558.664902][T31989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.755420][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.757353][T31994] loop3: detected capacity change from 0 to 128 [ 558.771493][T31994] EXT4-fs: test_dummy_encryption option not supported [ 558.791504][T31996] loop2: detected capacity change from 0 to 1024 [ 558.803841][T31996] EXT4-fs: Ignoring removed orlov option [ 558.831643][T31996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.862621][T31999] netlink: 'syz.3.9063': attribute type 3 has an invalid length. [ 559.012924][T32012] loop1: detected capacity change from 0 to 1024 [ 559.026927][T32005] cgroup: fork rejected by pids controller in /syz3 [ 559.033961][T32012] EXT4-fs: Ignoring removed orlov option [ 559.055949][T32012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.141963][T32015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9067'. [ 559.281457][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.296228][T32128] loop4: detected capacity change from 0 to 256 [ 559.423034][T32136] loop2: detected capacity change from 0 to 512 [ 559.432185][T32136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.442633][T32137] siw: device registration error -23 [ 559.477889][T32136] EXT4-fs (loop2): orphan cleanup on readonly fs [ 559.556008][T32136] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.9071: Failed to acquire dquot type 1 [ 559.596605][T32136] EXT4-fs (loop2): 1 truncate cleaned up [ 559.711367][T32142] loop3: detected capacity change from 0 to 512 [ 559.754247][T32142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.855439][T32142] EXT4-fs (loop3): orphan cleanup on readonly fs [ 559.865907][T32136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 559.879849][T32136] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 559.902330][T32142] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9073: Failed to acquire dquot type 1 [ 559.923165][T32142] EXT4-fs (loop3): 1 truncate cleaned up [ 559.929416][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.939217][T32142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 559.966277][T32142] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 560.004906][T32148] 9pnet_virtio: no channels available for device 127.0.0.1 [ 560.039738][T32148] loop1: detected capacity change from 0 to 256 [ 560.072062][T32142] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 560.072062][T32142] [ 560.231772][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 560.251226][T32136] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 560.251226][T32136] [ 560.282246][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 560.404569][T32285] siw: device registration error -23 [ 560.545685][T32375] siw: device registration error -23 [ 560.682687][T32379] loop0: detected capacity change from 0 to 512 [ 560.724959][T32379] EXT4-fs (loop0): 1 orphan inode deleted [ 560.731627][T32379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.806633][T32379] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.837258][T16205] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 560.913694][T31540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.936109][T32488] loop4: detected capacity change from 0 to 512 [ 560.946601][T32488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 560.965553][T32488] EXT4-fs (loop4): orphan cleanup on readonly fs [ 560.979234][T32493] loop3: detected capacity change from 0 to 512 [ 560.986883][T32488] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9088: Failed to acquire dquot type 1 [ 560.999756][T32493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 561.039613][T32488] EXT4-fs (loop4): 1 truncate cleaned up [ 561.050370][T32488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 561.113457][T32488] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 561.146906][T32493] EXT4-fs (loop3): orphan cleanup on readonly fs [ 561.155189][T32497] 9pnet_virtio: no channels available for device 127.0.0.1 [ 561.261748][T32497] loop0: detected capacity change from 0 to 256 [ 561.272269][T32504] loop1: detected capacity change from 0 to 1024 [ 561.292891][T32493] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9089: Failed to acquire dquot type 1 [ 561.308413][T32504] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 561.320387][T32493] EXT4-fs (loop3): 1 truncate cleaned up [ 561.327756][T32504] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.9093: lblock 1 mapped to illegal pblock 1 (length 1) [ 561.348230][T32493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 561.361627][T32504] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9093: Failed to acquire dquot type 0 [ 561.374720][T32504] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.9093: Freeing blocks not in datazone - block = 0, count = 4096 [ 561.389956][T32504] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.9093: Invalid inode bitmap blk 0 in block_group 0 [ 561.403716][T32504] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 561.412422][T32493] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 561.429919][T16191] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 561.445068][T32504] EXT4-fs (loop1): 1 orphan inode deleted [ 561.454690][T32504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.465638][T16191] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 561.494045][T32517] loop0: detected capacity change from 0 to 128 [ 561.500682][T32517] EXT4-fs: test_dummy_encryption option not supported [ 561.558746][T32523] loop0: detected capacity change from 0 to 128 [ 561.565965][T32523] EXT4-fs: