last executing test programs: 24.170414431s ago: executing program 2 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 24.080372363s ago: executing program 2 (id=402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d90000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 24.054094464s ago: executing program 2 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000010000000010"], 0x24}}, 0x0) 23.988795355s ago: executing program 2 (id=408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 23.891894737s ago: executing program 2 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 23.432547426s ago: executing program 2 (id=428): ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x41, &(0x7f00000003c0)={[{@nogrpid}, {@lazytime}, {@bh}, {@errors_continue}, {@noblock_validity}, {}, {@mblk_io_submit}, {@nodioread_nolock}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000010c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) 23.389327547s ago: executing program 32 (id=428): ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x41, &(0x7f00000003c0)={[{@nogrpid}, {@lazytime}, {@bh}, {@errors_continue}, {@noblock_validity}, {}, {@mblk_io_submit}, {@nodioread_nolock}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000010c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) 2.408747983s ago: executing program 3 (id=945): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x3, 0x10, 0x3}, {0x6e81, 0xc, 0x9, 0x5}, {0x8, 0xa4, 0x80, 0x6d44}, {0x6, 0x5, 0x7, 0x8}, {0x4, 0x76, 0x7, 0x9}]}) 1.54713287s ago: executing program 5 (id=959): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xff7f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 1.5444856s ago: executing program 1 (id=969): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=""/19, 0x13}, 0x7}], 0x1, 0x10022, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.468505332s ago: executing program 3 (id=960): getpid() syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 1.412374942s ago: executing program 0 (id=961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = gettid() r5 = eventfd2(0x0, 0x0) write$eventfd(r5, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r5, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x1808, 0x10000, 0x0, 0x5, 0xb, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, r1, 0x2) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r7 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') 1.411315213s ago: executing program 3 (id=972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) syz_clone3(&(0x7f0000000780)={0x40000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x2b}, 0x0, 0x0, &(0x7f0000000600)=""/230, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 1.332198564s ago: executing program 0 (id=963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 1.323212444s ago: executing program 0 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.288035265s ago: executing program 3 (id=965): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='kmem_cache_free\x00', &(0x7f00000003c0)='\x05-\x00', &(0x7f0000000400)='+Z}@\x00', &(0x7f0000000440)='(({\'\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='}^-#*:/-#-#\x00', &(0x7f0000000580)='}\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='GPL\x00', &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)='\x00', &(0x7f0000000700)='kmem_cache_free\x00', &(0x7f0000000740)='bpf\x00', &(0x7f0000000780)='bpf\x00']}, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = gettid() r5 = eventfd2(0x0, 0x0) write$eventfd(r5, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r5, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x1808, 0x10000, 0x0, 0x5, 0xb, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, r1, 0x2) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r7 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') 1.234105686s ago: executing program 5 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000510000000005000000080003"], 0x28}}, 0x0) 1.224355106s ago: executing program 0 (id=967): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000140)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1.130010958s ago: executing program 0 (id=970): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000003c0)='\x05-\x00', &(0x7f0000000400)='+Z}@\x00', &(0x7f0000000440)='(({\'\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='}^-#*:/-#-#\x00', &(0x7f0000000580)='}\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='GPL\x00', &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)='\x00', &(0x7f0000000700)='kmem_cache_free\x00', &(0x7f0000000740)='bpf\x00', &(0x7f0000000780)='bpf\x00']}, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = gettid() r4 = eventfd2(0x0, 0x0) write$eventfd(r4, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r4, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x1808, 0x10000, 0x0, 0x5, 0xb, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, r1, 0x2) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r5 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') 1.129538438s ago: executing program 5 (id=971): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x3, 0x10, 0x3}, {0x6e81, 0xc, 0x9, 0x5}, {0x8, 0xa4, 0x80, 0x6d44}, {0x6, 0x5, 0x7, 0x8}, {0x4, 0x76, 0x7, 0x9}]}) 529.95865ms ago: executing program 1 (id=975): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 498.53284ms ago: executing program 1 (id=976): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r1, 0x5608, 0x0) 424.246701ms ago: executing program 4 (id=977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 423.682172ms ago: executing program 1 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x20, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 384.998023ms ago: executing program 4 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) syz_clone3(&(0x7f0000000780)={0x40000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x2b}, 0x0, 0x0, &(0x7f0000000600)=""/230, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 384.310693ms ago: executing program 1 (id=989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='kmem_cache_free\x00', &(0x7f00000003c0)='\x05-\x00', &(0x7f0000000400)='+Z}@\x00', &(0x7f0000000440)='(({\'\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='}^-#*:/-#-#\x00', &(0x7f0000000580)='}\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='GPL\x00', &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)='\x00', &(0x7f0000000700)='kmem_cache_free\x00', &(0x7f0000000740)='bpf\x00', &(0x7f0000000780)='bpf\x00']}, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = gettid() r5 = eventfd2(0x0, 0x0) write$eventfd(r5, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r5, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x1808, 0x10000, 0x0, 0x5, 0xb, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, r1, 0x2) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r7 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') 383.926713ms ago: executing program 3 (id=990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 312.282674ms ago: executing program 4 (id=979): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xff7f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 311.493044ms ago: executing program 3 (id=992): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x3, 0x10, 0x3}, {0x6e81, 0xc, 0x9, 0x5}, {0x8, 0xa4, 0x80, 0x6d44}, {0x6, 0x5, 0x7, 0x8}, {0x4, 0x76, 0x7, 0x9}]}) 241.836215ms ago: executing program 0 (id=980): unshare(0x60600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40010000, 0x0, 0x0) 217.721185ms ago: executing program 5 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)={0x28, 0x18, 0x1, 0x2, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0xc0000000}]}]}, 0x28}}, 0x890) 148.152377ms ago: executing program 5 (id=982): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 147.938737ms ago: executing program 5 (id=983): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='kmem_cache_free\x00', &(0x7f00000003c0)='\x05-\x00', &(0x7f0000000400)='+Z}@\x00', &(0x7f0000000440)='(({\'\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='}^-#*:/-#-#\x00', &(0x7f0000000580)='}\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='GPL\x00', &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)='\x00', &(0x7f0000000700)='kmem_cache_free\x00', &(0x7f0000000740)='bpf\x00', &(0x7f0000000780)='bpf\x00']}, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = gettid() r5 = eventfd2(0x0, 0x0) write$eventfd(r5, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r5, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x1808, 0x10000, 0x0, 0x5, 0xb, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, r1, 0x2) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r7 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') 141.761587ms ago: executing program 4 (id=984): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) ppoll(0x0, 0x0, 0x0, &(0x7f0000000280)={[0x4]}, 0x8) 65.690458ms ago: executing program 4 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 0s ago: executing program 4 (id=986): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='kmem_cache_free\x00', &(0x7f00000003c0)='\x05-\x00', &(0x7f0000000400)='+Z}@\x00', &(0x7f0000000440)='(({\'\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='}^-#*:/-#-#\x00', &(0x7f0000000580)='}\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='GPL\x00', &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)='\x00', &(0x7f0000000700)='kmem_cache_free\x00', &(0x7f0000000740)='bpf\x00', &(0x7f0000000780)='bpf\x00']}, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = gettid() r4 = eventfd2(0x0, 0x0) write$eventfd(r4, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r4, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x1808, 0x10000, 0x0, 0x5, 0xb, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, r1, 0x2) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r5, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r6 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 34.846604][ T29] audit: type=1400 audit(1758693179.783:62): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.847838][ T3297] cgroup: Unknown subsys name 'net' [ 34.869375][ T29] audit: type=1400 audit(1758693179.793:63): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.896830][ T29] audit: type=1400 audit(1758693179.813:64): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.157486][ T3297] cgroup: Unknown subsys name 'cpuset' [ 35.163827][ T3297] cgroup: Unknown subsys name 'rlimit' [ 35.275813][ T29] audit: type=1400 audit(1758693180.213:65): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.303584][ T29] audit: type=1400 audit(1758693180.213:66): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.324065][ T29] audit: type=1400 audit(1758693180.213:67): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.344723][ T29] audit: type=1400 audit(1758693180.213:68): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.364999][ T29] audit: type=1400 audit(1758693180.213:69): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.377937][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.389918][ T29] audit: type=1400 audit(1758693180.213:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.421723][ T29] audit: type=1400 audit(1758693180.343:71): avc: denied { relabelto } for pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.454084][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.617648][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 36.716060][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.723306][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.730629][ T3308] bridge_slave_0: entered allmulticast mode [ 36.737292][ T3308] bridge_slave_0: entered promiscuous mode [ 