last executing test programs: 9m26.393416743s ago: executing program 0 (id=3524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 9m26.327061184s ago: executing program 0 (id=3525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0x80, 0x100004}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xfffffffffffffd79, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 9m26.290443585s ago: executing program 0 (id=3531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1}}], 0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 9m26.249328625s ago: executing program 0 (id=3533): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0xfffe, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) 9m26.244554016s ago: executing program 0 (id=3535): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x809, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x40810, 0xa03}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5a69e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x4000880) 9m26.173625017s ago: executing program 0 (id=3538): r0 = socket(0xf, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket(0xb, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) syz_clone3(0x0, 0x0) unshare(0x22020600) 9m11.055776933s ago: executing program 32 (id=3538): r0 = socket(0xf, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket(0xb, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) syz_clone3(0x0, 0x0) unshare(0x22020600) 2.586433459s ago: executing program 1 (id=10853): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = memfd_create(0x0, 0x0) fstatfs(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, 0x0, 0xa2) readv(r4, &(0x7f0000000480)=[{&(0x7f00000025c0)=""/4101, 0x1005}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2) 2.332681764s ago: executing program 3 (id=10857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700002000"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x8004}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 1.698579277s ago: executing program 1 (id=10866): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000480000000000000000000000006754454a0bd34d16c5c46c771488b9f31f9e0e64d5491efe013a7aa8d1e885bcaa37357a98c91baea40ad23e838021e047a4db58aa7f89f8ca50c57676e6", @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) tkill(0x0, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x400, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@resuid={'resuid', 0x3d, 0xee00}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) 1.51106155s ago: executing program 2 (id=10871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 1.481691781s ago: executing program 1 (id=10872): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000980), &(0x7f0000000a00)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.423970702s ago: executing program 3 (id=10873): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000980), &(0x7f0000000a00)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) 1.383363453s ago: executing program 3 (id=10874): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 1.329909974s ago: executing program 3 (id=10875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, 0x0, &(0x7f0000000500)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ptrace(0x10, 0x0) 1.298128024s ago: executing program 3 (id=10876): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = memfd_create(0x0, 0x0) fstatfs(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, 0x0, 0xa2) readv(r4, &(0x7f0000000480)=[{&(0x7f00000025c0)=""/4101, 0x1005}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2) 1.297476434s ago: executing program 1 (id=10877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 960.668321ms ago: executing program 2 (id=10882): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) 941.174702ms ago: executing program 2 (id=10883): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000f00000000000000000000000883c991e0765e9640e0e914fc7e8aa27130a1c3de30a1e76a4f2ce55b95ec5288e0dc4e1239bf40f906c79f0cd01d9f71024169ff22cb4ae023dffe6aa44b4702e45234c319b1dc8013"], 0x50) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r5, &(0x7f0000000040)='./file0/../file0\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00008f7500000000000000000000000000000087a1364f19a5e7b45b686310f2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r7, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1, 0x0, 0x1}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x56, 0x0, 0x0, 0x104, 0x3}) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 898.300092ms ago: executing program 2 (id=10884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700002000"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x8004}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 561.892189ms ago: executing program 5 (id=10886): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 520.87ms ago: executing program 5 (id=10887): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000980), &(0x7f0000000a00)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) 504.33157ms ago: executing program 5 (id=10888): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ptrace(0x10, 0x0) 461.343411ms ago: executing program 5 (id=10889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendfile(r2, r2, 0x0, 0x800000009) 460.133061ms ago: executing program 3 (id=10890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 428.356492ms ago: executing program 1 (id=10891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 395.393372ms ago: executing program 5 (id=10892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 392.629163ms ago: executing program 1 (id=10893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 339.079684ms ago: executing program 5 (id=10894): recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000880)={0x6, {{0x2, 0x4e21, @private=0xa010102}}}, 0x88) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) msgrcv(r2, 0x0, 0x0, 0x2, 