test_dummy_encryption option not supported [ 561.659959][T32524] loop2: detected capacity change from 0 to 512 [ 561.666714][T32524] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 561.677957][T32524] EXT4-fs (loop2): 1 truncate cleaned up [ 561.683991][T32524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.764825][T32488] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 561.764825][T32488] [ 561.786652][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 561.797922][T32493] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 561.797922][T32493] [ 561.819090][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 561.866505][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.902939][T32535] netlink: 'syz.4.9102': attribute type 10 has an invalid length. [ 561.910876][T32535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9102'. [ 561.970612][T32535] dummy0: entered promiscuous mode [ 561.976284][T32535] bridge0: port 3(dummy0) entered blocking state [ 561.982932][T32535] bridge0: port 3(dummy0) entered disabled state [ 561.989472][T32535] dummy0: entered allmulticast mode [ 561.995620][T32535] bridge0: port 3(dummy0) entered blocking state [ 562.002045][T32535] bridge0: port 3(dummy0) entered forwarding state [ 562.029499][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.049056][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 562.049071][ T29] audit: type=1326 audit(1750823208.678:31211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.079235][ T29] audit: type=1326 audit(1750823208.678:31212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.102960][ T29] audit: type=1326 audit(1750823208.678:31213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.126640][ T29] audit: type=1326 audit(1750823208.678:31214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.150308][ T29] audit: type=1326 audit(1750823208.678:31215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.151799][T32547] syzkaller1: entered promiscuous mode [ 562.173944][ T29] audit: type=1326 audit(1750823208.678:31216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.173974][ T29] audit: type=1326 audit(1750823208.678:31217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.179414][T32547] syzkaller1: entered allmulticast mode [ 562.232267][ T29] audit: type=1326 audit(1750823208.678:31218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.256703][ T29] audit: type=1326 audit(1750823208.678:31219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.280656][ T29] audit: type=1326 audit(1750823208.678:31220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32545 comm="syz.1.9106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea58fe929 code=0x7ffc0000 [ 562.407670][T32552] loop1: detected capacity change from 0 to 256 [ 562.550195][T32566] loop1: detected capacity change from 0 to 512 [ 562.557058][T32566] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 562.568178][T32566] EXT4-fs (loop1): 1 truncate cleaned up [ 562.574148][T32566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.643667][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.665824][T32573] loop1: detected capacity change from 0 to 512 [ 562.673562][T32573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 562.682685][T32573] EXT4-fs (loop1): orphan cleanup on readonly fs [ 562.689598][T32573] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9113: Failed to acquire dquot type 1 [ 562.701607][T32573] EXT4-fs (loop1): 1 truncate cleaned up [ 562.707691][T32573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 562.721702][T32573] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 562.798804][T32578] loop2: detected capacity change from 0 to 256 [ 562.857082][T32595] loop3: detected capacity change from 0 to 512 [ 562.873427][T32595] EXT4-fs (loop3): 1 orphan inode deleted [ 562.879762][T32595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.894350][T16191] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 562.894990][T32589] loop2: detected capacity change from 0 to 256 [ 562.908189][T32595] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.932105][T32595] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 562.950736][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.010832][T32605] loop2: detected capacity change from 0 to 256 [ 563.051770][T32617] loop2: detected capacity change from 0 to 1024 [ 563.058343][T32617] EXT4-fs: Ignoring removed orlov option [ 563.066919][T32617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.261996][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.327913][T32625] loop2: detected capacity change from 0 to 256 [ 563.363763][T32635] loop2: detected capacity change from 0 to 512 [ 563.370888][T32635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 563.382026][T32635] EXT4-fs (loop2): 1 truncate cleaned up [ 563.387892][T32635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.429371][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.491576][T32573] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 563.491576][T32573] [ 563.512178][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 563.710172][T32650] siw: device registration error -23 [ 563.958533][T32653] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 564.172982][T32656] loop3: detected capacity change from 0 to 512 [ 564.179774][T32656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 564.190841][T32656] EXT4-fs (loop3): 1 truncate cleaned up [ 564.196812][T32656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.648174][T32665] siw: device registration error -23 [ 564.933760][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.962220][T32669] loop1: detected capacity change from 0 to 1024 [ 564.969290][T32669] EXT4-fs: Ignoring removed orlov option [ 564.998745][T32669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.222877][T32681] 9pnet_virtio: no channels available for device 127.0.0.1 [ 565.246615][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.314345][T32687] loop1: detected capacity change from 0 to 1024 [ 565.321813][T32687] EXT4-fs: Ignoring removed orlov option [ 565.329639][T32687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.547230][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.611979][T32701] loop1: detected capacity change from 0 to 512 [ 565.618869][T32701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 565.628198][T32701] EXT4-fs (loop1): orphan cleanup on readonly fs [ 565.635081][T32701] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9145: Failed to acquire dquot type 1 [ 565.647354][T32701] EXT4-fs (loop1): 1 truncate cleaned up [ 565.653906][T32701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 565.674938][T32701] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 565.704190][T32703] siw: device registration error -23 [ 566.168892][T32719] loop2: detected capacity change from 0 to 1024 [ 566.176795][T32719] EXT4-fs: Ignoring removed orlov option [ 566.184592][T32719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.230257][T32726] loop3: detected capacity change from 0 to 512 [ 566.237123][T32726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 566.248597][T32726] EXT4-fs (loop3): 1 truncate cleaned up [ 566.254780][T32726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.411499][T32730] loop4: detected capacity change from 0 to 512 [ 566.422619][T32730] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 566.436309][T20887] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.542885][T32701] EXT4-fs warning (device loop1): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 566.542885][T32701] [ 566.558054][T32730] EXT4-fs (loop4): 1 truncate cleaned up [ 566.564063][T32730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.577972][T31264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 566.643761][T32735] siw: device registration error -23 [ 566.759125][T30743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.021882][T20550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.048116][T32757] loop2: detected capacity change from 0 to 256 [ 567.056891][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 567.056905][ T29] audit: type=1404 audit(1750823213.688:31593): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 567.078888][ T29] audit: type=1326 audit(1750823213.688:31594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32744 comm="syz.2.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f01cbf5d58a code=0x7ffc0000 [ 567.102413][ T29] audit: type=1326 audit(1750823213.688:31595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32744 comm="syz.2.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f01cbf5d58a code=0x7ffc0000 [ 567.125951][ T29] audit: type=1326 audit(1750823213.688:31596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32744 comm="syz.2.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f01cbf5d197 code=0x7ffc0000 [ 567.149562][ T29] audit: type=1326 audit(1750823213.688:31597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32744 comm="syz.2.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f01cbf600ca code=0x7ffc0000 [ 567.173409][ T29] audit: type=1400 audit(1750823213.688:31598): avc: denied { mounton } for pid=32744 comm="syz.2.9156" path="/73/file0" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 567.196181][ T29] audit: type=1326 audit(1750823213.688:31599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32744 comm="syz.2.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01cbf5d290 code=0x7ffc0000 [ 567.219883][ T29] audit: type=1400 audit(1750823213.688:31600): avc: denied { read write } for pid=32744 comm="syz.2.9156" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 567.245356][ T29] audit: type=1326 audit(1750823213.688:31601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32744 comm="syz.2.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 567.269134][ T29] audit: type=1326 audit(1750823213.688:31602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32744 comm="syz.2.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cbf5e929 code=0x7ffc0000 [ 568.076596][T16205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.153548][T16205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.232834][T16205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.321951][T16205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.385506][T16205] dummy0: left allmulticast mode [ 568.391732][T16205] bridge0: port 3(dummy0) entered disabled state [ 568.398653][T16205] bridge_slave_1: left allmulticast mode [ 568.404417][T16205] bridge_slave_1: left promiscuous mode [ 568.410084][T16205] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.423972][T16205] bridge_slave_0: left allmulticast mode [ 568.429687][T16205] bridge_slave_0: left promiscuous mode [ 568.435826][T16205] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.541476][T16205] bond0 (unregistering): left allmulticast mode [ 568.547806][T16205] bond_slave_0: left allmulticast mode [ 568.553317][T16205] bond_slave_1: left allmulticast mode [ 568.558830][T16205] bond0 (unregistering): left promiscuous mode [ 568.565172][T16205] bond_slave_0: left promiscuous