last executing test programs: 1m55.257717944s ago: executing program 0 (id=1327): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 1m55.223554377s ago: executing program 0 (id=1332): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1m55.127856405s ago: executing program 0 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0xa, 0x0, 0x9, &(0x7f0000000180)) 1m55.0595604s ago: executing program 0 (id=1339): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 1m54.791529562s ago: executing program 0 (id=1349): r0 = socket(0x25, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r4, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 1m54.353856798s ago: executing program 0 (id=1356): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.182469881s ago: executing program 32 (id=1356): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.116317301s ago: executing program 3 (id=1424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 1m51.115744681s ago: executing program 3 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m51.073128964s ago: executing program 3 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 1m51.00751212s ago: executing program 3 (id=1432): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 1m50.731890712s ago: executing program 3 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 1m50.401590839s ago: executing program 3 (id=1459): r0 = syz_io_uring_setup(0x590, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3b7}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m50.370668711s ago: executing program 33 (id=1459): r0 = syz_io_uring_setup(0x590, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3b7}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m42.348374614s ago: executing program 6 (id=1661): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)) 1m42.336247145s ago: executing program 6 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1m42.289801039s ago: executing program 6 (id=1665): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) 1m42.253124462s ago: executing program 6 (id=1669): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 1m42.105291914s ago: executing program 6 (id=1672): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 1m41.849747405s ago: executing program 6 (id=1685): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x48}, 0x0) 1m41.849400555s ago: executing program 34 (id=1685): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x48}, 0x0) 1m16.508918186s ago: executing program 4 (id=2271): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000080)="96", 0x1}, {0x0}], 0x3, 0x2) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='module_request\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m15.883291507s ago: executing program 4 (id=2276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1m15.831660371s ago: executing program 4 (id=2278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 1m15.651884326s ago: executing program 4 (id=2279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@noquota}, {@dioread_nolock}]}, 0x1, 0xbe4, &(0x7f0000003c00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1m15.151395487s ago: executing program 4 (id=2284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 1m14.511925789s ago: executing program 4 (id=2288): bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100003c}, 0x18) r1 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 1m14.511714789s ago: executing program 35 (id=2288): bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100003c}, 0x18) r1 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x0, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 30.72789796s ago: executing program 1 (id=3212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000008c0)={0x80, 0x8, 0xf00, 0x7ff, 0x0, 0x5, 0x0}) 30.715754451s ago: executing program 1 (id=3214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") unshare(0x6040400) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 30.628946618s ago: executing program 1 (id=3217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) 30.589172392s ago: executing program 1 (id=3220): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) 30.522003647s ago: executing program 1 (id=3225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 29.975392831s ago: executing program 1 (id=3245): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r3, 0x3a, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.935399035s ago: executing program 36 (id=3245): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r3, 0x3a, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.111487387s ago: executing program 9 (id=3842): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1}, 0x4048043) 3.084272259s ago: executing program 9 (id=3843): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.521135395s ago: executing program 8 (id=3854): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000050000000300000000fbff3198f0ade7ca098e2a27b3ea8fcd00803f00080000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000060000000400", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x3103, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0x3c, 0x0, 0x0, 0x0, 0x20800007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d612c"]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.782803275s ago: executing program 7 (id=3865): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.023752907s ago: executing program 8 (id=3875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) 994.05892ms ago: executing program 8 (id=3876): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) 974.907961ms ago: executing program 8 (id=3877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) sendmsg(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4040854) 871.588879ms ago: executing program 8 (id=3881): bpf$MAP_CREATE(0x0, 0x0, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, 0x0, 0x0) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x527, &(0x7f0000001040)="$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") 843.317801ms ago: executing program 7 (id=3885): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x519, 0x80, 0x0, 0x1bc}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) write$UHID_INPUT(r1, &(0x7f0000003ec0)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 792.145756ms ago: executing program 7 (id=3888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 768.200098ms ago: executing program 5 (id=3889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 701.054203ms ago: executing program 5 (id=3890): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 602.491521ms ago: executing program 5 (id=3892): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r1, 0x40099d}}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) close(0x3) 597.105791ms ago: executing program 7 (id=3893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 586.536152ms ago: executing program 9 (id=3894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f00000000c0), 0x83, 0x22e, &(0x7f0000000940)="$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") pipe(0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 492.77998ms ago: executing program 5 (id=3897): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 492.42672ms ago: executing program 9 (id=3898): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 488.42169ms ago: executing program 2 (id=3899): socketpair(0x15, 0x80000, 0x7, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xfe0f, {@in6_addr=@local, 0x86dd}}}]}, 0x38}}, 0x0) capget(&(0x7f0000003700)={0x20071026}, &(0x7f00000000c0)={0x453a, 0x7, 0x7, 0x9, 0x8, 0x5}) 465.074832ms ago: executing program 2 (id=3900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003c000000fc000000000000000000000000000000ffffffffffffffff0000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe805b7c"], 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 448.301754ms ago: executing program 9 (id=3901): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = syz_io_uring_setup(0x83d, &(0x7f0000000500)={0x0, 0x9770, 0x80, 0x2, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f0000000440)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x1}) io_uring_enter(r2, 0x3516, 0x8000000, 0x0, 0x0, 0x0) 428.974725ms ago: executing program 5 (id=3902): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 428.765235ms ago: executing program 2 (id=3903): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffffc, 0x234}, &(0x7f0000000140), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000700)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) 403.906917ms ago: executing program 7 (id=3904): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 283.884597ms ago: executing program 2 (id=3905): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x44}}, 0x40008c0) 239.157401ms ago: executing program 2 (id=3906): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 235.783191ms ago: executing program 7 (id=3907): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0, 0x0, 0x400007}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 195.235675ms ago: executing program 5 (id=3908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x402, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 176.316336ms ago: executing program 2 (id=3909): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(0x0, 0x64842, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 62.046065ms ago: executing program 9 (id=3910): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x8000000000000000}, 0x18) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)) stat(&(0x7f0000000700)='./file0/file1\x00', &(0x7f0000001c80)) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 0s ago: executing program 8 (id=3911): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x10) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): ): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 139.802056][ T9717] loop7: detected capacity change from 0 to 1024 [ 139.827319][ T9723] loop2: detected capacity change from 0 to 128 [ 139.846563][ T9717] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 140.024727][ T9733] loop5: detected capacity change from 0 to 512 [ 140.039644][ T9733] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.055123][ T9733] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2511: corrupted inode contents [ 140.067154][ T9733] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2511: mark_inode_dirty error [ 140.080047][ T9733] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2511: corrupted inode contents [ 140.092540][ T9733] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2511: mark_inode_dirty error [ 140.135116][ T9742] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 140.148215][ T9742] batman_adv: batadv0: Adding interface: ip6gretap1 [ 140.154852][ T9742] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 140.291806][ T9746] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.542077][ T9742] batman_adv: batadv0: Interface activated: ip6gretap1 [ 140.676546][ T9754] loop1: detected capacity change from 0 to 512 [ 140.687119][ T9754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.699324][ T9754] EXT4-fs (loop1): 1 truncate cleaned up [ 140.705386][ T9754] EXT4-fs mount: 36 callbacks suppressed [ 140.705412][ T9754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.740661][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.754432][ T9759] loop5: detected capacity change from 0 to 128 [ 140.766826][ T9759] bio_check_eod: 9593 callbacks suppressed [ 140.766842][ T9759] syz.5.2520: attempt to access beyond end of device [ 140.766842][ T9759] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 140.766925][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 140.775851][ T9759] syz.5.2520: attempt to access beyond end of device [ 140.775851][ T9759] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 140.800328][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 140.809055][ T9759] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 140.933916][ T9771] 9pnet: p9_errstr2errno: server reported unknown error [ 141.010248][ T9773] IPv6: Can't replace route, no match found [ 141.244587][ T9798] loop5: detected capacity change from 0 to 512 [ 141.259773][ T9798] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 141.267858][ T9798] EXT4-fs (loop5): orphan cleanup on readonly fs [ 141.274559][ T9798] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.289705][ T9798] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 141.298230][ T9798] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2538: bg 0: block 40: padding at end of block bitmap is not set [ 141.318412][ T9798] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 141.335473][ T9806] loop1: detected capacity change from 0 to 512 [ 141.346127][ T9798] EXT4-fs (loop5): 1 truncate cleaned up [ 141.353454][ T9798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.382105][ T9806] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2540: invalid block [ 141.394484][ T9806] EXT4-fs (loop1): Remounting filesystem read-only [ 141.402901][ T9806] EXT4-fs (loop1): 2 truncates cleaned up [ 141.409655][ T9806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.424433][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.434081][ T9806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.527325][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2550'. [ 141.555231][ T9827] hsr_slave_1 (unregistering): left promiscuous mode [ 141.637000][ T9839] loop5: detected capacity change from 0 to 2048 [ 141.680870][ T9839] loop5: p1 < > p4 [ 141.689245][ T9839] loop5: p4 size 8388608 extends beyond EOD, truncated [ 141.839888][ T9852] loop2: detected capacity change from 0 to 1024 [ 141.852285][ T9852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.900053][ T9852] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 141.937862][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.005957][ T9858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 142.280954][ T9862] loop7: detected capacity change from 0 to 128 [ 142.393303][ T9862] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.432053][ T9862] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.492537][ T7626] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.502177][ T9872] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 142.510912][ T9872] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 142.553772][ T9874] loop1: detected capacity change from 0 to 128 [ 142.594121][ T9874] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 142.603134][ T9874] FAT-fs (loop1): Filesystem has been set read-only [ 142.610184][ T9874] syz.1.2568: attempt to access beyond end of device [ 142.610184][ T9874] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 142.611127][ T9882] loop8: detected capacity change from 0 to 1024 [ 142.631130][ T9874] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 142.640090][ T9874] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 142.640809][ T9882] EXT4-fs: Ignoring removed nobh option [ 142.658983][ T9874] syz.1.2568: attempt to access beyond end of device [ 142.658983][ T9874] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 142.673153][ T9874] syz.1.2568: attempt to access beyond end of device [ 142.673153][ T9874] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 142.701315][ T9882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.704438][ T9874] syz.1.2568: attempt to access beyond end of device [ 142.704438][ T9874] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 142.728705][ T9874] syz.1.2568: attempt to access beyond end of device [ 142.728705][ T9874] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 142.743918][ T9883] syz.1.2568: attempt to access beyond end of device [ 142.743918][ T9883] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 142.757338][ T9883] Buffer I/O error on dev loop1, logical block 2065, async page read [ 142.786770][ T9138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.792445][ T9883] syz.1.2568: attempt to access beyond end of device [ 142.792445][ T9883] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 142.809453][ T9883] Buffer I/O error on dev loop1, logical block 2066, async page read [ 142.818068][ T9883] syz.1.2568: attempt to access beyond end of device [ 142.818068][ T9883] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 142.831692][ T9883] Buffer I/O error on dev loop1, logical block 2067, async page read [ 142.844756][ T9883] Buffer I/O error on dev loop1, logical block 2068, async page read [ 142.872605][ T9883] Buffer I/O error on dev loop1, logical block 2069, async page read [ 142.901735][ T9883] Buffer I/O error on dev loop1, logical block 2070, async page read [ 142.924366][ T9883] Buffer I/O error on dev loop1, logical block 2071, async page read [ 142.955340][ T9883] Buffer I/O error on dev loop1, logical block 2072, async page read [ 142.966528][ T9874] Buffer I/O error on dev loop1, logical block 2065, async page read [ 142.975408][ T9874] Buffer I/O error on dev loop1, logical block 2066, async page read [ 143.016661][ T9910] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 143.036891][ T9910] SELinux: failed to load policy [ 143.180434][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 143.180450][ T29] audit: type=1400 audit(1755936281.668:2782): avc: denied { create } for pid=9912 comm="syz.2.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.280415][ T29] audit: type=1400 audit(1755936281.718:2783): avc: denied { create } for pid=9918 comm="syz.5.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.357200][ T9925] netlink: 'syz.2.2588': attribute type 1 has an invalid length. [ 143.454512][ T9929] loop5: detected capacity change from 0 to 4096 [ 143.465219][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 143.474249][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 143.484773][ T29] audit: type=1400 audit(1755936281.948:2784): avc: denied { write } for pid=9932 comm="syz.2.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.513599][ T29] audit: type=1400 audit(1755936281.998:2785): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 143.541556][ T9929] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 143.553717][ T9929] System zones: 0-5 [ 143.554154][ T9936] loop1: detected capacity change from 0 to 128 [ 143.559321][ T9929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.613400][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.670939][ T9943] loop2: detected capacity change from 0 to 8192 [ 143.677121][ T9936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 143.686638][ T29] audit: type=1400 audit(1755936282.158:2786): avc: denied { mount } for pid=9942 comm="syz.2.2596" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 143.717980][ T9936] System zones: 1-3, 19-19, 35-36 [ 143.723823][ T9936] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.736724][ T29] audit: type=1326 audit(1755936282.208:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.5.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 143.761502][ T29] audit: type=1326 audit(1755936282.208:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.5.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 143.785133][ T29] audit: type=1326 audit(1755936282.208:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.5.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 143.786238][ T9936] ext4 filesystem being mounted at /556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.809621][ T29] audit: type=1326 audit(1755936282.208:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.5.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 143.865456][ T29] audit: type=1326 audit(1755936282.208:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.5.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 143.872518][ T9947] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.090026][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.438910][ T9955] pim6reg1: entered promiscuous mode [ 144.444955][ T9955] pim6reg1: entered allmulticast mode [ 144.575493][ T9965] loop2: detected capacity change from 0 to 128 [ 144.583541][ T9963] loop1: detected capacity change from 0 to 1024 [ 144.603329][ T9965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.612961][ T9965] FAT-fs (loop2): Filesystem has been set read-only [ 144.621055][ T9965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.629127][ T9965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.644447][ T9963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.672367][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.702846][ T9974] loop8: detected capacity change from 0 to 8192 [ 144.748557][ T9974] loop8: p1 p2 p4 < > [ 144.752829][ T9974] loop8: partition table partially beyond EOD, truncated [ 144.768586][ T9974] loop8: p1 start 16777216 is beyond EOD, truncated [ 144.775637][ T9974] loop8: p2 size 515840 extends beyond EOD, truncated [ 144.803642][ T9974] loop8: p4 start 16777216 is beyond EOD, truncated [ 144.971137][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2614'. [ 145.101439][T10001] loop8: detected capacity change from 0 to 128 [ 145.335527][T10007] netlink: 'syz.8.2622': attribute type 1 has an invalid length. [ 145.612973][T10011] loop5: detected capacity change from 0 to 8192 [ 145.718778][T10019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.829653][T10020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.848317][T10022] loop2: detected capacity change from 0 to 512 [ 146.108929][T10011] loop5: p1 p2 p4 < > [ 146.113140][T10011] loop5: partition table partially beyond EOD, truncated [ 146.121539][T10011] loop5: p1 start 16777216 is beyond EOD, truncated [ 146.128262][T10011] loop5: p2 size 515840 extends beyond EOD, truncated [ 146.146573][T10011] loop5: p4 start 16777216 is beyond EOD, truncated [ 146.154336][T10022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.169137][T10022] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.181667][T10031] loop1: detected capacity change from 0 to 1024 [ 146.213319][T10031] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.227441][T10022] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 146.239756][T10022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.251571][T10031] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.269628][T10031] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.282676][T10031] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2631: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.350291][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2637'. [ 146.364269][T10031] EXT4-fs (loop1): 1 orphan inode deleted [ 146.374454][T10053] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2640'. [ 146.399223][T10031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.424607][T10055] team0: Port device dummy0 removed [ 146.437855][T10055] bridge_slave_0: left promiscuous mode [ 146.443942][T10055] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.469667][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.496281][T10055] bridge_slave_1: left allmulticast mode [ 146.502337][T10055] bridge_slave_1: left promiscuous mode [ 146.508137][T10055] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.520371][T10055] bond0: (slave bond_slave_0): Releasing backup interface [ 146.532730][T10055] bond0: (slave bond_slave_1): Releasing backup interface [ 146.546992][T10055] team0: Port device team_slave_0 removed [ 146.571784][T10055] team0: Port device team_slave_1 removed [ 146.588852][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.596595][T10055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.613897][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.621823][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.658465][T10055] bond1: (slave geneve2): Releasing active interface [ 146.673858][T10055] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 146.681581][T10055] batman_adv: batadv0: Removing interface: ip6gretap1 [ 146.743459][T10072] netlink: 'syz.7.2647': attribute type 3 has an invalid length. [ 146.751349][T10072] netlink: 'syz.7.2647': attribute type 1 has an invalid length. [ 146.759249][T10072] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.2647'. [ 146.963369][T10088] loop7: detected capacity change from 0 to 4096 [ 146.973975][T10088] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 146.984338][T10088] System zones: 0-5 [ 146.992682][T10088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.058706][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.108703][T10101] tipc: Started in network mode [ 147.113620][T10101] tipc: Node identity 929fe9545c95, cluster identity 4711 [ 147.121419][T10101] tipc: Enabled bearer , priority 0 [ 147.151785][T10101] tipc: Disabling bearer [ 147.363395][T10110] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.711987][T10113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.149439][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 148.158550][T10124] IPVS: Error joining to the multicast group [ 148.220038][T10133] loop1: detected capacity change from 0 to 2048 [ 148.227427][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 148.227442][ T29] audit: type=1400 audit(1755936286.708:2925): avc: denied { name_bind } for pid=10134 comm="syz.7.2673" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 148.257340][T10133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 148.275384][ T29] audit: type=1400 audit(1755936286.768:2926): avc: denied { add_name } for pid=10132 comm="syz.1.2672" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.275422][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2674'. [ 148.296519][ T29] audit: type=1400 audit(1755936286.768:2927): avc: denied { create } for pid=10132 comm="syz.1.2672" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.325897][ T29] audit: type=1400 audit(1755936286.798:2928): avc: denied { read write } for pid=10132 comm="syz.1.2672" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.349064][ T29] audit: type=1400 audit(1755936286.798:2929): avc: denied { open } for pid=10132 comm="syz.1.2672" path="/576/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.356564][T10133] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.387695][T10133] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 148.400024][T10133] EXT4-fs (loop1): This should not happen!! Data will be lost [ 148.400024][T10133] [ 148.409902][T10133] EXT4-fs (loop1): Total free blocks count 0 [ 