0x2000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000080)=""/67}, 0x20) msgget$private(0x0, 0x524) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in=@broadcast, @in=@local}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x1}, [{0x2, 0x1, r4}], {0x4, 0x1}, [{0x8, 0x1, r5}]}, 0x34, 0x1) getpgid(0x0) msgsnd(r2, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x4010, r0, 0xffffd000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r6}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x2, 0x5}, 0x2b, 0x2, 0x0, 0x1, 0x2, 'syz1\x00', "200e45b6363955f3d38b7792c2057da0975e7d6d1cf1a033d4868e37f0a4f28f", "a45ef19b2c442bca30a1b13783d569e3170fda611438a6dce3a337510092ace1", [{0xfff7, 0xd, {0x0, 0xd}}, {0x5, 0x400, {0x3, 0x10}}, {0x3, 0x5, {0x2, 0x5f5}}, {0x9, 0x4, {0x3, 0x40}}, {0x5, 0xb60, {0x1, 0x2}}, {0x18, 0x7d1, {0x0, 0xe}}, {0x0, 0x6, {0x3, 0x2}}, {0xc5a, 0x400, {0x3}}, {0x1, 0xfff8, {0x0, 0x1}}, {0xc, 0x6, {0x1, 0x101}}, {0x2, 0x6, {0x1, 0x7}}, {0x5, 0xffc8, {0x0, 0x1d18}}, {0x8, 0x8, {0x2, 0xcbf6}}, {0xf, 0x3, {0x0, 0x10001}}, {0x7, 0x3, {0x1, 0x1}}, {0x7, 0x7ff, {0x3, 0xfffffff2}}, {0x5, 0xfff7, {0x0, 0x2}}, {0xfa, 0xb, {0x2, 0x2}}, {0x8, 0x81, {0x1, 0x7}}, {0x0, 0x5, {0x0, 0xfffffffe}}, {0x7, 0x3, {0x2, 0x2}}, {0x3, 0x200, {0x2, 0x502}}, {0x6, 0x3, {0x3, 0xb}}, {0x3, 0x2, {0x3, 0xc05a}}, {0x8000, 0x7, {0x1, 0x8}}, {0x7, 0x0, {0x2}}, {0xb, 0x285, {0x1, 0x5}}, {0x7fff, 0x8, {0x1, 0x10001}}, {0xfff7, 0x7fff, {0x2, 0x5}}, {0x3, 0x8, {0x3, 0xd972}}, {0x1, 0x5, {0x0, 0x3be}}, {0x8, 0x1, {0x1, 0x3}}, {0x0, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x3, 0x4}}, {0x7fff, 0x6, {0x0, 0x8}}, {0x4, 0xfff7, {0x0, 0x2d}}, {0x7f, 0x7f, {0x0, 0xffffffff}}, {0x800, 0x5, {0x0, 0xff}}, {0x6, 0x9, {0x2, 0xfffffe00}}, {0x100, 0x7db3, {0x2, 0x16}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RREAD(r7, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xa0) sendfile(r7, r1, 0x0, 0x3ffff) sendfile(r7, r1, 0x0, 0x7fffeffd) 211.824197ms ago: executing program 4 (id=10895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (fail_nth: 3) 175.743507ms ago: executing program 4 (id=10896): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = memfd_create(0x0, 0x0) fstatfs(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$tun(r2, 0x0, 0xa2) readv(r2, &(0x7f0000000480)=[{&(0x7f00000025c0)=""/4101, 0x1005}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2) 174.839877ms ago: executing program 4 (id=10897): r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x810) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r6, 0x1, 0x25, &(0x7f0000000300)=0x95, 0x4) recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="080100000001050588000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000108000740000000007400068014000500fe80000000000000000000000000001d08000200ac1414bb080002000a01010008000100e0000001080002006401010108000100ac1e00e52c000380060002004e220000060001004e22eeff050002"], 0x108}}, 0x0) io_uring_enter(r3, 0x154e, 0x0, 0x41, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 78.814149ms ago: executing program 4 (id=10898): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 73.054759ms ago: executing program 4 (id=10899): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000980), &(0x7f0000000a00)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) 49.539899ms ago: executing program 4 (id=10900): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = memfd_create(0x0, 0x0) fstatfs(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, 0x0, 0xa2) readv(r3, &(0x7f0000000480)=[{&(0x7f00000025c0)=""/4101, 0x1005}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2) 28.39124ms ago: executing program 2 (id=10901): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0xfa, @private2, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[], 0x28}}], 0x1, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 0s ago: executing program 2 (id=10902): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000480000000000000000000000006754454a0bd34d16c5c46c771488b9f31f9e0e64d5491efe013a7aa8d1e885bcaa37357a98c91baea40ad23e838021e047a4db58aa7f89f8ca50c57676e6", @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) tkill(0x0, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x400, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@resuid={'resuid', 0x3d, 0xee00}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) kernel console output (not intermixed with test programs): 'syz.2.10092': attribute type 4 has an invalid length. [ 759.735114][T32550] netlink: 'syz.2.10092': attribute type 4 has an invalid length. [ 759.807861][T32561] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.873455][T32561] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.933632][T32561] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.993131][T32561] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.060362][ T3427] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.080881][ T3427] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.097186][ T3427] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.110136][ T3427] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.900632][T32577] bridge0: entered promiscuous mode [ 760.914613][T32577] macsec1: entered promiscuous mode [ 760.927866][T32577] bridge0: port 3(macsec1) entered blocking state [ 760.934422][T32577] bridge0: port 3(macsec1) entered disabled state [ 760.953303][T30282] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 760.973728][T32577] macsec1: entered allmulticast mode [ 760.979129][T32577] bridge0: entered allmulticast mode [ 760.989368][T30282] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 761.005319][T32577] macsec1: left allmulticast mode [ 761.010496][T32577] bridge0: left allmulticast mode [ 761.028874][T32577] bridge0: left promiscuous mode [ 761.115827][T32583] bridge0: entered promiscuous mode [ 761.128308][T32583] macsec1: entered promiscuous mode [ 761.146651][T32583] bridge0: port 3(macsec1) entered