mode [ 568.570616][T16205] bond_slave_1: left promiscuous mode [ 568.580725][T16205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.592905][T16205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.613586][T16205] bond0 (unregistering): Released all slaves [ 568.668667][T16205] hsr_slave_0: left promiscuous mode [ 568.678125][T16205] hsr_slave_1: left promiscuous mode [ 568.692820][T16205] veth1_macvtap: left promiscuous mode [ 568.698452][T16205] veth0_macvtap: left promiscuous mode [ 568.704407][T16205] veth1_vlan: left promiscuous mode [ 568.709717][T16205] veth0_vlan: left promiscuous mode [ 568.855436][T16205] team0 (unregistering): Port device team_slave_1 removed [ 568.866347][T16205] team0 (unregistering): Port device team_slave_0 removed [ 572.784991][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 572.785006][ T29] audit: type=1400 audit(1750823219.418:31950): avc: denied { execmem } for pid=380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 572.812147][ T29] audit: type=1400 audit(1750823219.428:31951): avc: denied { map_create } for pid=381 comm="syz.1.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 572.831426][ T29] audit: type=1400 audit(1750823219.448:31952): avc: denied { prog_load } for pid=381 comm="syz.1.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 572.850688][ T29] audit: type=1400 audit(1750823219.448:31953): avc: denied { prog_load } for pid=382 comm="syz.0.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 572.869849][ T29] audit: type=1400 audit(1750823219.468:31954): avc: denied { create } for pid=382 comm="syz.0.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 572.889471][ T29] audit: type=1400 audit(1750823219.468:31955): avc: denied { create } for pid=382 comm="syz.0.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=0 [ 572.909734][ T29] audit: type=1400 audit(1750823219.468:31956): avc: denied { prog_load } for pid=382 comm="syz.0.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 572.928800][ T29] audit: type=1400 audit(1750823219.488:31957): avc: denied { prog_load } for pid=385 comm="syz.2.9189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 572.948002][ T29] audit: type=1400 audit(1750823219.488:31958): avc: denied { prog_load } for pid=381 comm="syz.1.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 572.967152][ T29] audit: type=1400 audit(1750823219.488:31959): avc: denied { create } for pid=381 comm="syz.1.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 576.579932][ T420] ================================================================== [ 576.588051][ T420] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 576.595358][ T420] [ 576.597683][ T420] read to 0xffff8881248840f0 of 4 bytes by task 424 on cpu 0: [ 576.605137][ T420] atime_needs_update+0x25f/0x3e0 [ 576.610175][ T420] touch_atime+0x4a/0x340 [ 576.614519][ T420] shmem_file_read_iter+0x477/0x540 [ 576.619722][ T420] copy_splice_read+0x3c4/0x5f0 [ 576.624589][ T420] splice_direct_to_actor+0x290/0x680 [ 576.629973][ T420] do_splice_direct+0xda/0x150 [ 576.634742][ T420] do_sendfile+0x380/0x650 [ 576.639166][ T420] __x64_sys_sendfile64+0x105/0x150 [ 576.644366][ T420] x64_sys_call+0xb39/0x2fb0 [ 576.648965][ T420] do_syscall_64+0xd2/0x200 [ 576.653472][ T420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.659375][ T420] [ 576.661698][ T420] write to 0xffff8881248840f0 of 4 bytes by task 420 on cpu 1: [ 576.669265][ T420] touch_atime+0x1e8/0x340 [ 576.673691][ T420] shmem_file_read_iter+0x477/0x540 [ 576.678882][ T420] copy_splice_read+0x3c4/0x5f0 [ 576.683741][ T420] splice_direct_to_actor+0x290/0x680 [ 576.689212][ T420] do_splice_direct+0xda/0x150 [ 576.693988][ T420] do_sendfile+0x380/0x650 [ 576.698420][ T420] __x64_sys_sendfile64+0x105/0x150 [ 576.703632][ T420] x64_sys_call+0xb39/0x2fb0 [ 576.708233][ T420] do_syscall_64+0xd2/0x200 [ 576.712746][ T420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.718654][ T420] [ 576.720975][ T420] value changed: 0x0c686e95 -> 0x0d010515 [ 576.726689][ T420] [ 576.729011][ T420] Reported by Kernel Concurrency Sanitizer on: [ 576.735160][ T420] CPU: 1 UID: 0 PID: 420 Comm: syz.3.9202 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 576.747487][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.757544][ T420] ================================================================== [ 577.869834][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 577.869848][ T29] audit: type=1400 audit(1750823224.498:32083): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[866]" dev="pipefs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 577.899221][ T29] audit: type=1400 audit(1750823224.498:32084): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[866]" dev="pipefs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 577.922525][ T29] audit: type=1400 audit(1750823224.498:32085): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[866]" dev="pipefs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 577.985376][ T29] audit: type=1400 audit(1750823224.508:32086): avc: denied { execmem } for pid=426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 578.162507][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.243618][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.341816][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.402017][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.485151][ T41] bridge_slave_1: left allmulticast mode [ 578.490864][ T41] bridge_slave_1: left promiscuous mode [ 578.496531][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.505070][ T41] bridge_slave_0: left allmulticast mode [ 578.510755][ T41] bridge_slave_0: left promiscuous mode [ 578.516516][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.582526][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.592120][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.601511][ T41] bond0 (unregistering): Released all slaves [ 578.662911][ T41] hsr_slave_0: left promiscuous mode [ 578.668459][ T41] hsr_slave_1: left promiscuous mode [ 578.674121][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.681543][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.689217][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.696626][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.705928][ T41] veth1_macvtap: left promiscuous mode [ 578.711417][ T41] veth0_macvtap: left promiscuous mode [ 578.716890][ T41] veth1_vlan: left promiscuous mode [ 578.722247][ T41] veth0_vlan: left promiscuous mode [ 578.769478][ T41] team0 (unregistering): Port device team_slave_1 removed [ 578.781318][ T41] team0 (unregistering): Port device team_slave_0 removed [ 579.082551][ T41] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.131398][ T41] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.181336][ T41] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.230788][ T41] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.302228][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.341801][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.402152][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.482461][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.542946][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.612102][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.682217][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.741910][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.791443][ T41] bridge_slave_1: left allmulticast mode [ 579.797127][ T41] bridge_slave_1: left promiscuous mode [ 579.802825][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.810439][ T41] bridge_slave_0: left allmulticast mode [ 579.816175][ T41] bridge_slave_0: left promiscuous mode [ 579.821906][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.829686][ T41] bridge_slave_1: left allmulticast mode [ 579.835439][ T41] bridge_slave_1: left promiscuous mode [ 579.841120][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.848856][ T41] bridge_slave_0: left allmulticast mode [ 579.854632][ T41] bridge_slave_0: left promiscuous mode [ 579.860295][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.868326][ T41] bridge_slave_1: left allmulticast mode [ 579.873999][ T41] bridge_slave_1: left promiscuous mode [ 579.879817][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.887443][ T41] bridge_slave_0: left allmulticast mode [ 579.893203][ T41] bridge_slave_0: left promiscuous mode [ 579.898970][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.032111][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.041726][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.051101][ T41] bond0 (unregistering): Released all slaves [ 580.122170][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.131739][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.141397][ T41] bond0 (unregistering): Released all slaves [ 580.221635][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.231019][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.240298][ T41] bond0 (unregistering): Released all slaves [ 580.285810][ T41] hsr_slave_0: left promiscuous mode [ 580.291430][ T41] hsr_slave_1: left promiscuous mode [ 580.296886][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.304348][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.311858][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.319211][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.327976][ T41] hsr_slave_0: left promiscuous mode [ 580.333755][ T41] hsr_slave_1: left promiscuous mode [ 580.339286][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.346693][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.354166][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.361559][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.370358][ T41] hsr_slave_0: left promiscuous mode [ 580.375860][ T41] hsr_slave_1: left promiscuous mode [ 580.381441][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.388808][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.396419][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.403863][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.417010][ T41] veth0_macvtap: left promiscuous mode [ 580.422630][ T41] veth1_vlan: left promiscuous mode [ 580.427815][ T41] veth0_vlan: left promiscuous mode [ 580.433512][ T41] veth1_macvtap: left promiscuous mode [ 580.439004][ T41] veth0_macvtap: left promiscuous mode [ 580.444529][ T41] veth1_vlan: left promiscuous mode [ 580.449722][ T41] veth0_vlan: left promiscuous mode [ 580.455544][ T41] veth1_macvtap: left promiscuous mode [ 580.461026][ T41] veth0_macvtap: left promiscuous mode [ 580.466500][ T41] veth1_vlan: left promiscuous mode [ 580.471704][ T41] veth0_vlan: left promiscuous mode [ 580.592845][ T41] team0 (unregistering): Port device team_slave_1 removed [ 580.602363][ T41] team0 (unregistering): Port device team_slave_0 removed [ 580.646204][ T41] team0 (unregistering): Port device team_slave_1 removed [ 580.656282][ T41] team0 (unregistering): Port device team_slave_0 removed [ 580.700251][ T41] team0 (unregistering): Port device team_slave_1 removed [ 580.709292][ T41] team0 (unregistering): Port device team_slave_0 removed