148.415916][T10133] EXT4-fs (loop1): Free/Dirty block details [ 148.422055][T10133] EXT4-fs (loop1): free_blocks=2415919104 [ 148.428018][T10133] EXT4-fs (loop1): dirty_blocks=32 [ 148.433209][T10133] EXT4-fs (loop1): Block reservation details [ 148.439281][T10133] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 148.447191][ T29] audit: type=1326 audit(1755936286.918:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 148.470758][ T29] audit: type=1326 audit(1755936286.918:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 148.494537][ T29] audit: type=1326 audit(1755936286.918:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 148.518272][ T29] audit: type=1326 audit(1755936286.918:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 148.541877][ T29] audit: type=1326 audit(1755936286.918:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 148.566992][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 148.617188][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'. [ 148.971777][T10176] loop1: detected capacity change from 0 to 1024 [ 148.979527][T10176] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 149.460705][T10194] loop7: detected capacity change from 0 to 1024 [ 149.570822][T10194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.649582][T10194] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.679539][T10203] loop8: detected capacity change from 0 to 256 [ 149.692562][T10206] tipc: New replicast peer: 255.255.255.255 [ 149.698888][T10206] tipc: Enabled bearer , priority 10 [ 149.700063][T10203] FAT-fs (loop8): Directory bread(block 64) failed [ 149.720955][T10203] FAT-fs (loop8): Directory bread(block 65) failed [ 149.727738][T10203] FAT-fs (loop8): Directory bread(block 66) failed [ 149.728466][T10194] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 1: comm syz.7.2698: lblock 1 mapped to illegal pblock 1 (length 15) [ 149.734459][T10203] FAT-fs (loop8): Directory bread(block 67) failed [ 149.755458][T10203] FAT-fs (loop8): Directory bread(block 68) failed [ 149.762272][T10203] FAT-fs (loop8): Directory bread(block 69) failed [ 149.769166][T10203] FAT-fs (loop8): Directory bread(block 70) failed [ 149.788696][T10203] FAT-fs (loop8): Directory bread(block 71) failed [ 149.796213][T10203] FAT-fs (loop8): Directory bread(block 72) failed [ 149.803176][T10203] FAT-fs (loop8): Directory bread(block 73) failed [ 149.810427][T10194] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 149.823031][T10194] EXT4-fs (loop7): This should not happen!! Data will be lost [ 149.823031][T10194] [ 149.838809][T10203] bio_check_eod: 66063 callbacks suppressed [ 149.838871][T10203] syz.8.2701: attempt to access beyond end of device [ 149.838871][T10203] loop8: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 149.860504][T10210] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 1: comm syz.7.2698: lblock 1 mapped to illegal pblock 1 (length 3) [ 149.876394][T10194] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 149.898297][T10210] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 1: comm syz.7.2698: lblock 1 mapped to illegal pblock 1 (length 3) [ 149.932401][T10217] loop1: detected capacity change from 0 to 512 [ 149.949128][T10210] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: block 1: comm syz.7.2698: lblock 1 mapped to illegal pblock 1 (length 3) [ 149.983720][T10217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.997069][T10217] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.012373][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.034349][T10226] loop7: detected capacity change from 0 to 512 [ 150.061218][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 150.071375][T10227] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 150.077915][T10227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 150.085652][T10227] vhci_hcd vhci_hcd.0: Device attached [ 150.128516][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.236192][T10241] geneve2: entered promiscuous mode [ 150.327995][ T36] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 150.527735][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2721'. [ 150.536743][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2721'. [ 150.552906][ T51] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.562855][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2721'. [ 150.563596][ T51] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.571792][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2721'. [ 150.598723][ T51] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.607757][ T51] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.698923][T10268] loop5: detected capacity change from 0 to 128 [ 150.737291][T10268] syz.5.2727: attempt to access beyond end of device [ 150.737291][T10268] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 150.811333][T10228] vhci_hcd: connection reset by peer [ 150.817774][ T51] vhci_hcd: stop threads [ 150.822103][ T51] vhci_hcd: release socket [ 150.826716][ T51] vhci_hcd: disconnect device [ 150.856855][ T3390] tipc: Node number set to 3456821588 [ 150.897295][T10279] loop1: detected capacity change from 0 to 1024 [ 150.910970][T10279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.161266][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.274013][T10288] loop7: detected capacity change from 0 to 256 [ 151.284447][T10288] msdos: Unknown parameter '' [ 151.390531][T10290] netlink: 'syz.5.2737': attribute type 12 has an invalid length. [ 151.639829][T10310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.905322][T10314] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2746'. [ 152.162555][T10318] loop7: detected capacity change from 0 to 32768 [ 152.299143][T10328] loop7: detected capacity change from 0 to 512 [ 152.306234][T10328] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 152.373147][T10328] EXT4-fs (loop7): 1 truncate cleaned up [ 152.381812][T10328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.426592][T10328] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 152.450598][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.589519][T10352] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.704559][T10356] loop5: detected capacity change from 0 to 128 [ 152.760226][T10356] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.887808][T10356] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.965138][T10366] netlink: 2020 bytes leftover after parsing attributes in process `syz.8.2766'. [ 152.974503][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2766'. [ 152.993571][ T6801] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.022702][T10372] loop5: detected capacity change from 0 to 128 [ 153.085785][T10380] loop5: detected capacity change from 0 to 128 [ 153.092964][T10376] syz.7.2771 (10376) used greatest stack depth: 9272 bytes left [ 153.108798][T10382] netdevsim netdevsim7 : renamed from netdevsim1 (while UP) [ 153.110917][T10380] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 153.129978][T10380] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.225036][ T6801] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.269450][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 153.269469][ T29] audit: type=1326 audit(1755936291.758:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.317738][ T29] audit: type=1326 audit(1755936291.788:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.341975][ T29] audit: type=1326 audit(1755936291.788:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.366011][ T29] audit: type=1326 audit(1755936291.788:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.389850][ T29] audit: type=1326 audit(1755936291.788:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.413583][ T29] audit: type=1326 audit(1755936291.788:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.437317][ T29] audit: type=1326 audit(1755936291.788:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.461332][ T29] audit: type=1326 audit(1755936291.788:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.485894][ T29] audit: type=1326 audit(1755936291.788:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.509450][ T29] audit: type=1326 audit(1755936291.788:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10392 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 153.780361][T10423] loop5: detected capacity change from 0 to 128 [ 153.819620][T10423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 153.830536][T10423] System zones: 1-3, 19-19, 35-36 [ 153.845551][T10423] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 153.848731][T10435] loop7: detected capacity change from 0 to 128 [ 153.873506][T10423] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.908353][T10435] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 153.909808][T10429] team0: Port device dummy0 removed [ 153.916502][T10435] FAT-fs (loop7): Filesystem has been set read-only [ 153.937475][T10429] bridge_slave_0: left promiscuous mode [ 153.943320][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.953653][T10429] bridge_slave_1: left allmulticast mode [ 153.959775][T10429] bridge_slave_1: left promiscuous mode [ 153.965636][T10429] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.965726][T10441] loop8: detected capacity change from 0 to 128 [ 153.975367][T10435] syz.7.2792: attempt to access beyond end of device [ 153.975367][T10435] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.003084][T10429] bond0: (slave bond_slave_0): Releasing backup interface [ 154.016934][T10441] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.044804][T10429] bond0: (slave bond_slave_1): Releasing backup interface [ 154.053347][T10441] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.107246][T10429] team0: Port device team_slave_0 removed [ 154.118581][ T9138] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.130713][T10429] team0: Port device team_slave_1 removed [ 154.173948][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.181889][T10429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.210196][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.217812][T10429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.243267][T10454] loop1: detected capacity change from 0 to 2048 [ 154.266811][T10454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.267385][T10429] batadv1: left allmulticast mode [ 154.284106][T10429] batadv1: left promiscuous mode [ 154.289319][T10429] bridge0: port 3(batadv1) entered disabled state [ 154.523998][T10423] infiniband syz1: set active [ 154.528778][T10423] infiniband syz1: added syz_tun [ 154.540623][T10423] RDS/IB: syz1: added [ 154.544722][T10423] smc: adding ib device syz1 with port count 1 [ 154.552173][T10423] smc: ib device syz1 port 1 has pnetid [ 155.031944][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.289636][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2797'. [ 155.298753][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2797'. [ 155.357212][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2799'. [ 155.366379][T10469] netlink: 'syz.8.2799': attribute type 11 has an invalid length. [ 155.408817][T10473] bridge_slave_0: left allmulticast mode [ 155.414664][T10473] bridge_slave_0: left promiscuous mode [ 155.420631][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.434828][T10473] bridge_slave_1: left allmulticast mode [ 155.436444][ T6801] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.440779][T10473] bridge_slave_1: left promiscuous mode [ 155.453397][ T36] vhci_hcd: vhci_device speed not set [ 155.467220][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.497558][T10473] bond0: (slave bond_slave_0): Releasing backup interface [ 155.529035][T10473] bond_slave_0: left promiscuous mode [ 155.550034][T10473] bond0: (slave bond_slave_1): Releasing backup interface [ 155.583006][T10473] bond_slave_1: left promiscuous mode [ 155.655985][T10473] team0: Port device team_slave_0 removed [ 155.675918][T10473] team0: Port device team_slave_1 removed [ 155.692714][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.693283][T10473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.700235][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.700270][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.707749][T10473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.715273][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.715313][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.745839][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.753485][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.763215][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.771185][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.779062][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.788724][ T3404] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.852962][T10473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.860486][T10473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.902432][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2799'. [ 155.911611][T10469] netlink: 'syz.8.2799': attribute type 11 has an invalid length. [ 156.042331][T10514] loop5: detected capacity change from 0 to 512 [ 156.087631][T10517] loop8: detected capacity change from 0 to 512 [ 