blocking state [ 761.153200][T32583] bridge0: port 3(macsec1) entered disabled state [ 761.188331][T32583] macsec1: entered allmulticast mode [ 761.193773][T32583] bridge0: entered allmulticast mode [ 761.208303][T32589] netlink: 'syz.1.10105': attribute type 4 has an invalid length. [ 761.216862][T32583] macsec1: left allmulticast mode [ 761.221939][T32583] bridge0: left allmulticast mode [ 761.227908][T32583] bridge0: left promiscuous mode [ 761.247713][T32587] netlink: 'syz.1.10105': attribute type 4 has an invalid length. [ 761.365295][T32607] netlink: 'syz.3.10113': attribute type 4 has an invalid length. [ 761.380643][T32607] netlink: 'syz.3.10113': attribute type 4 has an invalid length. [ 761.551426][T32615] loop3: detected capacity change from 0 to 1024 [ 761.560524][T32615] EXT4-fs: Ignoring removed bh option [ 761.582124][T32615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.614058][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.079670][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 762.079731][ T29] audit: type=1326 audit(1759202655.150:65523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32624 comm="syz.3.10118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 762.109632][ T29] audit: type=1326 audit(1759202655.150:65524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32624 comm="syz.3.10118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 762.133294][ T29] audit: type=1326 audit(1759202655.160:65525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.157187][ T29] audit: type=1326 audit(1759202655.170:65526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.181239][ T29] audit: type=1326 audit(1759202655.180:65527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.181305][ T29] audit: type=1326 audit(1759202655.190:65528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.228618][ T29] audit: type=1326 audit(1759202655.200:65529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.252308][ T29] audit: type=1326 audit(1759202655.330:65530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.275996][ T29] audit: type=1326 audit(1759202655.340:65531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.299729][ T29] audit: type=1326 audit(1759202655.350:65532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32599 comm="syz.2.10110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 762.366605][T32630] bridge0: entered promiscuous mode [ 762.373711][T32630] macsec1: entered promiscuous mode [ 762.379990][T32630] bridge0: port 3(macsec1) entered blocking state [ 762.386552][T32630] bridge0: port 3(macsec1) entered disabled state [ 762.396264][T30282] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 762.404609][T30282] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 762.455270][T32630] macsec1: entered allmulticast mode [ 762.460707][T32630] bridge0: entered allmulticast mode [ 762.466634][T32630] macsec1: left allmulticast mode [ 762.471744][T32630] bridge0: left allmulticast mode [ 762.477709][T32630] bridge0: left promiscuous mode [ 762.490607][T32635] netlink: 'syz.1.10122': attribute type 4 has an invalid length. [ 762.508408][T32635] netlink: 'syz.1.10122': attribute type 4 has an invalid length. [ 762.564050][T32641] loop2: detected capacity change from 0 to 512 [ 762.576478][T32643] loop3: detected capacity change from 0 to 1024 [ 762.590119][T32641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.604338][T32641] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.623074][T32643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.654359][T32645] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.685018][T32643] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.10126: Allocating blocks 449-513 which overlap fs metadata [ 762.718883][T32642] EXT4-fs (loop3): pa ffff888106abc770: logic 48, phys. 177, len 21 [ 762.726950][T32642] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 762.749841][T32645] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.762633][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.801946][T32645] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.833994][T32658] loop4: detected capacity change from 0 to 1024 [ 762.878672][T32658] EXT4-fs: Ignoring removed bh option [ 762.908715][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.920554][T32658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.941754][T32645] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.955096][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.636625][T32683] netlink: 'syz.3.10138': attribute type 4 has an invalid length. [ 763.647156][T32683] netlink: 'syz.3.10138': attribute type 4 has an invalid length. [ 763.699295][T32685] bridge0: entered promiscuous mode [ 763.704746][T32685] macsec1: entered promiscuous mode [ 763.712302][T32685] bridge0: port 3(macsec1) entered blocking state [ 763.718941][T32685] bridge0: port 3(macsec1) entered disabled state [ 763.725639][T32685] macsec1: entered allmulticast mode [ 763.731113][T32685] bridge0: entered allmulticast mode [ 763.737225][T32685] macsec1: left allmulticast mode [ 763.742229][ T2952] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 763.742434][T32685] bridge0: left allmulticast mode [ 763.755864][T32685] bridge0: left promiscuous mode [ 763.762048][ T2952] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.872957][T32691] loop4: detected capacity change from 0 to 1024 [ 763.891192][T32691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.937608][T32691] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.10142: Allocating blocks 449-513 which overlap fs metadata [ 763.974489][T32690] EXT4-fs (loop4): pa ffff8881069a2ee0: logic 48, phys. 177, len 21 [ 763.982570][T32690] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 764.027664][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.505491][T32718] loop4: detected capacity change from 0 to 512 [ 