36.756953][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.769725][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.776858][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.784500][ T3308] bridge_slave_1: entered allmulticast mode [ 36.791000][ T3308] bridge_slave_1: entered promiscuous mode [ 36.822203][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 36.831045][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.843383][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.855582][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.874950][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.915872][ T3308] team0: Port device team_slave_0 added [ 36.929561][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.936641][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.943835][ T3307] bridge_slave_0: entered allmulticast mode [ 36.950508][ T3307] bridge_slave_0: entered promiscuous mode [ 36.960441][ T3308] team0: Port device team_slave_1 added [ 36.973035][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.980241][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.987401][ T3307] bridge_slave_1: entered allmulticast mode [ 36.994030][ T3307] bridge_slave_1: entered promiscuous mode [ 37.024211][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.031200][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.057527][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.082786][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.089794][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.115737][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.136340][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.153528][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.160638][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.167909][ T3309] bridge_slave_0: entered allmulticast mode [ 37.174251][ T3309] bridge_slave_0: entered promiscuous mode [ 37.196508][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.211990][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.219119][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.226246][ T3309] bridge_slave_1: entered allmulticast mode [ 37.232835][ T3309] bridge_slave_1: entered promiscuous mode [ 37.244314][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.251411][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.258592][ T3316] bridge_slave_0: entered allmulticast mode [ 37.264985][ T3316] bridge_slave_0: entered promiscuous mode [ 37.271550][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.278836][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.285948][ T3316] bridge_slave_1: entered allmulticast mode [ 37.292545][ T3316] bridge_slave_1: entered promiscuous mode [ 37.304257][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.311361][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.318523][ T3313] bridge_slave_0: entered allmulticast mode [ 37.325001][ T3313] bridge_slave_0: entered promiscuous mode [ 37.343460][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.367275][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.374352][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.381726][ T3313] bridge_slave_1: entered allmulticast mode [ 37.388298][ T3313] bridge_slave_1: entered promiscuous mode [ 37.396686][ T3308] hsr_slave_0: entered promiscuous mode [ 37.402928][ T3308] hsr_slave_1: entered promiscuous mode [ 37.410111][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.420269][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.434495][ T3307] team0: Port device team_slave_0 added [ 37.451405][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.461410][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.475944][ T3307] team0: Port device team_slave_1 added [ 37.493064][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.508267][ T3309] team0: Port device team_slave_0 added [ 37.536749][ T3309] team0: Port device team_slave_1 added [ 37.543188][ T3316] team0: Port device team_slave_0 added [ 37.549847][ T3316] team0: Port device team_slave_1 added [ 37.555890][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.562868][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.589150][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.607269][ T3313] team0: Port device team_slave_0 added [ 37.630452][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.637479][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.663453][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.675047][ T3313] team0: Port device team_slave_1 added [ 37.706311][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.713350][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.739545][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.753229][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.760228][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.786214][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.797329][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.804280][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.830240][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.841404][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.848427][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.874386][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.888692][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.895695][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.921640][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.945888][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.952861][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.978777][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.017025][ T3316] hsr_slave_0: entered promiscuous mode [ 38.023121][ T3316] hsr_slave_1: entered promiscuous mode [ 38.028993][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.034732][ T3316] Cannot create hsr debugfs directory [ 38.050975][ T3309] hsr_slave_0: entered promiscuous mode [ 38.057068][ T3309] hsr_slave_1: entered promiscuous mode [ 38.062834][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 38.068612][ T3309] Cannot create hsr debugfs directory [ 38.096110][ T3307] hsr_slave_0: entered promiscuous mode [ 38.102294][ T3307] hsr_slave_1: entered promiscuous mode [ 38.108481][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 38.114218][ T3307] Cannot create hsr debugfs directory [ 38.127207][ T3313] hsr_slave_0: entered promiscuous mode [ 38.133482][ T3313] hsr_slave_1: entered promiscuous mode [ 38.139465][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 38.145247][ T3313] Cannot create hsr debugfs directory [ 38.252099][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.263463][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.286392][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.310994][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.382923][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.394657][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.404089][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.415409][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.445297][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.462548][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.472215][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.481364][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.497728][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.523212][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.540123][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.549029][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.559009][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.566078][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.578147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.585288][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.596528][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.605570][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.652598][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.661695][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.671127][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.685308][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.710508][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.748400][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.757746][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.771699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.778791][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.791745][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.803801][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.811120][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.821289][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.831941][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.839044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.859031][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.867433][ T1643] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.874501][ T1643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.889920][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.911833][ T1643] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.918930][ T1643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.943116][ T1569] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.950218][ T1569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.993708][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.027246][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.044748][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.051848][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.082615][ T1643] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.089732][ T1643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.109528][ T3308] veth0_vlan: entered promiscuous mode [ 39.125127][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.139869][ T3308] veth1_vlan: entered promiscuous mode [ 39.169573][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.202972][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.214779][ T3308] veth0_macvtap: entered promiscuous mode [ 39.230753][ T3308] veth1_macvtap: entered promiscuous mode [ 39.278012][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.289433][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.306877][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.315813][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.329989][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.339855][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.366568][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.405267][ T3307] veth0_vlan: entered promiscuous mode [ 39.435364][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.452260][ T3307] veth1_vlan: entered promiscuous mode [ 39.490681][ T3307] veth0_macvtap: entered promiscuous mode [ 39.510896][ T3316] veth0_vlan: entered promiscuous mode [ 39.524802][ T3307] veth1_macvtap: entered promiscuous mode [ 39.533853][ T3474] loop1: detected capacity change from 0 to 512 [ 39.536468][ T3309] veth0_vlan: entered promiscuous mode [ 39.546135][ T3474] ======================================================= [ 39.546135][ T3474] WARNING: The mand mount option has been deprecated and [ 39.546135][ T3474] and is ignored by this kernel. Remove the mand [ 39.546135][ T3474] option from the mount to silence this warning. [ 39.546135][ T3474] ======================================================= [ 39.584156][ T3474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.593839][ T3316] veth1_vlan: entered promiscuous mode [ 39.597376][ T3474] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.612959][ T3316] veth0_macvtap: entered promiscuous mode [ 39.623066][ T3474] EXT4-fs (loop1): 1 truncate cleaned up [ 39.638139][ T3309] veth1_vlan: entered promiscuous mode [ 39.645089][ T3474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.645545][ T3316] veth1_macvtap: entered promiscuous mode [ 39.665759][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.673950][ T3313] veth0_vlan: entered promiscuous mode [ 39.679806][ T3474] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 256: padding at end of block bitmap is not set [ 39.688857][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.705818][ T3474] EXT4-fs (loop1): Remounting filesystem read-only [ 39.707306][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.720802][ T3313] veth1_vlan: entered promiscuous mode [ 39.733610][ T3474] syz.1.2 (3474) used greatest stack depth: 10840 bytes left [ 39.742396][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.751200][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.755412][ T3313] veth0_macvtap: entered promiscuous mode [ 39.769366][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.789237][ T3313] veth1_macvtap: entered promiscuous mode [ 39.802951][ T3309] veth0_macvtap: entered promiscuous mode [ 39.818829][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.832621][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.848620][ T3309] veth1_macvtap: entered promiscuous mode [ 39.855383][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.871147][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.890160][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 39.890174][ T29] audit: type=1326 audit(1758693184.833:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 39.919597][ T29] audit: type=1326 audit(1758693184.833:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 39.945591][ T29] audit: type=1326 audit(1758693184.833:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 39.948937][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.968914][ T29] audit: type=1326 audit(1758693184.833:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 39.968943][ T29] audit: type=1326 audit(1758693184.833:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 39.981737][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.999359][ T29] audit: type=1326 audit(1758693184.833:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 40.062388][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.071958][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.081336][ T29] audit: type=1326 audit(1758693184.993:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 40.083632][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.104542][ T29] audit: type=1326 audit(1758693185.003:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 40.135193][ T29] audit: type=1326 audit(1758693185.053:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 40.158391][ T29] audit: type=1326 audit(1758693185.053:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 40.170558][ T3486] loop1: detected capacity change from 0 to 512 [ 40.193803][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.202724][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.213637][ T3486] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.9: casefold flag without casefold feature [ 40.236921][ T1569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.246123][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.273544][ T3486] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.9: couldn't read orphan inode 15 (err -117) [ 40.291171][ T3494] loop3: detected capacity change from 0 to 1024 [ 40.291514][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.323917][ T3494] EXT4-fs: Ignoring removed orlov option [ 40.331534][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.347031][ T3486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.356364][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.391481][ T3496] loop2: detected capacity change from 0 to 1764 [ 40.404992][ T3494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.406834][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.451441][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.476526][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.494446][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.540469][ T3504] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 40.548213][ T3504] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11'. [ 40.582140][ T3514] loop1: detected capacity change from 0 to 128 [ 40.596246][ T3514] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 40.604224][ T3514] FAT-fs (loop1): Filesystem has been set read-only [ 40.620269][ T3514] syz.1.13: attempt to access beyond end of device [ 40.620269][ T3514] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 40.639554][ T3514] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 40.647619][ T3514] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 40.656531][ T3514] syz.1.13: attempt to access beyond end of device [ 40.656531][ T3514] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.682152][ T3517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17'. [ 40.695398][ T3514] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 40.705515][ T3514] syz.1.13: attempt to access beyond end of device [ 40.705515][ T3514] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 40.724525][ T3519] syz.1.13: attempt to access beyond end of device [ 40.724525][ T3519] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 40.737742][ T3519] Buffer I/O error on dev loop1, logical block 2065, async page read [ 40.747303][ T3514] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 40.755273][ T3514] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 40.774537][ T3519] syz.1.13: attempt to access beyond end of device [ 40.774537][ T3519] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 40.787753][ T3519] Buffer I/O error on dev loop1, logical block 2066, async page read [ 40.800642][ T3519] syz.1.13: attempt to access beyond end of device [ 40.800642][ T3519] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 40.813913][ T3519] Buffer I/O error on dev loop1, logical block 2067, async page read [ 40.822903][ T3519] syz.1.13: attempt to access beyond end of device [ 40.822903][ T3519] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 40.836528][ T3519] Buffer I/O error on dev loop1, logical block 2068, async page read [ 40.844911][ T3519] syz.1.13: attempt to access beyond end of device [ 40.844911][ T3519] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 40.858181][ T3519] Buffer I/O error on dev loop1, logical block 2069, async page read [ 40.870698][ C0] hrtimer: interrupt took 30550 ns [ 40.907590][ T3519] syz.1.13: attempt to access beyond end of device [ 40.907590][ T3519] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 40.920739][ T3519] Buffer I/O error on dev loop1, logical block 2070, async page read [ 40.936938][ T3519] syz.1.13: attempt to access beyond end of device [ 40.936938][ T3519] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 40.950139][ T3519] Buffer I/O error on dev loop1, logical block 2071, async page read [ 40.986457][ T3519] Buffer I/O error on dev loop1, logical block 2072, async page read [ 40.994642][ T3514] Buffer I/O error on dev loop1, logical block 2065, async page read [ 41.023623][ T3541] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 41.026534][ T3514] Buffer I/O error on dev loop1, logical block 2066, async page read [ 41.044839][ T3542] netlink: 'syz.4.26': attribute type 10 has an invalid length. [ 41.077736][ T3542] team0: Device hsr_slave_0 failed to register rx_handler [ 41.114463][ T3542] syz.4.26 (3542) used greatest stack depth: 10336 bytes left [ 41.191445][ T3544] : renamed from bond0 (while UP) [ 41.228712][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.645495][ T3583] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3583 comm=syz.2.44 [ 41.775239][ T3593] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.802891][ T3601] loop2: detected capacity change from 0 to 512 [ 41.819526][ T3601] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.826054][ T3601] ext4: Unknown parameter 'smackfsroot' [ 41.901090][ T3610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.58'. [ 41.921988][ T3610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.58'. [ 41.958548][ T3617] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.973414][ T3610] Zero length message leads to an empty skb [ 41.993575][ T3619] loop1: detected capacity change from 0 to 512 [ 42.027697][ T3619] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.087536][ T3619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 42.105851][ T3619] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.112359][ T3619] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.63: bad orphan inode 267 [ 42.132679][ T3619] EXT4-fs (loop1): Remounting filesystem read-only [ 42.143010][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 42.165489][ T3619] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.63: dx entry: limit 0 != root limit 125 [ 42.177286][ T3619] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.63: Corrupt directory, running e2fsck is recommended [ 42.205194][ T3632] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 42.299160][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 42.552643][ T3667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 42.637571][ T3674] loop1: detected capacity change from 0 to 512 [ 42.656504][ T3674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.679246][ T3679] loop2: detected capacity change from 0 to 128 [ 42.709358][ T3674] EXT4-fs (loop1): 1 orphan inode deleted [ 42.715137][ T3674] EXT4-fs (loop1): 1 truncate cleaned up [ 42.737885][ T3679] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.745797][ T3679] FAT-fs (loop2): Filesystem has been set read-only [ 42.787616][ T3674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.815372][ T3679] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.823342][ T3679] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.850337][ T3674] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.86: path /14/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 42.951294][ T3674] EXT4-fs (loop1): Remounting filesystem read-only [ 43.030612][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.321227][ T3708] loop1: detected capacity change from 0 to 1024 [ 43.360052][ T3708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.496510][ T3708] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 43.621163][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.670188][ T3729] loop0: detected capacity change from 0 to 2048 [ 43.720934][ T3737] loop3: detected capacity change from 0 to 512 [ 43.740074][ T3729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.797342][ T3737] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.114: casefold flag without casefold feature [ 43.849742][ T3729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 43.860115][ T3737] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.114: couldn't read orphan inode 15 (err -117) [ 43.895256][ T3751] loop2: detected capacity change from 0 to 1024 [ 43.906377][ T3729] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 43.929388][ T3751] EXT4-fs: Ignoring removed orlov option [ 43.958848][ T3751] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 43.969272][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.017711][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.029641][ T3737] EXT4-fs error (device loop3): ext4_check_dx_root:2203: inode #2: comm syz.3.114: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 44.061639][ T3751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.122882][ T3766] mmap: syz.0.121 (3766) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.140099][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.195218][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.353449][ T3785] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 44.364302][ T3786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.127'. [ 44.795345][ T3830] loop2: detected capacity change from 0 to 512 [ 44.804677][ T3832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.153'. [ 44.858253][ T3830] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.867591][ T3830] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.876326][ T3837] loop0: detected capacity change from 0 to 512 [ 44.909106][ T3837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.922906][ T3830] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.152: corrupted inode contents [ 44.941854][ T3837] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.961509][ T3830] EXT4-fs (loop2): Remounting filesystem read-only [ 44.968628][ T3830] EXT4-fs (loop2): 1 truncate cleaned up [ 44.974764][ T1643] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.985559][ T1643] __quota_error: 153 callbacks suppressed [ 44.985576][ T1643] Quota error (device loop2): write_blk: dquota write failed [ 44.998823][ T1643] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 45.008904][ T1643] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 45.019563][ T1643] Quota error (device loop2): write_blk: dquota write failed [ 45.027078][ T1643] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 45.049709][ T29] audit: type=1400 audit(1758693189.993:267): avc: denied { write } for pid=3847 comm="syz.3.158" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.084575][ T1643] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.094997][ T1643] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 45.108648][ T1643] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.133422][ T3830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.146496][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.190428][ T29] audit: type=1326 audit(1758693190.133:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 45.239709][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.263566][ T29] audit: type=1326 audit(1758693190.153:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 45.287338][ T29] audit: type=1326 audit(1758693190.153:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 45.333920][ T3872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 45.463729][ T3879] support for cryptoloop has been removed. Use dm-crypt instead. [ 45.517737][ T3872] syz.4.162 (3872) used greatest stack depth: 10176 bytes left [ 45.553871][ T3890] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 45.553871][ T3890] program syz.4.170 not setting count and/or reply_len properly [ 45.583932][ T3894] __nla_validate_parse: 1 callbacks suppressed [ 45.583945][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 45.653923][ T3904] loop2: detected capacity change from 0 to 512 [ 45.662411][ T3900] loop1: detected capacity change from 0 to 128 [ 45.678857][ T3900] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 45.686778][ T3900] FAT-fs (loop1): Filesystem has been set read-only [ 45.702589][ T3900] bio_check_eod: 45444 callbacks suppressed [ 45.702668][ T3900] syz.1.174: attempt to access beyond end of device [ 45.702668][ T3900] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 45.725803][ T3904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.734210][ T3900] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 45.746245][ T3900] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 45.758533][ T3900] syz.1.174: attempt to access beyond end of device [ 45.758533][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.772056][ T3900] syz.1.174: attempt to access beyond end of device [ 45.772056][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.781257][ T3904] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.785399][ T3900] syz.1.174: attempt to access beyond end of device [ 45.785399][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.808981][ T3900] syz.1.174: attempt to access beyond end of device [ 45.808981][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.822245][ T3900] syz.1.174: attempt to access beyond end of device [ 45.822245][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.835522][ T3900] syz.1.174: attempt to access beyond end of device [ 45.835522][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.848852][ T3900] syz.1.174: attempt to access beyond end of device [ 45.848852][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.862133][ T3900] syz.1.174: attempt to access beyond end of device [ 45.862133][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.876917][ T3900] syz.1.174: attempt to access beyond end of device [ 45.876917][ T3900] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.904488][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.959978][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 46.079446][ T3935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 46.098234][ T3936] 9pnet_fd: Insufficient options for proto=fd [ 46.228663][ T3948] loop3: detected capacity change from 0 to 512 [ 46.243838][ T3948] journal_path: Lookup failure for './file0' [ 46.249915][ T3948] EXT4-fs: error: could not find journal device path [ 46.264717][ T3952] loop2: detected capacity change from 0 to 164 [ 46.280986][ T3420] IPVS: starting estimator thread 0... [ 46.287769][ T3950] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 46.307461][ T3952] process 'syz.2.198' launched './file0' with NULL argv: empty string added [ 46.342363][ T3956] loop3: detected capacity change from 0 to 1024 [ 46.366837][ T3954] IPVS: using max 2160 ests per chain, 108000 per kthread [ 46.380916][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.401684][ T3958] loop4: detected capacity change from 0 to 512 [ 46.459025][ T3958] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.200: corrupted in-inode xattr: e_value size too large [ 46.477974][ T3958] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.200: couldn't read orphan inode 15 (err -117) [ 46.496988][ T3956] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.527744][ T3956] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.199: lblock 3 mapped to illegal pblock 3 (length 3) [ 46.549210][ T3956] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 46.561690][ T3956] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.561690][ T3956] [ 46.571962][ T3958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.608133][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.634026][ T3956] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 46.659605][ T3956] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 44 with error 28 [ 46.672058][ T3956] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.672058][ T3956] [ 46.681878][ T3956] EXT4-fs (loop3): Total free blocks count 0 [ 46.687943][ T3956] EXT4-fs (loop3): Free/Dirty block details [ 46.693878][ T3956] EXT4-fs (loop3): free_blocks=4293918720 [ 46.699769][ T3956] EXT4-fs (loop3): dirty_blocks=64 [ 46.704903][ T3956] EXT4-fs (loop3): Block reservation details [ 46.718461][ T3956] syz.3.199 (3956) used greatest stack depth: 9768 bytes left [ 46.753835][ T31] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 46.786555][ T3983] netlink: 168 bytes leftover after parsing attributes in process `syz.1.208'. [ 46.969262][ T4011] netlink: 100 bytes leftover after parsing attributes in process `syz.1.220'. [ 47.018614][ T4020] openvswitch: netlink: Message has 6 unknown bytes. [ 47.452781][ T4076] loop2: detected capacity change from 0 to 512 [ 47.460226][ T4076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.481464][ T4076] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 47.491385][ T4076] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.506638][ T4076] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.521717][ T4076] EXT4-fs (loop2): 1 truncate cleaned up [ 47.528125][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.563016][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.639269][ T4093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4093 comm=syz.2.258 [ 47.736391][ T4104] loop2: detected capacity change from 0 to 1756 [ 47.809321][ T4111] loop3: detected capacity change from 0 to 512 [ 47.829091][ T4111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.842345][ T4111] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.863838][ T4111] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.919358][ T4124] loop2: detected capacity change from 0 to 1024 [ 47.934536][ T4124] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.970459][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.993680][ T4124] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.270: Invalid block bitmap block 0 in block_group 0 [ 48.015408][ T4124] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.270: Failed to acquire dquot type 0 [ 48.035196][ T4124] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.270: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.052295][ T4124] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.270: Invalid inode bitmap blk 0 in block_group 0 [ 48.067132][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 48.070603][ T4124] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 48.089933][ T4124] EXT4-fs (loop2): 1 orphan inode deleted [ 48.096379][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.126954][ T4133] 9pnet_fd: Insufficient options for proto=fd [ 48.146009][ T4135] program syz.1.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.309520][ T4143] loop3: detected capacity change from 0 to 2048 [ 48.350060][ T3750] Alternate GPT is invalid, using primary GPT. [ 48.356538][ T3750] loop3: p2 p3 p7 [ 48.375161][ T4143] Alternate GPT is invalid, using primary GPT. [ 48.381671][ T4143] loop3: p2 p3 p7 [ 48.462208][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 48.476512][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 48.489851][ T4147] netlink: 312 bytes leftover after parsing attributes in process `syz.3.279'. [ 48.490026][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.499020][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 48.518230][ T3750] udevd[3750]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 48.636010][ T4157] netlink: 'syz.3.285': attribute type 4 has an invalid length. [ 48.739067][ T4124] syz.2.270 (4124) used greatest stack depth: 9488 bytes left [ 48.789731][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.809314][ T4168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 48.851719][ T4168] netlink: 48 bytes leftover after parsing attributes in process `syz.3.291'. [ 48.863584][ T4174] loop2: detected capacity change from 0 to 1024 [ 48.890650][ T4174] EXT4-fs: Ignoring removed orlov option [ 48.947522][ T4174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.999022][ T4174] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.069673][ T4174] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.122877][ T4188] loop3: detected capacity change from 0 to 1024 [ 49.127990][ T4174] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.290: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.137415][ T4188] EXT4-fs: Ignoring removed orlov option [ 49.329976][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.340514][ T4188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.473728][ T4188] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.575976][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.787991][ T4205] infiniband syz!: set active [ 49.792799][ T4205] infiniband syz!: added team_slave_0 [ 49.836662][ T4205] RDS/IB: syz!: added [ 49.869355][ T4205] smc: adding ib device syz! with port count 1 [ 49.898529][ T4205] smc: ib device syz! port 1 has pnetid [ 50.028959][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 50.028978][ T29] audit: type=1326 audit(1758693194.973:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.081279][ T29] audit: type=1326 audit(1758693195.003:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.104713][ T29] audit: type=1326 audit(1758693195.003:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.128212][ T29] audit: type=1326 audit(1758693195.003:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.151592][ T29] audit: type=1326 audit(1758693195.003:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.174900][ T29] audit: type=1326 audit(1758693195.003:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.198207][ T29] audit: type=1326 audit(1758693195.003:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.221531][ T29] audit: type=1326 audit(1758693195.003:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.244877][ T29] audit: type=1326 audit(1758693195.003:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.268280][ T29] audit: type=1326 audit(1758693195.003:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 50.582552][ T4272] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.594325][ T4272] vhci_hcd: invalid port number 253 [ 50.599645][ T4272] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 50.619433][ T4274] vhci_hcd: invalid port number 0 [ 50.691920][ T4284] loop4: detected capacity change from 0 to 512 [ 50.699055][ T4282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'. [ 50.736371][ T4284] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.769119][ T4293] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 51.046917][ T4321] loop4: detected capacity change from 0 to 1024 [ 51.049568][ T4323] loop2: detected capacity change from 0 to 512 [ 51.065705][ T4325] netlink: 48 bytes leftover after parsing attributes in process `syz.3.354'. [ 51.073803][ T4321] EXT4-fs: Ignoring removed oldalloc option [ 51.080591][ T4323] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.109129][ T4321] EXT4-fs: Ignoring removed orlov option [ 51.118243][ T4323] EXT4-fs (loop2): 1 truncate cleaned up [ 51.131616][ T4329] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.142383][ T4321] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.153026][ T4323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.168053][ T4329] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 51.200246][ T4321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.242253][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.259972][ T4321] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.352: Allocating blocks 497-513 which overlap fs metadata [ 51.282377][ T4340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4340 comm=syz.2.357 [ 51.295154][ T4336] loop3: detected capacity change from 0 to 128 [ 51.303264][ T4320] EXT4-fs (loop4): pa ffff8881071ca150: logic 80, phys. 481, len 2 [ 51.311391][ T4320] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 51.357854][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.510348][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.366'. [ 51.529370][ T4360] netem: change failed [ 51.800026][ T4385] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 51.888886][ T4394] syz.1.381 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.922362][ T4402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'. [ 51.931336][ T4402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'. [ 51.941109][ T4402] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 52.007444][ T4397] loop2: detected capacity change from 0 to 8192 [ 52.128554][ T4427] loop2: detected capacity change from 0 to 2048 [ 52.172206][ T4427] loop2: p2 p3 p7 [ 52.258694][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 52.291961][ T4454] loop2: detected capacity change from 0 to 1024 [ 52.292007][ T4450] hub 8-0:1.0: USB hub found [ 52.298972][ T4454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.311740][ T4450] hub 8-0:1.0: 8 ports detected [ 52.340420][ T4454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.366017][ T4464] netlink: 264 bytes leftover after parsing attributes in process `syz.4.411'. [ 52.375063][ T4464] netlink: 48 bytes leftover after parsing attributes in process `syz.4.411'. [ 52.387276][ T4454] loop2: detected capacity change from 1024 to 64 [ 52.410702][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.433287][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.450896][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.464882][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.478792][ T4474] ALSA: seq fatal error: cannot create timer (-19) [ 52.488646][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.510829][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.526623][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.543891][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.557718][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.571706][ T3313] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.762819][ T4490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 52.772311][ T4493] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 52.809656][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.816064][ T4495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 52.831582][ T4460] bio_check_eod: 5982 callbacks suppressed [ 52.831599][ T4460] kmmpd-loop2: attempt to access beyond end of device [ 52.831599][ T4460] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 52.851133][ T4460] buffer_io_error: 36142 callbacks suppressed [ 52.851149][ T4460] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 52.880485][ T4501] loop4: detected capacity change from 0 to 1024 [ 52.934472][ T4501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.962524][ T4513] netlink: 'syz.0.432': attribute type 21 has an invalid length. [ 52.970705][ T4510] loop3: detected capacity change from 0 to 2048 [ 52.977907][ T4513] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 53.014878][ T4510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.043073][ T4510] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.083189][ T4500] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.095060][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.107230][ T4500] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 53.119546][ T4500] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.119546][ T4500] [ 53.129252][ T4500] EXT4-fs (loop4): Total free blocks count 0 [ 53.135574][ T4500] EXT4-fs (loop4): Free/Dirty block details [ 53.141616][ T4500] EXT4-fs (loop4): free_blocks=68451041280 [ 53.147574][ T4500] EXT4-fs (loop4): dirty_blocks=16 [ 53.152730][ T4500] EXT4-fs (loop4): Block reservation details [ 53.158761][ T4500] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 53.205738][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.227222][ T4534] loop3: detected capacity change from 0 to 512 [ 53.250909][ T4540] loop4: detected capacity change from 0 to 128 [ 53.263824][ T4534] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.277307][ T4544] netlink: 'syz.0.441': attribute type 6 has an invalid length. [ 53.286112][ T4544] netlink: 'syz.0.441': attribute type 25 has an invalid length. [ 53.293947][ T4544] netlink: 'syz.0.441': attribute type 27 has an invalid length. [ 53.297033][ T4534] EXT4-fs (loop3): mount failed [ 53.301776][ T4544] netlink: 'syz.0.441': attribute type 28 has an invalid length. [ 53.314326][ T4544] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 53.322117][ T4544] netlink: 'syz.0.441': attribute type 30 has an invalid length. [ 53.338070][ T4540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 53.346057][ T4540] System zones: 1-3, 19-19, 35-36 [ 53.351775][ T4540] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.364501][ T4540] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.429989][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.502557][ T4508] chnl_net:caif_netlink_parms(): no params data found [ 53.553472][ T4566] vhci_hcd: invalid port number 255 [ 53.558818][ T4566] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 53.572228][ T4572] loop3: detected capacity change from 0 to 128 [ 53.595874][ T4572] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.609766][ T4572] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.609828][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.625969][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.639034][ T4508] bridge_slave_0: entered allmulticast mode [ 53.645723][ T4508] bridge_slave_0: entered promiscuous mode [ 53.654915][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.662068][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.673547][ T4508] bridge_slave_1: entered allmulticast mode [ 53.680603][ T4578] loop4: detected capacity change from 0 to 128 [ 53.687933][ T4508] bridge_slave_1: entered promiscuous mode [ 53.731189][ T4581] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 53.731189][ T4581] program syz.3.455 not setting count and/or reply_len properly [ 53.732660][ T4508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.783651][ T4586] loop3: detected capacity change from 0 to 1024 [ 53.792081][ T4586] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.803142][ T4586] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.818480][ T4508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.836207][ T4586] JBD2: no valid journal superblock found [ 53.842069][ T4586] EXT4-fs (loop3): Could not load journal inode [ 53.854430][ T4586] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 53.873519][ T4508] team0: Port device team_slave_0 added [ 53.879752][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.879752][ T31] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 53.882057][ T4508] team0: Port device team_slave_1 added [ 53.900206][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.900206][ T31] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 53.914348][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.914348][ T31] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 53.930815][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.930815][ T31] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 53.944692][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.944692][ T31] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 53.959325][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.959325][ T31] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 53.978993][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.978993][ T31] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 53.993466][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.993466][ T31] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 54.014285][ T31] kworker/u8:1: attempt to access beyond end of device [ 54.014285][ T31] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 54.028233][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.035247][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.061289][ T4508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.095551][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.102581][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.128677][ T4508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.141222][ T4600] vhci_hcd: invalid port number 96 [ 54.146473][ T4600] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 54.169923][ T4602] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 54.189804][ T4508] hsr_slave_0: entered promiscuous mode [ 54.197092][ T4508] hsr_slave_1: entered promiscuous mode [ 54.203352][ T4508] debugfs: 'hsr0' already exists in 'hsr' [ 54.209160][ T4508] Cannot create hsr debugfs directory [ 54.261109][ T4610] vhci_hcd: invalid port number 96 [ 54.266306][ T4610] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 54.294345][ T1569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.349715][ T1569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.425618][ T4508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.441440][ T1569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.454941][ T4508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.465590][ T4508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.488353][ T4632] loop4: detected capacity change from 0 to 164 [ 54.499497][ T1569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.511215][ T4508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.526106][ T4634] loop3: detected capacity change from 0 to 128 [ 54.651226][ T4508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.674995][ T1569] bridge_slave_1: left allmulticast mode [ 54.681738][ T1569] bridge_slave_1: left promiscuous mode [ 54.688401][ T1569] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.706841][ T1569] bridge_slave_0: left allmulticast mode [ 54.712523][ T1569] bridge_slave_0: left promiscuous mode [ 54.718530][ T1569] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.931881][ T1569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.942849][ T1569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.953320][ T1569] bond0 (unregistering): Released all slaves [ 54.967208][ T4508] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.987826][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.995033][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.018594][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.025798][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.058704][ T29] kauditd_printk_skb: 1171 callbacks suppressed [ 55.058746][ T29] audit: type=1326 audit(1758693200.003:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 55.088602][ T29] audit: type=1326 audit(1758693200.003:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 55.163984][ T1569] hsr_slave_0: left promiscuous mode [ 55.170438][ T1569] hsr_slave_1: left promiscuous mode [ 55.180589][ T29] audit: type=1326 audit(1758693200.083:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 55.204060][ T29] audit: type=1400 audit(1758693200.083:2069): avc: denied { getattr } for pid=4678 comm="syz.1.493" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.226889][ T29] audit: type=1326 audit(1758693200.083:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 55.231417][ T1569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.250325][ T29] audit: type=1326 audit(1758693200.083:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4678 comm="syz.1.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 55.257790][ T1569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.288409][ T29] audit: type=1326 audit(1758693200.083:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 55.311802][ T29] audit: type=1326 audit(1758693200.083:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 55.335184][ T29] audit: type=1326 audit(1758693200.083:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 55.358633][ T29] audit: type=1326 audit(1758693200.083:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 55.384690][ T1569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.392160][ T1569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.409612][ T1569] veth1_macvtap: left promiscuous mode [ 55.417920][ T1569] veth0_macvtap: left promiscuous mode [ 55.425214][ T1569] veth1_vlan: left promiscuous mode [ 55.433201][ T1569] veth0_vlan: left promiscuous mode [ 55.539466][ T1569] team0 (unregistering): Port device team_slave_1 removed [ 55.551569][ T1569] team0 (unregistering): Port device team_slave_0 removed [ 55.596766][ T4687] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.618258][ T4690] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.674639][ T4707] loop4: detected capacity change from 0 to 512 [ 55.679842][ T4508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.718651][ T4707] EXT4-fs: Ignoring removed bh option [ 55.735627][ T4707] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 55.784317][ T4707] EXT4-fs (loop4): 1 truncate cleaned up [ 55.801835][ T4728] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4728 comm=syz.1.510 [ 55.819276][ T4707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.947932][ T4508] veth0_vlan: entered promiscuous mode [ 55.975730][ T4508] veth1_vlan: entered promiscuous mode [ 55.983115][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.018963][ T4508] veth0_macvtap: entered promiscuous mode [ 56.036598][ T4508] veth1_macvtap: entered promiscuous mode [ 56.063158][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.081114][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.093635][ T1643] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.104069][ T1643] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.121027][ T1643] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.138099][ T4751] loop4: detected capacity change from 0 to 512 [ 56.146955][ T1643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.162404][ T4751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.185212][ T4751] EXT4-fs (loop4): 1 truncate cleaned up [ 56.191889][ T4751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.237293][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.283290][ T4761] loop5: detected capacity change from 0 to 1024 [ 56.295896][ T4764] loop4: detected capacity change from 0 to 512 [ 56.304199][ T4761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.328377][ T4764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.342247][ T4764] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.375619][ T4508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.387121][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.449439][ T4777] loop4: detected capacity change from 0 to 8192 [ 56.478037][ T4777] loop4: p1 p2 p4 < > [ 56.482113][ T4785] loop5: detected capacity change from 0 to 512 [ 56.482209][ T4777] loop4: partition table partially beyond EOD, truncated [ 56.491631][ T4785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.505115][ T4777] loop4: p1 start 16777224 is beyond EOD, truncated [ 56.511814][ T4777] loop4: p2 size 515840 extends beyond EOD, truncated [ 56.519818][ T4777] loop4: p4 start 16777216 is beyond EOD, truncated [ 56.520457][ T4785] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.528: invalid block [ 56.544002][ T4785] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.528: invalid indirect mapped block 4294967295 (level 1) [ 56.586245][ T4785] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.528: invalid indirect mapped block 4294967295 (level 1) [ 56.644371][ T4785] EXT4-fs (loop5): 2 truncates cleaned up [ 56.657145][ T4785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.693211][ T4792] IPv6: Can't replace route, no match found [ 56.712263][ T4785] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.528: bg 0: block 5: invalid block bitmap [ 56.765792][ T4508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.816903][ T4802] loop5: detected capacity change from 0 to 1024 [ 56.838296][ T4802] EXT4-fs: Ignoring removed bh option [ 56.854317][ T4802] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.888630][ T4802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.928780][ T4508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.961991][ T4820] loop5: detected capacity change from 0 to 128 [ 56.992573][ T4823] sd 0:0:1:0: device reset [ 56.993534][ T4820] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.005039][ T4820] FAT-fs (loop5): Filesystem has been set read-only [ 57.051585][ T4826] loop3: detected capacity change from 0 to 512 [ 57.078695][ T4826] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.545: bad orphan inode 11862016 [ 57.098066][ T4826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.115003][ T4826] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.145311][ T4826] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.545: corrupted inode contents [ 57.158992][ T4826] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.545: mark_inode_dirty error [ 57.171918][ T4826] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.545: corrupted inode contents [ 57.185549][ T4826] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.545: mark_inode_dirty error [ 57.207470][ T4826] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.545: mark inode dirty (error -117) [ 57.220873][ T4826] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 57.249169][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.746345][ T4854] loop4: detected capacity change from 0 to 128 [ 58.266549][ T4870] loop3: detected capacity change from 0 to 164 [ 58.294904][ T4870] isofs_fill_super: root inode is not a directory. Corrupted media? [ 58.364464][ T4879] loop3: detected capacity change from 0 to 128 [ 58.406677][ T4879] bio_check_eod: 103 callbacks suppressed [ 58.412594][ T4879] syz.3.565: attempt to access beyond end of device [ 58.412594][ T4879] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 58.433881][ T4879] syz.3.565: attempt to access beyond end of device [ 58.433881][ T4879] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 58.447369][ T4879] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 58.456088][ T4879] syz.3.565: attempt to access beyond end of device [ 58.456088][ T4879] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 58.469698][ T4879] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 58.508346][ T4879] syz.3.565: attempt to access beyond end of device [ 58.508346][ T4879] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 58.566088][ T4879] syz.3.565: attempt to access beyond end of device [ 58.566088][ T4879] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 58.579633][ T4879] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 58.591913][ T4879] syz.3.565: attempt to access beyond end of device [ 58.591913][ T4879] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 58.605839][ T4879] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 58.633413][ T4879] syz.3.565: attempt to access beyond end of device [ 58.633413][ T4879] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 58.649385][ T4879] syz.3.565: attempt to access beyond end of device [ 58.649385][ T4879] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 58.662924][ T4879] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 58.676296][ T4879] syz.3.565: attempt to access beyond end of device [ 58.676296][ T4879] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 58.689709][ T4879] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 58.714404][ T4879] syz.3.565: attempt to access beyond end of device [ 58.714404][ T4879] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 58.731664][ T4879] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 58.742279][ T4879] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 58.752288][ T4879] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 58.762190][ T4879] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 58.955963][ T4905] loop3: detected capacity change from 0 to 1024 [ 58.997039][ T4905] EXT4-fs: Ignoring removed bh option [ 59.020586][ T4905] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.179547][ T4914] loop3: detected capacity change from 0 to 512 [ 59.208194][ T4914] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.236892][ T4914] EXT4-fs (loop3): 1 truncate cleaned up [ 59.404329][ T4917] loop3: detected capacity change from 0 to 8192 [ 59.497505][ T4917] loop3: p1 p2 p4 < > [ 59.501726][ T4917] loop3: partition table partially beyond EOD, truncated [ 59.528040][ T4917] loop3: p1 start 16777216 is beyond EOD, truncated [ 59.534763][ T4917] loop3: p2 size 515840 extends beyond EOD, truncated [ 59.570841][ T4917] loop3: p4 start 16777216 is beyond EOD, truncated [ 59.707600][ T4936] program syz.4.