156.103419][T10517] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 156.116320][T10514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.119788][T10523] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2823'. [ 156.131988][T10514] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.143340][T10517] EXT4-fs (loop8): 1 truncate cleaned up [ 156.268890][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.401150][T10529] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.442168][T10531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2826'. [ 156.519707][T10529] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.583559][T10529] netdevsim netdevsim7  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.650786][T10517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.661165][T10529] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.763893][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.802075][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.812292][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.820950][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.996273][ T9138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.047239][T10557] loop8: detected capacity change from 0 to 1024 [ 157.068317][T10559] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2837'. [ 157.270872][T10557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.358100][T10557] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.418308][T10557] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.2836: lblock 1 mapped to illegal pblock 1 (length 15) [ 157.457534][T10557] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.2836: lblock 1 mapped to illegal pblock 1 (length 3) [ 157.511401][T10557] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 157.524195][T10557] EXT4-fs (loop8): This should not happen!! Data will be lost [ 157.524195][T10557] [ 157.535930][T10557] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 4: comm syz.8.2836: lblock 4 mapped to illegal pblock 4 (length 1) [ 157.563672][T10581] pimreg: entered allmulticast mode [ 157.575364][ T9138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.590159][T10581] pimreg: left allmulticast mode [ 157.667196][T10587] loop7: detected capacity change from 0 to 512 [ 157.690645][T10587] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.707584][T10587] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 157.733602][T10587] EXT4-fs (loop7): 1 truncate cleaned up [ 157.738247][T10593] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2851'. [ 157.744181][T10587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.815444][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2852'. [ 157.846793][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.026755][T10605] loop8: detected capacity change from 0 to 164 [ 158.052331][T10605] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.062616][T10606] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 158.078747][T10605] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.090908][T10605] rock: directory entry would overflow storage [ 158.097404][T10605] rock: sig=0x4f50, size=4, remaining=3 [ 158.103154][T10605] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.124899][T10606] SELinux: failed to load policy [ 158.167231][T10610] loop7: detected capacity change from 0 to 512 [ 158.217106][T10610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.258219][T10610] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.339967][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 158.339986][ T29] audit: type=1400 audit(1755936296.828:3177): avc: denied { setattr } for pid=10609 comm="syz.7.2860" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.414380][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 158.472267][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2867'. [ 158.570741][T10636] loop8: detected capacity change from 0 to 2048 [ 158.587713][ T29] audit: type=1400 audit(1755936297.058:3178): avc: denied { read } for pid=10639 comm="syz.1.2871" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.611971][ T29] audit: type=1400 audit(1755936297.058:3179): avc: denied { open } for pid=10639 comm="syz.1.2871" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.635477][ T29] audit: type=1400 audit(1755936297.058:3180): avc: denied { ioctl } for pid=10639 comm="syz.1.2871" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.699112][ T29] audit: type=1326 audit(1755936297.168:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18edebe9 code=0x7ffc0000 [ 158.723966][ T29] audit: type=1326 audit(1755936297.168:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18edebe9 code=0x7ffc0000 [ 158.750704][ T29] audit: type=1326 audit(1755936297.168:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef18edebe9 code=0x7ffc0000 [ 158.776361][ T29] audit: type=1326 audit(1755936297.168:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18edebe9 code=0x7ffc0000 [ 158.800206][ T29] audit: type=1326 audit(1755936297.168:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef18edebe9 code=0x7ffc0000 [ 158.825116][ T29] audit: type=1326 audit(1755936297.168:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18edebe9 code=0x7ffc0000 [ 158.854491][T10636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 158.881465][T10635] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 158.909740][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 158.910093][T10659] loop1: detected capacity change from 0 to 512 [ 158.926180][T10662] netlink: 'syz.5.2878': attribute type 12 has an invalid length. [ 158.927438][T10659] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.945996][T10659] EXT4-fs (loop1): 1 truncate cleaned up [ 158.954125][T10659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.967756][T10635] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 158.980540][T10635] EXT4-fs (loop8): This should not happen!! Data will be lost [ 158.980540][T10635] [ 158.990261][T10635] EXT4-fs (loop8): Total free blocks count 0 [ 158.996811][T10635] EXT4-fs (loop8): Free/Dirty block details [ 159.003634][T10635] EXT4-fs (loop8): free_blocks=2415919104 [ 159.009637][T10635] EXT4-fs (loop8): dirty_blocks=16 [ 159.015116][T10635] EXT4-fs (loop8): Block reservation details [ 159.022430][T10635] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 159.041897][ T54] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 159.299689][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.719921][T10710] bridge0: entered promiscuous mode [ 159.754228][T10710] bridge0: port 1(macvtap1) entered blocking state [ 159.762455][T10710] bridge0: port 1(macvtap1) entered disabled state [ 159.779547][T10710] macvtap1: entered allmulticast mode [ 159.785067][T10710] bridge0: entered allmulticast mode [ 159.826057][T10710] macvtap1: left allmulticast mode [ 159.832521][T10710] bridge0: left allmulticast mode [ 159.906988][T10718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.937329][T10710] bridge0: left promiscuous mode [ 160.297815][T10723] loop8: detected capacity change from 0 to 512 [ 160.371906][T10723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.412999][T10723] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.589506][T10733] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 160.596486][T10733] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.604931][T10733] vhci_hcd vhci_hcd.0: Device attached [ 160.773532][ T9138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.888034][ T3390] usb 16-1: SetAddress Request (2) to port 0 [ 160.894224][ T3390] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 161.013601][T10778] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2912'. [ 161.035198][T10778] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2912'. [ 161.224510][T10807] loop1: detected capacity change from 0 to 512 [ 161.246238][T10807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.283485][T10807] EXT4-fs (loop1): 1 orphan inode deleted [ 161.289769][T10807] EXT4-fs (loop1): 1 truncate cleaned up [ 161.311350][T10807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.345614][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2925'. [ 161.537579][T10807] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 161.559533][T10807] EXT4-fs (loop1): Remounting filesystem read-only [ 161.665779][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.941397][T10903] loop1: detected capacity change from 0 to 164 [ 161.954164][T10903] syz.1.2942: attempt to access beyond end of device [ 161.954164][T10903] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 161.969683][T10903] syz.1.2942: attempt to access beyond end of device [ 161.969683][T10903] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 162.453640][T10975] pim6reg1: entered promiscuous mode [ 162.460947][T10975] pim6reg1: entered allmulticast mode [ 162.507128][T10734] vhci_hcd: connection reset by peer [ 162.517428][ T297] vhci_hcd: stop threads [ 162.523267][ T297] vhci_hcd: release socket [ 162.528117][ T297] vhci_hcd: disconnect device [ 163.222152][T11047] bridge0: entered promiscuous mode [ 163.240603][T11047] bridge0: port 3(macvtap1) entered blocking state [ 163.248060][T11047] bridge0: port 3(macvtap1) entered disabled state [ 163.266564][T11047] macvtap1: entered allmulticast mode [ 163.272715][T11047] bridge0: entered allmulticast mode [ 163.293372][T11047] macvtap1: left allmulticast mode [ 163.299929][T11047] bridge0: left allmulticast mode [ 163.306861][ T9] hid_parser_main: 16 callbacks suppressed [ 163.306884][ T9] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 163.324474][ T9] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 163.340585][T11047] bridge0: left promiscuous mode [ 163.364020][ T9] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 163.389085][ T9] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 163.599491][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 163.599528][ T29] audit: type=1400 audit(1755936302.088:3304): avc: denied { sqpoll } for pid=11078 comm="syz.5.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.702920][T11082] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.912978][T11085] loop1: detected capacity change from 0 to 512 [ 164.148384][T11088] loop5: detected capacity change from 0 to 1024 [ 164.157058][T11085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.173293][ T29] audit: type=1400 audit(1755936302.658:3305): avc: denied { cpu } for pid=11075 comm="syz.7.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 164.235585][T11085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.255654][T11088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.277872][T11085] ext4 filesystem being mounted at /658/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.364647][ T29] audit: type=1400 audit(1755936302.848:3306): avc: denied { mounton } for pid=11087 comm="syz.5.3010" path="/332/file1/bus" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.462584][T11085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 164.556096][T11085] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 164.571906][T11085] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.571906][T11085] [ 164.584478][T11085] EXT4-fs (loop1): Total free blocks count 0 [ 164.591903][T11085] EXT4-fs (loop1): Free/Dirty block details [ 164.599964][T11085] EXT4-fs (loop1): free_blocks=39626 [ 164.607717][T11085] EXT4-fs (loop1): dirty_blocks=1 [ 164.613692][T11085] EXT4-fs (loop1): Block reservation details [ 164.621824][T11085] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 164.658055][T11088] support for cryptoloop has been removed. Use dm-crypt instead. [ 164.691021][ T29] audit: type=1400 audit(1755936303.168:3307): avc: denied { rmdir } for pid=6801 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.716217][ T29] audit: type=1400 audit(1755936303.178:3308): avc: denied { unlink } for pid=6801 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.745370][ T29] audit: type=1400 audit(1755936303.178:3309): avc: denied { unmount } for pid=6801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 164.769261][ T29] audit: type=1400 audit(1755936303.178:3310): avc: denied { unlink } for pid=6801 comm="syz-executor" name="bus" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.795287][T11076] uprobe: syz.7.3005:11076 failed to unregister, leaking uprobe [ 164.844227][ T29] audit: type=1400 audit(1755936303.328:3311): avc: denied { create } for pid=11103 comm="syz.5.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 164.888832][ T29] audit: type=1400 audit(1755936303.328:3312): avc: denied { bind } for pid=11103 comm="syz.5.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 164.993986][ T29] audit: type=1326 audit(1755936303.478:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11109 comm="syz.8.