764.528859][T32718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.542725][T32718] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.654952][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.768011][ T8732] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.790481][ T3424] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.799432][ T3424] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.807961][ T3424] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.227872][T32741] loop1: detected capacity change from 0 to 1024 [ 765.246979][T32741] EXT4-fs: Ignoring removed bh option [ 765.262255][T32741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.278420][T30282] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 765.288374][T30282] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 765.313263][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.338382][T32747] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 765.344940][T32747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 765.352606][T32747] vhci_hcd vhci_hcd.0: Device attached [ 765.367338][T32748] vhci_hcd: connection closed [ 765.367662][ T8732] vhci_hcd: stop threads [ 765.376682][ T8732] vhci_hcd: release socket [ 765.381192][ T8732] vhci_hcd: disconnect device [ 765.415275][T32745] 9pnet_fd: Insufficient options for proto=fd [ 765.425189][T32752] validate_nla: 2 callbacks suppressed [ 765.425204][T32752] netlink: 'syz.2.10160': attribute type 4 has an invalid length. [ 765.442196][T32752] netlink: 'syz.2.10160': attribute type 4 has an invalid length. [ 765.610978][T32762] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.630869][ T303] loop2: detected capacity change from 0 to 512 [ 765.637703][ T303] EXT4-fs: Ignoring removed nobh option [ 765.678807][ T303] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10164'. [ 765.730106][T32762] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.033367][T32762] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.152600][T32762] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.235953][ T126] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.253145][ T8732] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.265654][ T8732] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.274627][ T315] loop1: detected capacity change from 0 to 1024 [ 766.282454][ T8732] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.285900][ T315] EXT4-fs: Ignoring removed bh option [ 766.313525][ T315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.354027][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.376596][ T325] netlink: 'syz.1.10171': attribute type 4 has an invalid length. [ 766.390937][ T325] netlink: 'syz.1.10171': attribute type 4 has an invalid length. [ 766.553542][ T342] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 766.560116][ T342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 766.567757][ T342] vhci_hcd vhci_hcd.0: Device attached [ 766.617383][ T343] vhci_hcd: connection closed [ 766.617624][ T3424] vhci_hcd: stop threads [ 766.618292][ T346] bridge0: entered promiscuous mode [ 766.622386][ T3424] vhci_hcd: release socket [ 766.626617][ T346] macsec1: entered promiscuous mode [ 766.631847][ T3424] vhci_hcd: disconnect device [ 766.660642][ T346] bridge0: port 3(macsec1) entered blocking state [ 766.667230][ T346] bridge0: port 3(macsec1) entered disabled state [ 766.674903][ T346] macsec1: entered allmulticast mode [ 766.680347][ T346] bridge0: entered allmulticast mode [ 766.686940][ T346] macsec1: left allmulticast mode [ 766.692203][ T346] bridge0: left allmulticast mode [ 766.699065][ T346] bridge0: left promiscuous mode [ 766.798557][ T354] loop5: detected capacity change from 0 to 1024 [ 766.808592][ T354] EXT4-fs: Ignoring removed bh option [ 766.821014][ T354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.861013][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.894685][ T358] loop5: detected capacity change from 0 to 512 [ 766.902155][ T358] EXT4-fs: Ignoring removed nobh option [ 766.914496][ T358] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10182'. [ 767.291828][ T362] netlink: 'syz.3.10184': attribute type 4 has an invalid length. [ 767.302793][ T362] netlink: 'syz.3.10184': attribute type 4 has an invalid length. [ 767.868511][ T380] bridge0: entered promiscuous mode [ 767.873873][ T380] macsec1: entered promiscuous mode [ 767.884803][ T380] bridge0: port 3(macsec1) entered blocking state [ 767.891626][ T380] bridge0: port 3(macsec1) entered disabled state [ 767.900805][ T380] macsec1: entered allmulticast mode [ 767.906196][ T380] bridge0: entered allmulticast mode [ 767.941646][ T380] macsec1: left allmulticast mode [ 767.946807][ T380] bridge0: left allmulticast mode [ 767.963115][ T380] bridge0: left promiscuous mode [ 768.097684][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 768.097774][ T29] audit: type=1326 audit(1759202661.590:66207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.155776][ T29] audit: type=1326 audit(1759202661.620:66208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.179365][ T29] audit: type=1326 audit(1759202661.630:66209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.203019][ T29] audit: type=1326 audit(1759202661.630:66210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.226615][ T29] audit: type=1326 audit(1759202661.630:66211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.2.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 768.227109][ T392] loop4: detected capacity change from 0 to 1024 [ 768.250180][ T29] audit: type=1326 audit(1759202661.630:66212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.2.