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.711350][ T4934] loop5: detected capacity change from 0 to 2048 [ 60.077907][ T29] kauditd_printk_skb: 1554 callbacks suppressed [ 60.077923][ T29] audit: type=1326 audit(1758693205.013:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f324bbb5d67 code=0x7ffc0000 [ 60.107453][ T29] audit: type=1326 audit(1758693205.013:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f324bb5af79 code=0x7ffc0000 [ 60.130712][ T29] audit: type=1326 audit(1758693205.013:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f324bbbeec9 code=0x7ffc0000 [ 60.217706][ T29] audit: type=1326 audit(1758693205.023:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f324bbb5d67 code=0x7ffc0000 [ 60.241016][ T29] audit: type=1326 audit(1758693205.023:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f324bb5af79 code=0x7ffc0000 [ 60.264324][ T29] audit: type=1326 audit(1758693205.023:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f324bbbeec9 code=0x7ffc0000 [ 60.287475][ T29] audit: type=1326 audit(1758693205.033:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f324bbb5d67 code=0x7ffc0000 [ 60.310795][ T29] audit: type=1326 audit(1758693205.033:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f324bb5af79 code=0x7ffc0000 [ 60.334126][ T29] audit: type=1326 audit(1758693205.033:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f324bbbeec9 code=0x7ffc0000 [ 60.357403][ T29] audit: type=1326 audit(1758693205.043:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f324bbb5d67 code=0x7ffc0000 [ 60.476015][ T4966] __nla_validate_parse: 9 callbacks suppressed [ 60.476028][ T4966] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 60.544376][ T4968] netlink: 100 bytes leftover after parsing attributes in process `syz.1.597'. [ 60.813960][ T4979] loop4: detected capacity change from 0 to 512 [ 60.911578][ T4979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.998446][ T4979] EXT4-fs (loop4): 1 truncate cleaned up [ 61.146606][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 61.239037][ T5007] loop4: detected capacity change from 0 to 1024 [ 61.363175][ T5022] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 61.374592][ T5007] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.675651][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.627'. [ 61.695813][ T5039] loop4: detected capacity change from 0 to 512 [ 61.775947][ T5044] netlink: 100 bytes leftover after parsing attributes in process `syz.5.631'. [ 61.788771][ T5045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'. [ 61.809923][ T5039] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.887294][ T5039] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.153811][ T5055] loop3: detected capacity change from 0 to 128 [ 62.183072][ T5055] EXT4-fs: Ignoring removed nobh option [ 62.235476][ T5055] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.262949][ T5076] loop5: detected capacity change from 0 to 1024 [ 62.291197][ T5055] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 62.338843][ T5076] EXT4-fs: Ignoring removed orlov option [ 62.418385][ T5076] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.455828][ T5094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.651'. [ 62.479498][ T5076] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.644: lblock 0 mapped to illegal pblock 0 (length 1) [ 62.503631][ T5076] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.644: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 62.573332][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 62.741389][ T5125] loop5: detected capacity change from 0 to 1024 [ 62.756886][ T5127] openvswitch: netlink: Message has 6 unknown bytes. [ 62.762235][ T5131] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 62.777389][ T5125] EXT4-fs: Ignoring removed orlov option [ 62.806007][ T5133] netlink: 'syz.3.669': attribute type 6 has an invalid length. [ 62.829318][ T5125] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.761788][ T5178] loop3: detected capacity change from 0 to 1024 [ 63.776240][ T5180] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 63.807745][ T5182] netlink: 180 bytes leftover after parsing attributes in process `syz.1.689'. [ 63.834127][ T5178] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.049632][ T5200] block device autoloading is deprecated and will be removed. [ 64.171573][ T5225] loop5: detected capacity change from 0 to 1024 [ 64.189582][ T5225] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.142941][ T29] kauditd_printk_skb: 1094 callbacks suppressed [ 65.142958][ T29] audit: type=1400 audit(1758693210.083:4734): avc: denied { create } for pid=5253 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.177625][ T5256] loop0: detected capacity change from 0 to 512 [ 65.184833][ T5254] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.206763][ T5256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.209797][ T29] audit: type=1400 audit(1758693210.123:4735): avc: denied { write } for pid=5253 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.259057][ T5256] EXT4-fs (loop0): 1 truncate cleaned up [ 65.275690][ T5259] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.315942][ T5259] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 65.373066][ T29] audit: type=1400 audit(1758693210.313:4736): avc: denied { getopt } for pid=5260 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.450645][ T5269] loop5: detected capacity change from 0 to 1024 [ 65.459496][ T5269] EXT4-fs: Ignoring removed bh option [ 65.468640][ T5269] EXT4-fs: inline encryption not supported [ 65.474919][ T5269] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.492762][ T5269] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.723: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.510928][ T29] audit: type=1400 audit(1758693210.453:4737): avc: denied { load_policy } for pid=5270 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 65.512362][ T5269] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 65.538385][ T5271] SELinux: ebitmap: truncated map [ 65.540801][ T5269] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.723: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.553307][ T5271] SELinux: failed to load policy [ 65.559976][ T5269] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 65.572273][ T5269] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.723: Failed to acquire dquot type 0 [ 65.586643][ T5269] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 65.596903][ T5269] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.723: mark_inode_dirty error [ 65.612471][ T29] audit: type=1400 audit(1758693210.553:4738): avc: denied { write } for pid=5273 comm="syz.1.726" path="socket:[10599]" dev="sockfs" ino=10599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.636616][ T5269] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 65.656740][ T5269] EXT4-fs (loop5): 1 orphan inode deleted [ 65.673916][ T54] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.695920][ T29] audit: type=1326 audit(1758693210.633:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5279 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 65.699911][ T54] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 65.719433][ T29] audit: type=1326 audit(1758693210.633:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5279 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 65.727838][ T54] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 65.777313][ T5269] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.804574][ T5281] loop0: detected capacity change from 0 to 128 [ 65.827535][ T5289] __nla_validate_parse: 1 callbacks suppressed [ 65.827555][ T5289] netlink: 40 bytes leftover after parsing attributes in process `syz.5.730'. [ 65.842744][ T5289] netlink: 40 bytes leftover after parsing attributes in process `syz.5.730'. [ 65.907945][ T5289] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 66.686899][ T5341] netlink: 'syz.5.756': attribute type 3 has an invalid length. [ 66.787373][ T5339] loop0: detected capacity change from 0 to 128 [ 66.799956][ T5349] loop5: detected capacity change from 0 to 128 [ 66.936739][ T5368] netlink: 176 bytes leftover after parsing attributes in process `syz.1.766'. [ 67.337256][ T5378] netlink: 'syz.3.770': attribute type 3 has an invalid length. [ 67.639633][ T5399] loop5: detected capacity change from 0 to 1024 [ 67.649302][ T5399] EXT4-fs: Ignoring removed oldalloc option [ 67.655550][ T5399] EXT4-fs: Ignoring removed orlov option [ 67.691654][ T5405] loop3: detected capacity change from 0 to 128 [ 67.691723][ T5399] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 67.783526][ T5399] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.778: Allocating blocks 497-513 which overlap fs metadata [ 67.825165][ T5397] EXT4-fs (loop5): pa ffff888107291230: logic 80, phys. 481, len 2 [ 67.833325][ T5397] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 67.929158][ T5419] netlink: 'syz.4.785': attribute type 6 has an invalid length. [ 67.936942][ T5419] netlink: 'syz.4.785': attribute type 25 has an invalid length. [ 67.944704][ T5419] netlink: 'syz.4.785': attribute type 27 has an invalid length. [ 67.952476][ T5419] netlink: 'syz.4.785': attribute type 28 has an invalid length. [ 67.960342][ T5419] netlink: 'syz.4.785': attribute type 29 has an invalid length. [ 67.968127][ T5419] netlink: 'syz.4.785': attribute type 30 has an invalid length. [ 68.021316][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'. [ 68.152796][ T5432] loop4: detected capacity change from 0 to 128 [ 68.619320][ T5445] loop0: detected capacity change from 0 to 1024 [ 68.639336][ T5445] EXT4-fs: Ignoring removed bh option [ 68.644920][ T5445] EXT4-fs: inline encryption not supported [ 68.658290][ T5445] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.679676][ T5445] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.793: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.708178][ T5445] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.793: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.735973][ T5445] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.793: Failed to acquire dquot type 0 [ 68.756014][ T5445] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 68.777143][ T5445] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.793: mark_inode_dirty error [ 68.795090][ T5445] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 68.814120][ T5445] EXT4-fs (loop0): 1 orphan inode deleted [ 68.827367][ T1569] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.844962][ T1569] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 68.859175][ T5445] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.981306][ T5469] loop3: detected capacity change from 0 to 128 [ 69.205409][ T5499] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 69.304249][ T5503] loop4: detected capacity change from 0 to 128 [ 69.357976][ T5502] Falling back ldisc for ttyS3. [ 69.400005][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 69.459675][ T5507] veth0_macvtap: left promiscuous mode [ 69.521103][ T5515] loop5: detected capacity change from 0 to 128 [ 69.706215][ T54] bio_check_eod: 32 callbacks suppressed [ 69.706231][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.706231][ T54] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 69.792481][ T5522] loop0: detected capacity change from 0 to 1024 [ 69.799918][ T5521] xt_l2tp: missing protocol rule (udp|l2tpip) [ 69.806546][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.806546][ T54] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 69.816709][ T5522] EXT4-fs: Ignoring removed oldalloc option [ 69.820055][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.820055][ T54] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 69.829541][ T5522] EXT4-fs: Ignoring removed orlov option [ 69.839157][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.839157][ T54] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 69.858320][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.858320][ T54] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 69.871895][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.871895][ T54] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 69.885756][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.885756][ T54] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 69.899178][ T5522] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.909009][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.909009][ T54] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 69.922758][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.922758][ T54] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 69.936357][ T54] kworker/u8:4: attempt to access beyond end of device [ 69.936357][ T54] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 69.954087][ T5522] EXT4-fs mount: 30 callbacks suppressed [ 69.954105][ T5522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.029906][ T5522] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.825: Allocating blocks 497-513 which overlap fs metadata [ 70.092001][ T5520] EXT4-fs (loop0): pa ffff888107291310: logic 80, phys. 481, len 2 [ 70.100014][ T5520] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 70.172239][ T29] kauditd_printk_skb: 1134 callbacks suppressed [ 70.172253][ T29] audit: type=1400 audit(1758693215.113:5872): avc: denied { write } for pid=5547 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.204384][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.218501][ T29] audit: type=1400 audit(1758693215.143:5873): avc: denied { create } for pid=5540 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.260158][ T29] audit: type=1326 audit(1758693215.163:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.283702][ T29] audit: type=1326 audit(1758693215.163:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.307126][ T29] audit: type=1326 audit(1758693215.163:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.330728][ T29] audit: type=1326 audit(1758693215.163:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.354406][ T29] audit: type=1326 audit(1758693215.163:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.377841][ T29] audit: type=1326 audit(1758693215.163:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.401362][ T29] audit: type=1326 audit(1758693215.163:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.424895][ T29] audit: type=1326 audit(1758693215.163:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bb20eec9 code=0x7ffc0000 [ 70.510773][ T5567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 70.599658][ T5577] loop3: detected capacity change from 0 to 128 [ 70.983819][ T5591] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 71.114879][ T5601] loop4: detected capacity change from 0 to 512 [ 71.121967][ T5601] EXT4-fs: Ignoring removed oldalloc option [ 71.141964][ T5601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.159370][ T5601] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.205298][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.253987][ T5608] loop5: detected capacity change from 0 to 512 [ 71.261881][ T5608] EXT4-fs: Ignoring removed bh option [ 71.277959][ T5608] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 71.298625][ T5610] loop4: detected capacity change from 0 to 2048 [ 71.309123][ T5608] EXT4-fs (loop5): 1 truncate cleaned up [ 71.315765][ T5608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.338461][ T5610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.350837][ T5610] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.464866][ T4508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.481941][ T5623] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 71.482860][ T5622] loop3: detected capacity change from 0 to 1024 [ 71.532869][ T5625] loop0: detected capacity change from 0 to 2048 [ 71.541597][ T5622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.576411][ T5625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.617004][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.649123][ T5625] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.865: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 71.682971][ T5625] EXT4-fs (loop0): Remounting filesystem read-only [ 71.717601][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.727154][ T1569] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 71.743133][ T1569] EXT4-fs (loop4): Remounting filesystem read-only [ 71.750456][ T54] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 71.805987][ T5652] syzkaller1: entered promiscuous mode [ 71.811646][ T5652] syzkaller1: entered allmulticast mode [ 71.823965][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.845043][ T5650] loop0: detected capacity change from 0 to 128 [ 71.927380][ T5666] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 71.950362][ T5666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.975160][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 71.980049][ T5672] loop4: detected capacity change from 0 to 1024 [ 71.994588][ T5666] bond1 (unregistering): Released all slaves [ 72.002921][ T5672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.050285][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.425079][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 72.442165][ T5697] veth0_macvtap: left promiscuous mode [ 72.553607][ T5712] loop3: detected capacity change from 0 to 1024 [ 72.578315][ T5712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.649870][ T5712] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.895: Allocating blocks 385-513 which overlap fs metadata [ 72.680622][ T5712] EXT4-fs (loop3): pa ffff8881072913f0: logic 16, phys. 129, len 24 [ 72.688727][ T5712] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 72.742581][ T5738] loop4: detected capacity change from 0 to 512 [ 72.770339][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 72.770472][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.797816][ T5738] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.822966][ T5738] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 72.875208][ T3309] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 72.923027][ T5766] loop3: detected capacity change from 0 to 128 [ 73.132924][ T5780] loop0: detected capacity change from 0 to 128 [ 73.413575][ T5808] loop4: detected capacity change from 0 to 1024 [ 73.457599][ T5808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.578001][ T5808] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 73.640224][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.742180][ T5825] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 73.763157][ T5825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.777497][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 73.798175][ T5825] bond1 (unregistering): Released all slaves [ 73.816539][ T5828] raw_sendmsg: syz.3.942 forgot to set AF_INET. Fix it! [ 74.054926][ T5854] loop0: detected capacity change from 0 to 128 [ 74.064623][ T5862] pim6reg: entered allmulticast mode [ 74.079094][ T5862] pim6reg: left allmulticast mode [ 74.255903][ T5870] loop4: detected capacity change from 0 to 128 [ 74.783538][ T5878] netlink: 'syz.5.959': attribute type 1 has an invalid length. [ 74.812418][ T5878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.880316][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.959'. [ 74.921233][ T5878] bond1 (unregistering): Released all slaves [ 75.089401][ T5901] loop0: detected capacity change from 0 to 1764 [ 75.098262][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.966'. [ 75.108552][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 75.117570][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 75.126462][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 75.137124][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 75.146038][ T5904] netlink: 'syz.4.968': attribute type 6 has an invalid length. [ 75.179887][ T29] kauditd_printk_skb: 1701 callbacks suppressed [ 75.179903][ T29] audit: type=1326 audit(1758693220.123:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 75.247041][ T29] audit: type=1326 audit(1758693220.123:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36d45f5d67 code=0x7ffc0000 [ 75.270639][ T29] audit: type=1326 audit(1758693220.123:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36d459af79 code=0x7ffc0000 [ 75.294165][ T29] audit: type=1326 audit(1758693220.123:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f36d45feec9 code=0x7ffc0000 [ 75.317535][ T29] audit: type=1326 audit(1758693220.123:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 75.341046][ T29] audit: type=1326 audit(1758693220.123:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 75.364628][ T29] audit: type=1326 audit(1758693220.123:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 75.388174][ T29] audit: type=1326 audit(1758693220.123:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 75.411768][ T29] audit: type=1326 audit(1758693220.123:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 75.435405][ T29] audit: type=1326 audit(1758693220.123:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f417eec9 code=0x7ffc0000 [ 76.002562][ T5937] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 76.031423][ T5937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.058989][ T5938] loop3: detected capacity change from 0 to 128 [ 76.088256][ T5937] bond1 (unregistering): Released all slaves [ 76.426473][ T5950] ================================================================== [ 76.434602][ T5950] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 76.442889][ T5950] [ 76.445244][ T5950] write to 0xffff888119887728 of 4 bytes by task 5938 on cpu 0: [ 76.452881][ T5950] writeback_single_inode+0x14a/0x3e0 [ 76.458289][ T5950] sync_inode_metadata+0x5b/0x90 [ 76.463256][ T5950] __generic_file_fsync+0xf8/0x140 [ 76.468398][ T5950] fat_file_fsync+0x49/0x100 [ 76.473033][ T5950] vfs_fsync_range+0x10a/0x130 [ 76.477832][ T5950] generic_file_write_iter+0x1b8/0x2f0 [ 76.483313][ T5950] iter_file_splice_write+0x666/0xa60 [ 76.488761][ T5950] direct_splice_actor+0x156/0x2a0 [ 76.493899][ T5950] splice_direct_to_actor+0x312/0x680 [ 76.499299][ T5950] do_splice_direct+0xda/0x150 [ 76.504084][ T5950] do_sendfile+0x380/0x650 [ 76.508542][ T5950] __x64_sys_sendfile64+0x105/0x150 [ 76.513819][ T5950] x64_sys_call+0x2bb0/0x2ff0 [ 76.518510][ T5950] do_syscall_64+0xd2/0x200 [ 76.523058][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.528998][ T5950] [ 76.531347][ T5950] read to 0xffff888119887728 of 4 bytes by task 5950 on cpu 1: [ 76.538909][ T5950] __mark_inode_dirty+0x191/0x750 [ 76.543967][ T5950] fat_update_time+0x1ec/0x200 [ 76.548809][ T5950] touch_atime+0x148/0x340 [ 76.553262][ T5950] filemap_splice_read+0x6ba/0x740 [ 76.558390][ T5950] splice_direct_to_actor+0x26c/0x680 [ 76.563791][ T5950] do_splice_direct+0xda/0x150 [ 76.568584][ T5950] do_sendfile+0x380/0x650 [ 76.573031][ T5950] __x64_sys_sendfile64+0x105/0x150 [ 76.578291][ T5950] x64_sys_call+0x2bb0/0x2ff0 [ 76.582997][ T5950] do_syscall_64+0xd2/0x200 [ 76.587545][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.593464][ T5950] [ 76.595813][ T5950] value changed: 0x00000038 -> 0x00000002 [ 76.601543][ T5950] [ 76.603885][ T5950] Reported by Kernel Concurrency Sanitizer on: [ 76.610100][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.3.992 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.619755][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.629844][ T5950] ==================================================================