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 165.177428][T11130] loop8: detected capacity change from 0 to 512 [ 165.191306][T11130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 165.203760][T11130] System zones: 1-12 [ 165.213112][T11130] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.3025: error while reading EA inode 32 err=-116 [ 165.213174][T11133] SELinux: policydb version 0 does not match my version range 15-35 [ 165.213704][T11133] SELinux: failed to load policy [ 165.258271][T11130] EXT4-fs (loop8): Remounting filesystem read-only [ 165.265295][T11130] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 165.293974][T11130] EXT4-fs (loop8): 1 orphan inode deleted [ 165.330961][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3028'. [ 165.354497][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.364920][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.377541][T11145] wg2: entered promiscuous mode [ 165.382566][T11145] wg2: entered allmulticast mode [ 165.743886][T11180] netlink: 'syz.2.3045': attribute type 27 has an invalid length. [ 165.863239][T11180] 0ªX¹¦À: left allmulticast mode [ 165.927987][ T3390] usb 16-1: device descriptor read/8, error -110 [ 165.975249][T11194] netlink: 'syz.5.3048': attribute type 10 has an invalid length. [ 166.040030][ T3390] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 166.068543][ T3390] usb 16-1: enqueue for inactive port 0 [ 166.079354][T11196] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.100224][ T3390] usb 16-1: enqueue for inactive port 0 [ 166.106363][ T3390] usb 16-1: enqueue for inactive port 0 [ 166.238407][T11194] ipvlan0: entered allmulticast mode [ 166.244416][T11194] veth0_vlan: entered allmulticast mode [ 166.287761][T11194] team0: Device ipvlan0 failed to register rx_handler [ 166.321666][ T51] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.331354][ T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.437937][ T51] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.447133][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.528886][ T51] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.538155][ T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.552432][ T51] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.561567][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.617070][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'. [ 166.694713][T11215] loop1: detected capacity change from 0 to 512 [ 166.703887][T11215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.719002][ T10] Process accounting resumed [ 166.756544][T11215] EXT4-fs (loop1): 1 truncate cleaned up [ 166.880630][T11224] netlink: 'syz.8.3060': attribute type 10 has an invalid length. [ 166.895553][T11224] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.906017][T11224] bond0: (slave team0): Enslaving as an active interface with an up link [ 167.148388][ T3390] usb usb16-port1: attempt power cycle [ 167.163534][T11251] pim6reg: entered allmulticast mode [ 167.194020][T11251] pim6reg: left allmulticast mode [ 167.342455][T11277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11277 comm=syz.7.3084 [ 167.536134][T11283] loop5: detected capacity change from 0 to 512 [ 167.670848][T11286] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.092027][T11283] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.256599][T11310] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3094'. [ 168.335461][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 168.345172][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 168.551940][T11332] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3105'. [ 168.687039][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 168.687058][ T29] audit: type=1400 audit(1755936307.168:3397): avc: denied { create } for pid=11347 comm="syz.1.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.720964][ T29] audit: type=1400 audit(1755936307.208:3398): avc: denied { write } for pid=11347 comm="syz.1.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.749700][ T29] audit: type=1400 audit(1755936307.208:3399): avc: denied { setopt } for pid=11347 comm="syz.1.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.770855][ T29] audit: type=1400 audit(1755936307.208:3400): avc: denied { write } for pid=11347 comm="syz.1.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.893931][ T29] audit: type=1400 audit(1755936307.378:3401): avc: denied { setopt } for pid=11362 comm="syz.5.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.032844][ T29] audit: type=1400 audit(1755936307.518:3402): avc: denied { map } for pid=11376 comm="syz.5.3125" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.064700][ T29] audit: type=1400 audit(1755936307.548:3403): avc: denied { map } for pid=11376 comm="syz.5.3125" path="socket:[33054]" dev="sockfs" ino=33054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 169.128331][ T3390] usb usb16-port1: unable to enumerate USB device [ 169.145124][ T29] audit: type=1400 audit(1755936307.628:3404): avc: denied { firmware_load } for pid=11380 comm="syz.2.3126" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 169.222004][T11385] loop7: detected capacity change from 0 to 512 [ 169.238792][T11385] EXT4-fs: Ignoring removed oldalloc option [ 169.288281][T11385] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 169.301045][ T29] audit: type=1400 audit(1755936307.788:3405): avc: denied { read } for pid=11389 comm="syz.8.3131" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.324747][ T29] audit: type=1400 audit(1755936307.788:3406): avc: denied { open } for pid=11389 comm="syz.8.3131" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.413609][T11391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.492886][T11385] EXT4-fs (loop7): 1 truncate cleaned up [ 169.514674][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 169.572947][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 169.896318][T11408] loop8: detected capacity change from 0 to 512 [ 169.907979][T11408] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 169.943699][T11408] EXT4-fs (loop8): 1 truncate cleaned up [ 170.175544][T11442] loop1: detected capacity change from 0 to 512 [ 170.182896][T11442] EXT4-fs: Ignoring removed oldalloc option [ 170.190988][T11442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.206496][T11442] EXT4-fs (loop1): 1 truncate cleaned up [ 170.310306][T11457] loop7: detected capacity change from 0 to 4096 [ 170.393902][T11469] loop8: detected capacity change from 0 to 512 [ 170.402616][T11469] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 170.420206][T11469] EXT4-fs (loop8): 1 truncate cleaned up [ 170.518756][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3165'. [ 170.540311][T11479] netlink: 'syz.5.3166': attribute type 27 has an invalid length. [ 170.737330][T11188] kernel write not supported for file bpf-prog (pid: 11188 comm: kworker/0:10) [ 170.738423][T11479] ipvlan0: left allmulticast mode [ 170.751495][T11479] veth0_vlan: left allmulticast mode [ 170.880820][ T3404] syz1: Port: 1 Link DOWN [ 170.885628][ T37] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.910560][ T37] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.983416][T11516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.127405][T11519] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 171.178186][ T37] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.260609][ T37] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.353701][T11525] syzkaller0: entered promiscuous mode [ 171.360325][T11525] syzkaller0: entered allmulticast mode [ 171.547507][T11537] loop8: detected capacity change from 0 to 1024 [ 171.560324][T11537] EXT4-fs mount: 18 callbacks suppressed [ 171.560344][T11537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.595510][ T9138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.620926][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3193'. [ 171.772619][T11565] loop1: detected capacity change from 0 to 164 [ 171.782646][T11565] Unable to read rock-ridge attributes [ 171.791557][T11565] Unable to read rock-ridge attributes [ 171.797880][T11565] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 171.902321][T11578] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3202'. [ 172.027757][T11597] geneve3: entered promiscuous mode [ 172.033662][T11597] geneve3: entered allmulticast mode [ 172.052316][T11593] loop1: detected capacity change from 0 to 8192 [ 172.060682][T11593] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.267121][T11621] netlink: 'syz.5.3229': attribute type 2 has an invalid length. [ 172.425637][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3232'. [ 172.538828][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3232'. [ 172.591189][T11641] pim6reg: entered allmulticast mode [ 172.601202][T11641] pim6reg: left allmulticast mode [ 172.712563][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.723039][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.782057][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.792513][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.862068][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.872495][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.939017][T11672] vlan2: entered allmulticast mode [ 172.948334][T11672] dummy0: entered allmulticast mode [ 172.981015][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.991390][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.149724][T11688] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3255'. [ 173.412549][ T37] bond0 (unregistering): left promiscuous mode [ 173.423774][ T37] bond0 (unregistering): Released all slaves [ 173.437077][ T37] bond1 (unregistering): Released all slaves [ 173.490351][ T37] tipc: Disabling bearer [ 173.495660][ T37] tipc: Left network mode [ 173.688796][ T37] hsr_slave_0: left promiscuous mode [ 173.703884][ T37] veth1_macvtap: left promiscuous mode [ 173.711888][ T37] veth0_macvtap: left promiscuous mode [ 173.801711][T11660] chnl_net:caif_netlink_parms(): no params data found [ 173.821920][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 173.821939][ T29] audit: type=1326 audit(1755936312.308:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 173.900315][ T29] audit: type=1326 audit(1755936312.308:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 173.924183][ T29] audit: type=1326 audit(1755936312.348:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 173.948322][ T29] audit: type=1326 audit(1755936312.348:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 173.972209][ T29] audit: type=1326 audit(1755936312.348:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 173.995993][ T29] audit: type=1326 audit(1755936312.348:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 174.019712][ T29] audit: type=1326 audit(1755936312.348:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 174.043275][ T29] audit: type=1326 audit(1755936312.348:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 174.066950][ T29] audit: type=1326 audit(1755936312.348:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 174.090546][ T29] audit: type=1326 audit(1755936312.348:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.8.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a8f8ebe9 code=0x7ffc0000 [ 174.115946][T11660] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.123184][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.145619][T11660] bridge_slave_0: entered allmulticast mode [ 174.152412][T11660] bridge_slave_0: entered promiscuous mode [ 174.160010][T11660] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.167150][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.186023][T11660] bridge_slave_1: entered allmulticast mode [ 174.192820][T11728] netlink: 'syz.8.3270': attribute type 13 has an invalid length. [ 174.201598][T11660] bridge_slave_1: entered promiscuous mode [ 174.274887][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.282190][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.336355][T11728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.348172][T11728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.455850][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.469972][T11660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.481810][T11660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.508143][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.535059][T11660] team0: Port device team_slave_0 added [ 174.548494][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.563589][T11660] team0: Port device team_slave_1 added [ 174.610898][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.622016][ T37] IPVS: stop unused estimator thread 0... [ 174.629346][T11660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.638501][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.669921][T11660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.682568][T11660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.689803][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.716333][T11660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.765598][T11660] hsr_slave_0: entered promiscuous mode [ 174.786374][T11660] hsr_slave_1: entered promiscuous mode [ 174.806197][T11660] debugfs: 'hsr0' already exists in 'hsr' [ 174.812344][T11660] Cannot create hsr debugfs directory [ 174.991422][T11769] tipc: Started in network mode [ 174.993872][T11771] loop5: detected capacity change from 0 to 512 [ 174.998377][T11769] tipc: Node identity ac14140f, cluster identity 4711 [ 175.027834][T11769] tipc: New replicast peer: 255.255.255.255 [ 175.034345][T11769] tipc: Enabled bearer , priority 10 [ 175.046639][T11778] netlink: 340 bytes leftover after parsing