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 768.280106][ T29] audit: type=1326 audit(1759202661.630:66213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.303656][ T29] audit: type=1326 audit(1759202661.630:66214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.314797][ T392] EXT4-fs: Ignoring removed bh option [ 768.327255][ T29] audit: type=1326 audit(1759202661.630:66215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.327293][ T29] audit: type=1326 audit(1759202661.630:66216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=384 comm="syz.4.10192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 768.395958][ T393] loop1: detected capacity change from 0 to 512 [ 768.416886][ T397] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 768.423480][ T397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 768.431173][ T397] vhci_hcd vhci_hcd.0: Device attached [ 768.437768][ T393] EXT4-fs: Ignoring removed nobh option [ 768.448981][ T393] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10193'. [ 768.464641][ T403] loop2: detected capacity change from 0 to 512 [ 768.465259][ T392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.485793][ T400] vhci_hcd: connection closed [ 768.490562][ T8732] vhci_hcd: stop threads [ 768.499572][ T8732] vhci_hcd: release socket [ 768.503998][ T8732] vhci_hcd: disconnect device [ 768.514603][ T407] loop5: detected capacity change from 0 to 1024 [ 768.524119][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.534974][ T407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.539861][ T403] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.581352][ T407] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10198: Allocating blocks 449-513 which overlap fs metadata [ 768.616573][ T406] EXT4-fs (loop5): pa ffff8881069a2ee0: logic 48, phys. 177, len 21 [ 768.624699][ T406] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 768.764825][ T422] bridge0: entered promiscuous mode [ 768.770253][ T422] macsec1: entered promiscuous mode [ 768.776709][ T422] bridge0: port 3(macsec1) entered blocking state [ 768.783295][ T422] bridge0: port 3(macsec1) entered disabled state [ 768.790114][ T422] macsec1: entered allmulticast mode [ 768.795447][ T422] bridge0: entered allmulticast mode [ 768.801970][ T422] macsec1: left allmulticast mode [ 768.807145][ T422] bridge0: left allmulticast mode [ 768.944048][ T422] bridge0: left promiscuous mode [ 770.121305][ T452] loop5: detected capacity change from 0 to 1024 [ 770.137476][ T452] EXT4-fs: Ignoring removed bh option [ 770.234223][ T464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 770.240800][ T464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 770.248620][ T464] vhci_hcd vhci_hcd.0: Device attached [ 770.275748][ T466] vhci_hcd: connection closed [ 770.276049][ T12] vhci_hcd: stop threads [ 770.285172][ T12] vhci_hcd: release socket [ 770.289666][ T12] vhci_hcd: disconnect device [ 770.459998][ T484] bridge0: entered promiscuous mode [ 770.465286][ T484] macsec1: entered promiscuous mode [ 770.473355][ T484] bridge0: port 3(macsec1) entered blocking state [ 770.480008][ T484] bridge0: port 3(macsec1) entered disabled state [ 770.487106][ T484] macsec1: entered allmulticast mode [ 770.492561][ T484] bridge0: entered allmulticast mode [ 770.500515][ T484] macsec1: left allmulticast mode [ 770.505633][ T484] bridge0: left allmulticast mode [ 770.511490][ T484] bridge0: left promiscuous mode [ 770.985828][ T501] loop3: detected capacity change from 0 to 1024 [ 770.998488][ T501] EXT4-fs: Ignoring removed bh option [ 771.087258][ T514] loop5: detected capacity change from 0 to 1024 [ 771.100971][ T518] loop3: detected capacity change from 0 to 512 [ 771.124960][ T518] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.138475][ T514] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10234: Allocating blocks 449-513 which overlap fs metadata [ 771.156360][ T513] EXT4-fs (loop5): pa ffff8881069a2f50: logic 48, phys. 177, len 21 [ 771.164558][ T513] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 771.264950][ T526] bridge0: entered promiscuous mode [ 771.271809][ T526] macsec1: entered promiscuous mode [ 771.278464][ T526] bridge0: port 3(macsec1) entered blocking state [ 771.284950][ T526] bridge0: port 3(macsec1) entered disabled state [ 771.291829][ T526] macsec1: entered allmulticast mode [ 771.297175][ T526] bridge0: entered allmulticast mode [ 771.300778][ T532] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 771.308996][ T532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 771.316576][ T532] vhci_hcd vhci_hcd.0: Device attached [ 771.324783][ T526] macsec1: left allmulticast mode [ 771.330108][ T526] bridge0: left allmulticast mode [ 771.336395][ T526] bridge0: left promiscuous mode [ 771.350011][ T533] vhci_hcd: connection closed [ 771.350192][ T126] vhci_hcd: stop threads [ 771.359228][ T126] vhci_hcd: release socket [ 771.363651][ T126] vhci_hcd: disconnect device [ 771.514547][ T549] loop4: detected capacity change from 0 to 1024 [ 771.524305][ T550] loop1: detected capacity change from 0 to 1024 [ 771.540190][T29135] EXT4-fs unmount: 10 callbacks suppressed [ 771.540206][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.549623][ T550] EXT4-fs: Ignoring removed bh option [ 771.570853][ T549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.623994][ T549] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.10248: Allocating blocks 449-513 which overlap fs metadata [ 771.675198][ T550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.675243][ T548] EXT4-fs (loop4): pa ffff888106abc690: logic 48, phys. 177, len 21 [ 771.695328][ T548] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 771.721286][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.887708][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.004664][ T566] loop2: detected capacity change from 0 to 512 [ 772.033612][ T566] EXT4-fs: Ignoring removed mblk_io_submit option [ 772.042477][ T566] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 772.059843][ T566] EXT4-fs (loop2): 1 truncate cleaned up [ 772.066792][ T566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.202614][ T578] loop4: detected capacity change from 0 to 512 [ 772.209323][ T578] EXT4-fs: Ignoring removed nobh option [ 772.217453][ T578] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10251'. [ 772.596834][ T589] loop5: detected capacity change from 0 to 512 [ 772.621648][ T589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.635969][ T589] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.797327][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.863311][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.166789][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 773.166808][ T29] audit: type=1326 audit(1759202666.660:66936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=595 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 773.234298][ T604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 773.240949][ T604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 773.248573][ T604] vhci_hcd vhci_hcd.0: Device attached [ 773.255279][ T29] audit: type=1326 audit(1759202666.690:66937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=595 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 773.279015][ T29] audit: type=1326 audit(1759202666.730:66938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 773.302585][ T29] audit: type=1326 audit(1759202666.730:66939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa57fea0e1a code=0x7ffc0000 [ 773.326147][ T29] audit: type=1326 audit(1759202666.730:66940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa57fe9d710 code=0x7ffc0000 [ 773.349667][ T29] audit: type=1326 audit(1759202666.730:66941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa57fe9d97f code=0x7ffc0000 [ 773.378983][ T600] loop3: detected capacity change from 0 to 1024 [ 773.382944][ T29] audit: type=1326 audit(1759202666.870:66942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa57fe9db2a code=0x7ffc0000 [ 773.398209][ T600] EXT4-fs: Ignoring removed bh option [ 773.408933][ T29] audit: type=1326 audit(1759202666.870:66943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 773.437775][ T29] audit: type=1326 audit(1759202666.870:66944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 773.463005][ T29] audit: type=1326 audit(1759202666.910:66945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=603 comm="syz.2.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 773.468823][ T609] netlink: 'syz.1.10265': attribute type 4 has an invalid length. [ 773.494730][ T605] vhci_hcd: connection closed [ 773.494864][ T3324] vhci_hcd: stop threads [ 773.499962][ T609] netlink: 'syz.1.10265': attribute type 4 has an invalid length. [ 773.503910][ T3324] vhci_hcd: release socket [ 773.516187][ T3324] vhci_hcd: disconnect device [ 773.521230][ T3517] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 773.521280][ T3517] usb 5-1: enqueue for inactive port 0 [ 773.521302][ T3517] usb 5-1: enqueue for inactive port 0 [ 773.521319][ T3517] usb 5-1: enqueue for inactive port 0 [ 773.536932][ T600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.588159][ T3517] vhci_hcd: vhci_device speed not set [ 773.602579][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.623268][ T620] loop1: detected capacity change from 0 to 1024 [ 773.633621][ T620] EXT4-fs: Ignoring removed bh option [ 773.711429][ T620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.726241][ T630] loop5: detected capacity change from 0 to 512 [ 773.733063][ T630] EXT4-fs: Ignoring removed mblk_io_submit option [ 773.742633][ T630] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 773.760351][ T630] EXT4-fs (loop5): 1 truncate cleaned up [ 773.776864][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.777256][ T630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.898131][ T643] netlink: 'syz.4.10278': attribute type 4 has an invalid length. [ 773.911641][ T643] netlink: 'syz.4.10278': attribute type 4 has an invalid length. [ 773.925465][ T645] loop3: detected capacity change from 0 to 512 [ 773.933579][ T645] EXT4-fs: Ignoring removed nobh option [ 773.954028][ T645] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10276'. [ 774.016550][ T652] loop1: detected capacity change from 0 to 1024 [ 774.029845][ T652] EXT4-fs: Ignoring removed bh option [ 774.046735][ T657] bridge0: entered promiscuous mode [ 774.058684][ T657] macsec1: entered promiscuous mode [ 774.065679][ T652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.071899][ T657] bridge0: port 3(macsec1) entered blocking state [ 774.084252][ T657] bridge0: port 3(macsec1) entered disabled state [ 774.109587][ T657] macsec1: entered allmulticast mode [ 774.114933][ T657] bridge0: entered allmulticast mode [ 774.154590][ T657] macsec1: left allmulticast mode [ 774.159817][ T657] bridge0: left allmulticast mode [ 774.180140][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.189626][ T657] bridge0: left promiscuous mode [ 774.724200][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.739775][ T671] loop3: detected capacity change from 0 to 1024 [ 774.753984][ T673] loop5: detected capacity change from 0 to 1024 [ 774.768803][ T671] EXT4-fs: Ignoring removed bh option [ 774.776759][ T673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.800889][ T671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.831114][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.835185][ T673] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10288: Allocating blocks 449-513 which overlap fs metadata [ 774.877399][ T672] EXT4-fs (loop5): pa ffff8881069a2af0: logic 48, phys. 177, len 21 [ 774.885514][ T672] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 774.911468][ T684] netlink: 'syz.1.10291': attribute type 4 has an invalid length. [ 774.976713][ T687] netlink: 'syz.1.10291': attribute type 4 has an invalid length. [ 774.990363][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.043462][ T688] bridge0: entered promiscuous mode [ 775.043438][ T694] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 775.051251][ T688] macsec1: entered promiscuous mode [ 775.055226][ T694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 