attributes in process `syz.8.3287'. [ 175.066056][T11771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.067887][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3291'. [ 175.098079][T11771] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.113702][T11660] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 175.132834][T11781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.144407][T11660] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 175.154814][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.170711][T11660] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 175.194573][T11660] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 175.305622][T11660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.338924][T11660] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.361808][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.369167][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.379584][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.386972][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.822826][T11806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.003010][T11660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.157969][ T3390] tipc: Node number set to 2886997007 [ 176.252567][T11834] vhci_hcd: invalid port number 96 [ 176.257857][T11834] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 176.259390][T11660] veth0_vlan: entered promiscuous mode [ 176.277452][T11660] veth1_vlan: entered promiscuous mode [ 176.295140][T11660] veth0_macvtap: entered promiscuous mode [ 176.303831][T11660] veth1_macvtap: entered promiscuous mode [ 176.316822][T11660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.329379][T11660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.342802][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.352527][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.372499][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.382542][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.461466][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3307'. [ 176.471540][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3307'. [ 176.780147][T11861] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.184874][T11881] netlink: 'syz.5.3320': attribute type 13 has an invalid length. [ 177.221875][T11888] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3323'. [ 177.295570][T11898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11898 comm=syz.5.3328 [ 177.311729][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3328'. [ 177.958194][T11918] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.332640][T11928] macvtap1: entered allmulticast mode [ 178.338147][T11928] bridge0: entered allmulticast mode [ 178.357023][T11927] loop9: detected capacity change from 0 to 4096 [ 178.368687][T11928] bridge0: port 3(macvtap1) entered blocking state [ 178.375468][T11928] bridge0: port 3(macvtap1) entered disabled state [ 178.385119][T11927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.399112][T11928] bridge0: left allmulticast mode [ 178.412247][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3342'. [ 178.426456][T11660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.466441][T11940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11940 comm=syz.9.3343 [ 178.517594][T11944] tipc: New replicast peer: 100.1.1.1 [ 178.523305][T11944] tipc: Enabled bearer , priority 10 [ 178.572548][T11952] loop9: detected capacity change from 0 to 512 [ 178.611652][T11952] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.646422][T11952] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.729751][T11660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.783915][T11965] loop9: detected capacity change from 0 to 128 [ 178.827548][T11971] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3358'. [ 178.904438][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 178.904456][ T29] audit: type=1326 audit(1755936317.388:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 178.958225][T11979] vhci_hcd: invalid port number 96 [ 178.963378][T11979] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 178.967855][ T29] audit: type=1326 audit(1755936317.388:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 178.994231][ T29] audit: type=1326 audit(1755936317.388:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.017817][ T29] audit: type=1326 audit(1755936317.388:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.041486][ T29] audit: type=1326 audit(1755936317.388:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.065113][ T29] audit: type=1326 audit(1755936317.388:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.088827][ T29] audit: type=1326 audit(1755936317.388:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.112367][ T29] audit: type=1326 audit(1755936317.388:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.136014][ T29] audit: type=1326 audit(1755936317.388:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.159637][ T29] audit: type=1326 audit(1755936317.388:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.9.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62dce0ebe9 code=0x7ffc0000 [ 179.277101][T11987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11987 comm=syz.9.3365 [ 180.482286][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3380'. [ 180.491614][T12023] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3380'. [ 180.501184][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3380'. [ 180.518366][T12023] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3380'. [ 180.527686][T12023] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3380'. [ 180.537141][T12020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.275408][T12117] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.561459][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3399'. [ 181.809670][T12137] SELinux: ebitmap: truncated map [ 181.820457][T12137] SELinux: failed to load policy [ 181.901814][T12151] netlink: zone id is out of range [ 182.111855][ T47] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 182.551798][T12231] __nla_validate_parse: 2 callbacks suppressed [ 182.551818][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3451'. [ 182.567827][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3451'. [ 182.577652][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3451'. [ 182.586874][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3451'. [ 182.655294][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3454'. [ 182.730237][T12243] syzkaller0: entered promiscuous mode [ 182.735808][T12243] syzkaller0: entered allmulticast mode [ 182.768951][T12249] loop5: detected capacity change from 0 to 1024 [ 182.792693][T12249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.804925][T12249] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.944918][T12049] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:32: bg 0: block 393: padding at end of block bitmap is not set [ 183.027057][T12049] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 183.039868][T12049] EXT4-fs (loop5): This should not happen!! Data will be lost [ 183.039868][T12049] [ 183.060559][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.947448][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3474'. [ 184.007154][T12294] atomic_op ffff8881356d3528 conn xmit_atomic 0000000000000000 [ 184.009400][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 184.009419][ T29] audit: type=1400 audit(1755936322.488:3802): avc: denied { create } for pid=12293 comm="syz.5.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.055316][T12299] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3478'. [ 184.065088][ T29] audit: type=1326 audit(1755936322.538:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.088682][ T29] audit: type=1326 audit(1755936322.538:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.112683][ T29] audit: type=1326 audit(1755936322.558:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.136318][ T29] audit: type=1326 audit(1755936322.558:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.159856][ T29] audit: type=1326 audit(1755936322.558:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.183528][ T29] audit: type=1326 audit(1755936322.558:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.207142][ T29] audit: type=1326 audit(1755936322.558:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.230784][ T29] audit: type=1326 audit(1755936322.558:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.254590][ T29] audit: type=1326 audit(1755936322.558:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.7.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 184.281957][T12302] pim6reg: entered allmulticast mode [ 184.309419][T12302] pim6reg: left allmulticast mode [ 184.352926][T12310] loop5: detected capacity change from 0 to 1024 [ 184.359317][T12312] serio: Serial port ptm0 [ 184.363991][T12310] EXT4-fs: Ignoring removed nobh option [ 184.369607][T12310] EXT4-fs: Ignoring removed bh option [ 184.423636][T12310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.450739][T12310] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.554415][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.596355][T12322] netlink: 'syz.8.3488': attribute type 13 has an invalid length. [ 184.690909][T12334] loop8: detected capacity change from 0 to 512 [ 184.721248][T12334] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3492: bg 0: block 248: padding at end of block bitmap is not set [ 184.746244][T12334] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3492: Failed to acquire dquot type 1 [ 184.769970][T12334] EXT4-fs (loop8): 1 truncate cleaned up [ 184.788565][T12334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.805379][T12334] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.853871][ T9138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.982391][T12358] loop8: detected capacity change from 0 to 128 [ 185.461009][T12358] syz.8.3498: attempt to access beyond end of device [ 185.461009][T12358] loop8: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 185.475748][T12358] syz.8.3498: attempt to access beyond end of device [ 185.475748][T12358] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 185.490972][T12358] syz.8.3498: attempt to access beyond end of device [ 185.490972][T12358] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 185.504668][T12358] syz.8.3498: attempt to access beyond end of device [ 185.504668][T12358] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 185.518272][T12358] syz.8.3498: attempt to access beyond end of device [ 185.518272][T12358] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 185.548046][T12358] syz.8.3498: attempt to access beyond end of device [ 185.548046][T12358] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 185.564767][T12370] loop9: detected capacity change from 0 to 128 [ 185.567695][T12358] syz.8.3498: attempt to access beyond end of device [ 185.567695][T12358] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 185.588728][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3504'. [ 185.599291][T12358] syz.8.3498: attempt to access beyond end of device [ 185.599291][T12358] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 185.613248][T12358] syz.8.3498: attempt to access beyond end of device [ 185.613248][T12358] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 185.618473][T12372] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 185.635600][T12358] syz.8.3498: attempt to access beyond end of device [ 185.635600][T12358] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 185.730456][T12377] tipc: Enabling of bearer rejected, failed to enable media [ 185.759977][T12384] loop9: detected capacity change from 0 to 512 [ 185.766601][T12384] EXT4-fs: Ignoring removed bh option [ 185.775225][T12384] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.784405][T12384] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 185.793557][T12384] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 185.802948][T12384] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 185.813358][T12384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.845644][T11660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.134380][T12406] loop9: detected capacity change from 0 to 512 [ 186.153039][T12406] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 186.166914][T12421] netlink: 'syz.5.3525': attribute type 30 has an invalid length. [ 186.177159][T12406] EXT4-fs (loop9): 1 truncate cleaned up [ 186.184016][T12406] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.369499][T11660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.694553][T12456] serio: Serial port ptm0 [ 186.843409][T12460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.499705][T12482] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3548'. [ 187.608016][T12491] serio: Serial port ptm0 [ 187.734104][T12497] bridge_slave_1: left allmulticast mode [ 187.739901][T12497] bridge_slave_1: left promiscuous mode [ 187.745631][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.754313][T12497] bridge_slave_0: left allmulticast mode [ 187.760084][T12497] bridge_slave_0: left promiscuous mode [ 187.765864][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.793903][T12499] netlink: 'syz.5.3554': attribute type 1 has an invalid length. [ 187.812774][T12499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.842151][T12499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.849537][T12499] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.861655][T12499] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 187.922401][T12502] loop8: detected capacity change from 0 to 128 [ 187.971178][T12502] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.987553][T12502] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.998048][T12507] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 188.006075][T12507] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 188.089285][ T9138] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.098567][T12512] loop5: detected capacity change from 0 to 1024 [ 188.118489][T12512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.180330][T12512] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.210965][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3562'. [ 188.258264][T12519] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 188.291612][T12525] vlan2: entered allmulticast mode [ 188.308429][T12525] dummy0: entered allmulticast mode [ 188.354509][T12041] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:24: bg 0: block 393: padding at end of block bitmap is not set [ 188.389631][T12041] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 4 with error 117 [ 188.402448][T12041] EXT4-fs (loop5): This should not happen!! Data will be lost [ 188.402448][T12041] [ 188.443528][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.484472][T12534] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 188.492706][T12534] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 188.643831][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.670069][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.881738][T12583] vlan2: entered allmulticast mode [ 188.887153][T12583] dummy0: entered allmulticast mode [ 188.957011][T12587] loop5: detected capacity change from 0 to 512 [ 188.966201][T12587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.989690][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.026207][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 189.026226][ T29] audit: type=1326 audit(1755936327.508:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.057544][ T29] audit: type=1326 audit(1755936327.508:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.059691][T12594] loop5: detected capacity change from 0 to 512 [ 189.082598][ T29] audit: type=1326 audit(1755936327.518:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.113604][ T29] audit: type=1326 audit(1755936327.518:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.124323][T12594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.138417][ T29] audit: type=1326 audit(1755936327.518:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.150970][T12594] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.175236][ T29] audit: type=1326 audit(1755936327.518:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.212255][ T29] audit: type=1326 audit(1755936327.518:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.239762][ T29] audit: type=1326 audit(1755936327.518:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.265411][ T29] audit: type=1326 audit(1755936327.518:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.290296][ T29] audit: type=1326 audit(1755936327.518:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.5.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5b8ec6ebe9 code=0x7ffc0000 [ 189.318559][T12041] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 189.333345][T12041] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28 [ 189.346155][T12041] EXT4-fs (loop5): This should not happen!! Data will be lost [ 189.346155][T12041] [ 189.356848][T12041] EXT4-fs (loop5): Total free blocks count 0 [ 189.363026][T12041] EXT4-fs (loop5): Free/Dirty block details [ 189.368973][T12041] EXT4-fs (loop5): free_blocks=65280 [ 189.374273][T12041] EXT4-fs (loop5): dirty_blocks=1029 [ 189.380836][T12041] EXT4-fs (loop5): Block reservation details [ 189.386860][T12041] EXT4-fs (loop5): i_reserved_data_blocks=1029 [ 189.387732][T12599] veth0: entered promiscuous mode [ 189.403212][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3598'. [ 189.439993][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.571468][T12602] loop9: detected capacity change from 0 to 2048 [ 189.636315][T12602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.679900][T12624] netlink: 'syz.2.3605': attribute type 1 has an invalid length. [ 189.695357][T12626] loop5: detected capacity change from 0 to 1024 [ 189.702498][T12626] EXT4-fs: Ignoring removed orlov option [ 189.709107][T12624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.720239][T12602] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 189.737277][T12624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.754575][T12624] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 189.774192][T12626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.775865][T12624] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 189.795624][T11660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.817094][T12626] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3607: bg 0: block 88: padding at end of block bitmap is not set [ 189.867558][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.982267][T12647] loop9: detected capacity change from 0 to 8192 [ 189.994577][T12653] sch_fq: defrate 0 ignored. [ 190.255451][T12674] loop9: detected capacity change from 0 to 1024 [ 190.274465][T12674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.313767][T12674] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 190.352527][T12682] loop5: detected capacity change from 0 to 1024 [ 190.361698][T12682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.369313][T11660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.401257][T12682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.417139][T12684] loop7: detected capacity change from 0 to 8192 [ 190.447830][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.642899][T12705] loop9: detected capacity change from 0 to 512 [ 190.657073][T12705] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.680387][T12705] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.711111][T11660] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 190.796624][T12718] SELinux: failed to load policy [ 190.832473][T12721] syzkaller0: entered promiscuous mode [ 190.838126][T12721] syzkaller0: entered allmulticast mode [ 191.294098][T12739] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.333937][T12741] pim6reg1: entered promiscuous mode [ 191.339515][T12741] pim6reg1: entered allmulticast mode [ 191.363436][T12739] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.431310][T12739] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.482414][T12739] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.552523][T12041] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.583048][T12041] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.598354][T12041] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.606966][T12041] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.808558][T12756] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.911429][T12758] loop7: detected capacity change from 0 to 128 [ 192.199877][T12769] loop5: detected capacity change from 0 to 512 [ 192.233019][T12041] bio_check_eod: 149 callbacks suppressed [ 192.233032][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.233032][T12041] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 192.239017][T12769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 192.255012][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.255012][T12041] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 192.265168][T12769] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.280203][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.280203][T12041] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 192.303751][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.303751][T12041] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 192.317460][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.317460][T12041] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 192.331266][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.331266][T12041] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 192.345151][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.345151][T12041] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 192.358995][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.358995][T12041] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 192.372600][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.372600][T12041] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 192.386233][T12041] kworker/u8:24: attempt to access beyond end of device [ 192.386233][T12041] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 192.387603][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 192.606583][T12795] can0: slcan on ttyS3. [ 192.622476][T12797] loop7: detected capacity change from 0 to 512 [ 192.629615][T12797] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 192.639787][T12794] can0 (unregistered): slcan off ttyS3. [ 192.641748][T12797] EXT4-fs (loop7): 1 truncate cleaned up [ 192.651647][T12797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.664890][T12797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.766066][T12809] netlink: 'syz.7.3677': attribute type 3 has an invalid length. [ 192.774432][T12809] netlink: 'syz.7.3677': attribute type 3 has an invalid length. [ 192.935351][T12818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3681'. [ 193.022096][T12824] netlink: 'syz.5.3683': attribute type 4 has an invalid length. [ 193.110703][T12834] loop7: detected capacity change from 0 to 1024 [ 193.156002][T12840] loop5: detected capacity change from 0 to 1024 [ 193.156447][T12834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.173150][T12843] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 193.187642][T12840] EXT4-fs: Ignoring removed orlov option [ 193.286544][T12834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.311456][T12840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.400756][T12855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.539833][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.742274][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.770425][T12860] loop9: detected capacity change from 0 to 8192 [ 193.783937][T12860] buffer_io_error: 65598 callbacks suppressed [ 193.784032][T12860] Buffer I/O error on dev loop9, logical block 57847, async page read [ 194.004732][T12895] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3702'. [ 194.037286][T12897] loop9: detected capacity change from 0 to 512 [ 194.048420][T12900] netlink: 'syz.7.3714': attribute type 1 has an invalid length. [ 194.050032][T12897] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.067124][T12900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.069053][T12897] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.079753][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3714'. [ 194.104893][T12900] bond1 (unregistering): Released all slaves [ 194.205283][T11660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.457350][T12940] SELinux: failed to load policy [ 194.481183][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 194.488896][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.496305][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.503832][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.511354][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.518827][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.570952][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.578554][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.586014][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 194.593488][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 194.603133][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 194.648437][T12947] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.679732][T12949] loop8: detected capacity change from 0 to 512 [ 194.687467][T12949] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 194.701654][T12949] EXT4-fs (loop8): 1 truncate cleaned up [ 194.707947][T12949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.721347][T12947] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.722734][T12949] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.785754][T12947] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.853159][T12962] loop5: detected capacity change from 0 to 1024 [ 194.861861][T12962] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 194.871912][T12962] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 194.881900][T12956] netlink: 'syz.2.3737': attribute type 8 has an invalid length. [ 194.883639][T12962] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 194.892074][T12947] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.901552][T12962] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: inode #32: comm syz.5.3740: iget: special inode unallocated [ 194.922618][T12962] EXT4-fs (loop5): no journal found [ 194.927875][T12962] EXT4-fs (loop5): can't get journal size [ 194.988827][T12962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.005553][T12962] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.5.3740: path /502/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 195.053025][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.077893][T12973] 9pnet_fd: Insufficient options for proto=fd [ 195.155230][T12977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.680135][T13007] loop7: detected capacity change from 0 to 2048 [ 195.689511][T13007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.714865][ T7626] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 195.730286][ T7626] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 195.749560][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.802786][T13016] SELinux: failed to load policy [ 195.862272][T13024] loop7: detected capacity change from 0 to 2048 [ 195.904608][T13024] loop7: p2 p3 p7 [ 196.131929][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 196.131947][ T29] audit: type=1326 audit(1755936334.618:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7fc00000 [ 196.163798][ T29] audit: type=1326 audit(1755936334.658:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.190291][ T29] audit: type=1326 audit(1755936334.678:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.214284][ T29] audit: type=1326 audit(1755936334.678:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.238035][ T29] audit: type=1326 audit(1755936334.678:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.261581][ T29] audit: type=1326 audit(1755936334.678:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.285252][ T29] audit: type=1326 audit(1755936334.678:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.309106][ T29] audit: type=1326 audit(1755936334.678:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.332573][ T29] audit: type=1326 audit(1755936334.678:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.356193][ T29] audit: type=1326 audit(1755936334.678:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13039 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37840ebe9 code=0x7ffc0000 [ 196.454487][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3778'. [ 196.634306][T12085] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.653399][T12085] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.671615][T12085] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.680575][T12085] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.779170][T13076] tipc: Started in network mode [ 196.784196][T13076] tipc: Node identity facefb53f2fe, cluster identity 4711 [ 196.791465][T13076] tipc: Enabled bearer , priority 0 [ 196.866198][T13074] tipc: Resetting bearer [ 196.878188][T13080] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.946859][T13074] tipc: Disabling bearer [ 196.983973][T13079] loop9: detected capacity change from 0 to 2048 [ 197.063633][T13079] loop9: p2 p3 p7 [ 197.249896][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3795'. [ 197.256799][T13084] SELinux: failed to load policy [ 197.339305][T13099] netlink: 'syz.2.3799': attribute type 10 has an invalid length. [ 197.347203][T13099] syz_tun: entered promiscuous mode [ 197.354423][T13099] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 197.504582][T13114] loop5: detected capacity change from 0 to 2048 [ 197.546648][T13114] loop5: p2 p3 p7 [ 197.570930][T13120] loop9: detected capacity change from 0 to 8192 [ 197.956758][T13137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.315385][T13153] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3823'. [ 198.348510][T13157] tipc: Enabling of bearer rejected, already enabled [ 198.583547][T13172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.959585][T13180] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 198.975030][T13180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.990239][T13180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.005439][T13180] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 199.016565][T13180] bond3: (slave vti0): Error -95 calling set_mac_address [ 199.104810][T13185] tipc: Enabling of bearer rejected, failed to enable media [ 199.637386][T13203] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.689762][T13203] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.757670][T13203] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.789937][T13203] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.801140][T13207] lo speed is unknown, defaulting to 1000 [ 199.806921][T13207] lo speed is unknown, defaulting to 1000 [ 199.812898][T13207] lo speed is unknown, defaulting to 1000 [ 199.819830][T13207] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 199.830145][T13207] lo speed is unknown, defaulting to 1000 [ 199.836259][T13207] lo speed is unknown, defaulting to 1000 [ 199.842745][T13207] lo speed is unknown, defaulting to 1000 [ 199.849027][T13207] lo speed is unknown, defaulting to 1000 [ 199.855054][T13207] lo speed is unknown, defaulting to 1000 [ 199.882756][T13209] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3846'. [ 199.962545][T13212] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3847'. [ 199.972186][T13211] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3847'. [ 199.992300][T13214] loop5: detected capacity change from 0 to 128 [ 199.999137][T13214] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 200.002521][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3849'. [ 200.007339][T13214] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.3848'. [ 200.014945][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3849'. [ 200.034426][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3849'. [ 200.054164][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3849'. [ 200.063106][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3849'. [ 200.074460][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3849'. [ 200.413626][T13240] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.898498][T13256] loop5: detected capacity change from 0 to 1024 [ 200.915773][T13256] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 200.944848][T13256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.979469][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.238979][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 201.239046][ T29] audit: type=1326 audit(1755936339.728:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.271101][ T29] audit: type=1326 audit(1755936339.758:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.294975][ T29] audit: type=1326 audit(1755936339.758:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.322248][ T29] audit: type=1326 audit(1755936339.758:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.345873][ T29] audit: type=1326 audit(1755936339.758:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.369569][ T29] audit: type=1326 audit(1755936339.758:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.394964][ T29] audit: type=1326 audit(1755936339.808:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.418588][ T29] audit: type=1326 audit(1755936339.868:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.442762][ T29] audit: type=1326 audit(1755936339.868:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.466380][ T29] audit: type=1326 audit(1755936339.868:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.2.3870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ffaebe9 code=0x7ffc0000 [ 201.473329][T13276] loop5: detected capacity change from 0 to 512 [ 201.520215][T13276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.533279][T13276] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.688724][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.728738][T11188] Process accounting resumed [ 201.910044][T13313] loop8: detected capacity change from 0 to 512 [ 201.935280][T13319] loop7: detected capacity change from 0 to 512 [ 201.945061][T13313] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 201.954740][T13319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.958026][T13313] EXT4-fs (loop8): orphan cleanup on readonly fs [ 201.969264][T13319] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.975587][T13313] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3881: corrupted inode contents [ 202.007260][T13313] EXT4-fs (loop8): Remounting filesystem read-only [ 202.027822][T12041] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.049369][T13313] EXT4-fs (loop8): 1 truncate cleaned up [ 202.058940][T12085] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.069691][T12085] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.083215][T12041] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.097995][T12041] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.113047][T12041] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.127111][T12085] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 202.140841][ T7626] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.152438][T13313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.176515][T13333] loop9: detected capacity change from 0 to 128 [ 202.195035][T13337] netlink: 'syz.7.3893': attribute type 30 has an invalid length. [ 202.288970][T13352] loop5: detected capacity change from 0 to 128 [ 202.361594][T13357] bio_check_eod: 102 callbacks suppressed [ 202.361614][T13357] syz.5.3902: attempt to access beyond end of device [ 202.361614][T13357] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 202.382365][T13357] syz.5.3902: attempt to access beyond end of device [ 202.382365][T13357] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 202.396161][T13357] syz.5.3902: attempt to access beyond end of device [ 202.396161][T13357] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 202.411824][T13357] syz.5.3902: attempt to access beyond end of device [ 202.411824][T13357] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 202.455137][T13357] syz.5.3902: attempt to access beyond end of device [ 202.455137][T13357] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 202.481388][T13357] syz.5.3902: attempt to access beyond end of device [ 202.481388][T13357] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 202.587698][T13363] loop7: detected capacity change from 0 to 8192 [ 202.673044][T13367] lo speed is unknown, defaulting to 1000 [ 202.684383][T13373] siw: device registration error -23 [ 202.695774][ T9138] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.707722][T13374] ================================================================== [ 202.715847][T13374] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 202.723006][T13374] [ 202.725357][T13374] write to 0xffff88811c5ef1c2 of 2 bytes by task 13363 on cpu 1: [ 202.733084][T13374] fat16_ent_put+0x28/0x60 [ 202.737524][T13374] fat_alloc_clusters+0x4d1/0xa80 [ 202.742570][T13374] fat_get_block+0x258/0x5e0 [ 202.747173][T13374] __block_write_begin_int+0x3fd/0xf90 [ 202.752654][T13374] cont_write_begin+0x5fc/0x970 [ 202.757545][T13374] fat_write_begin+0x4f/0xe0 [ 202.762193][T13374] cont_write_begin+0x1ad/0x970 [ 202.767074][T13374] fat_write_begin+0x4f/0xe0 [ 202.771690][T13374] generic_cont_expand_simple+0xb0/0x150 [ 202.777342][T13374] fat_cont_expand+0x3e/0x170 [ 202.782031][T13374] fat_setattr+0x2a5/0x8a0 [ 202.786457][T13374] notify_change+0x809/0x890 [ 202.791068][T13374] do_ftruncate+0x34b/0x450 [ 202.795595][T13374] __x64_sys_ftruncate+0x68/0xc0 [ 202.800552][T13374] x64_sys_call+0x2d52/0x2ff0 [ 202.805240][T13374] do_syscall_64+0xd2/0x200 [ 202.809769][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.815678][T13374] [ 202.818017][T13374] read to 0xffff88811c5ef000 of 512 bytes by task 13374 on cpu 0: [ 202.825834][T13374] fat_mirror_bhs+0x1df/0x320 [ 202.830548][T13374] fat_alloc_clusters+0x98b/0xa80 [ 202.835608][T13374] fat_get_block+0x258/0x5e0 [ 202.840231][T13374] __block_write_begin_int+0x3fd/0xf90 [ 202.845740][T13374] cont_write_begin+0x5fc/0x970 [ 202.850609][T13374] fat_write_begin+0x4f/0xe0 [ 202.855217][T13374] generic_perform_write+0x184/0x490 [ 202.860523][T13374] __generic_file_write_iter+0x9e/0x120 [ 202.866082][T13374] generic_file_write_iter+0x8d/0x2f0 [ 202.871504][T13374] do_iter_readv_writev+0x499/0x540 [ 202.876721][T13374] vfs_writev+0x2df/0x8b0 [ 202.881063][T13374] __se_sys_pwritev2+0xfc/0x1c0 [ 202.885931][T13374] __x64_sys_pwritev2+0x67/0x80 [ 202.890791][T13374] x64_sys_call+0x2c55/0x2ff0 [ 202.895475][T13374] do_syscall_64+0xd2/0x200 [ 202.899998][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.905903][T13374] [ 202.908228][T13374] Reported by Kernel Concurrency Sanitizer on: [ 202.914389][T13374] CPU: 0 UID: 0 PID: 13374 Comm: syz.7.3907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.924202][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.934270][T13374] ================================================================== [ 202.972468][T13378] veth1_to_bond: entered allmulticast mode [ 202.980065][T13378] veth1_to_bond: left allmulticast mode [ 209.688190][T11187] page_pool_release_retry() stalled pool shutdown: id 96, 1 inflight 60 sec