775.061888][ T688] bridge0: port 3(macsec1) entered blocking state [ 775.068036][ T694] vhci_hcd vhci_hcd.0: Device attached [ 775.074412][ T688] bridge0: port 3(macsec1) entered disabled state [ 775.094585][ T688] macsec1: entered allmulticast mode [ 775.099985][ T688] bridge0: entered allmulticast mode [ 775.126351][ T688] macsec1: left allmulticast mode [ 775.131653][ T688] bridge0: left allmulticast mode [ 775.142867][ T688] bridge0: left promiscuous mode [ 775.144264][ T696] vhci_hcd: connection closed [ 775.148267][ T3427] vhci_hcd: stop threads [ 775.157310][ T3427] vhci_hcd: release socket [ 775.161795][ T3427] vhci_hcd: disconnect device [ 775.191512][ T703] bridge0: entered promiscuous mode [ 775.215443][ T703] macsec1: entered promiscuous mode [ 775.229951][ T703] bridge0: port 3(macsec1) entered blocking state [ 775.236547][ T703] bridge0: port 3(macsec1) entered disabled state [ 775.244478][ T703] macsec1: entered allmulticast mode [ 775.249834][ T703] bridge0: entered allmulticast mode [ 775.257383][ T703] macsec1: left allmulticast mode [ 775.262487][ T703] bridge0: left allmulticast mode [ 775.272065][ T703] bridge0: left promiscuous mode [ 775.508510][ T721] loop4: detected capacity change from 0 to 1024 [ 775.530296][ T721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.562825][ T721] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.10304: Allocating blocks 449-513 which overlap fs metadata [ 775.579436][ T720] EXT4-fs (loop4): pa ffff888106abc5b0: logic 48, phys. 177, len 21 [ 775.587469][ T720] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 775.612896][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.708719][ T729] loop4: detected capacity change from 0 to 1024 [ 775.720156][ T729] EXT4-fs: Ignoring removed bh option [ 775.751865][ T729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.826011][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.858876][ T735] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.881897][ T739] netlink: 'syz.4.10309': attribute type 4 has an invalid length. [ 775.892801][ T739] netlink: 'syz.4.10309': attribute type 4 has an invalid length. [ 775.921310][ T735] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.959840][ T735] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.007607][ T745] bridge0: entered promiscuous mode [ 776.014950][ T745] macsec1: entered promiscuous mode [ 776.024189][ T745] bridge0: port 3(macsec1) entered blocking state [ 776.030893][ T745] bridge0: port 3(macsec1) entered disabled state [ 776.037649][ T745] macsec1: entered allmulticast mode [ 776.042992][ T745] bridge0: entered allmulticast mode [ 776.063882][ T745] macsec1: left allmulticast mode [ 776.069117][ T745] bridge0: left allmulticast mode [ 776.083066][ T745] bridge0: left promiscuous mode [ 776.099085][ T735] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.199170][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.235232][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.256039][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.270404][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.283806][ T754] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 776.290360][ T754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 776.298045][ T754] vhci_hcd vhci_hcd.0: Device attached [ 776.323697][ T755] vhci_hcd: connection closed [ 776.323926][ T126] vhci_hcd: stop threads [ 776.332996][ T126] vhci_hcd: release socket [ 776.337461][ T126] vhci_hcd: disconnect device [ 776.437747][ T763] loop5: detected capacity change from 0 to 1024 [ 776.454332][ T763] EXT4-fs: Ignoring removed bh option [ 776.470663][ T763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.524905][ T768] netlink: 'syz.1.10320': attribute type 4 has an invalid length. [ 776.576981][ T768] netlink: 'syz.1.10320': attribute type 4 has an invalid length. [ 776.597364][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.659692][ T777] bridge0: entered promiscuous mode [ 776.665108][ T777] macsec1: entered promiscuous mode [ 776.671748][ T777] bridge0: port 3(macsec1) entered blocking state [ 776.678367][ T777] bridge0: port 3(macsec1) entered disabled state [ 776.685189][ T777] macsec1: entered allmulticast mode [ 776.690509][ T777] bridge0: entered allmulticast mode [ 777.094218][ T777] macsec1: left allmulticast mode [ 777.099344][ T777] bridge0: left allmulticast mode [ 777.106383][ T777] bridge0: left promiscuous mode [ 777.230570][ T791] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.290065][ T791] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.340363][ T791] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.410840][ T791] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.493568][ T3424] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.516914][ T807] loop4: detected capacity change from 0 to 1024 [ 777.530972][ T807] EXT4-fs: Ignoring removed bh option [ 777.562639][ T810] loop2: detected capacity change from 0 to 512 [ 777.569985][ T807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.586782][ T3424] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.595775][ T810] EXT4-fs: Ignoring removed mblk_io_submit option [ 777.604125][ T810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 777.617078][ T3424] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.625923][ T3424] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.638465][ T810] EXT4-fs (loop2): 1 truncate cleaned up [ 777.642053][ T815] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 777.644580][ T810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.650648][ T815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 777.650719][ T815] vhci_hcd vhci_hcd.0: Device attached [ 777.695926][ T817] vhci_hcd: connection closed [ 777.695982][ T3324] vhci_hcd: stop threads [ 777.705106][ T3324] vhci_hcd: release socket [ 777.708390][ T820] loop3: detected capacity change from 0 to 1024 [ 777.709705][ T3324] vhci_hcd: disconnect device [ 777.716679][ T820] EXT4-fs: Ignoring removed bh option [ 777.731232][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.751087][ T820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.784413][ T826] bridge0: entered promiscuous mode [ 777.790998][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.791586][ T826] macsec1: entered promiscuous mode [ 777.806610][ T826] bridge0: port 3(macsec1) entered blocking state [ 777.813188][ T826] bridge0: port 3(macsec1) entered disabled state [ 777.820068][ T826] macsec1: entered allmulticast mode [ 777.825481][ T826] bridge0: entered allmulticast mode [ 777.831784][ T826] macsec1: left allmulticast mode [ 777.836851][ T826] bridge0: left allmulticast mode [ 777.842875][ T826] bridge0: left promiscuous mode [ 778.266702][ T29] kauditd_printk_skb: 1014 callbacks suppressed [ 778.266758][ T29] audit: type=1326 audit(1759202671.760:67960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.322951][ T29] audit: type=1326 audit(1759202671.790:67961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.346785][ T29] audit: type=1326 audit(1759202671.800:67962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.370526][ T29] audit: type=1326 audit(1759202671.820:67963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.532663][ T29] audit: type=1326 audit(1759202671.900:67964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.556309][ T29] audit: type=1326 audit(1759202671.910:67965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.579925][ T29] audit: type=1326 audit(1759202671.930:67966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.603491][ T29] audit: type=1326 audit(1759202671.940:67967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.627210][ T29] audit: type=1326 audit(1759202671.960:67968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.650946][ T29] audit: type=1326 audit(1759202671.970:67969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.10344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 778.683135][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.843431][ T859] validate_nla: 2 callbacks suppressed [ 778.843446][ T859] netlink: 'syz.5.10349': attribute type 4 has an invalid length. [ 778.873033][ T859] netlink: 'syz.5.10349': attribute type 4 has an invalid length. [ 778.873553][ T863] loop3: detected capacity change from 0 to 1024 [ 778.913948][ T863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.991618][ T863] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.10351: Allocating blocks 449-513 which overlap fs metadata [ 779.010946][ T862] EXT4-fs (loop3): pa ffff888106abc0e0: logic 48, phys. 177, len 21 [ 779.019062][ T862] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 779.063927][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.099118][ T885] netlink: 'syz.4.10363': attribute type 4 has an invalid length. [ 779.114602][ T885] netlink: 'syz.4.10363': attribute type 4 has an invalid length. [ 779.205146][ T895] loop3: detected capacity change from 0 to 1024 [ 779.219805][ T895] EXT4-fs: Ignoring removed bh option [ 779.241499][ T895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.310769][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.375909][ T914] loop1: detected capacity change from 0 to 1024 [ 779.390583][ T914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.420227][ T914] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.10372: Allocating blocks 449-513 which overlap fs metadata [ 779.436882][ T913] EXT4-fs (loop1): pa ffff888106abc070: logic 48, phys. 177, len 21 [ 779.444986][ T913] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 779.471031][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.556491][ T928] loop1: detected capacity change from 0 to 512 [ 779.564641][ T928] EXT4-fs: Ignoring removed nobh option [ 779.572784][ T928] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10376'. [ 779.680092][ T937] loop3: detected capacity change from 0 to 1024 [ 779.687015][ T937] EXT4-fs: Ignoring removed bh option [ 779.700873][ T937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.731868][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.578853][ T963] loop2: detected capacity change from 0 to 512 [ 780.591630][ T963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.605910][ T963] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.827611][ T970] loop3: detected capacity change from 0 to 1024 [ 780.840259][ T970] EXT4-fs: Ignoring removed bh option [ 780.868067][ T970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.882260][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.923893][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.956741][ T978] bridge0: entered promiscuous mode [ 780.962261][ T978] macsec1: entered promiscuous mode [ 780.970487][ T978] bridge0: port 3(macsec1) entered blocking state [ 780.976981][ T978] bridge0: port 3(macsec1) entered disabled state [ 781.028913][ T978] macsec1: entered allmulticast mode [ 781.034279][ T978] bridge0: entered allmulticast mode [ 781.044662][ T978] macsec1: left allmulticast mode [ 781.049889][ T978] bridge0: left allmulticast mode [ 781.061578][ T978] bridge0: left promiscuous mode [ 781.170922][ T995] loop5: detected capacity change from 0 to 512 [ 781.177696][ T995] EXT4-fs: Ignoring removed nobh option [ 781.185902][ T995] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10399'. [ 781.399777][ T1009] bridge0: entered promiscuous mode [ 781.416525][ T1009] macsec1: entered promiscuous mode [ 781.422882][ T1009] bridge0: port 3(macsec1) entered blocking state [ 781.429456][ T1009] bridge0: port 3(macsec1) entered disabled state [ 781.442482][ T1009] macsec1: entered allmulticast mode [ 781.447865][ T1009] bridge0: entered allmulticast mode [ 781.455811][ T1009] macsec1: left allmulticast mode [ 781.460902][ T1009] bridge0: left allmulticast mode [ 781.467682][ T1009] bridge0: left promiscuous mode [ 781.483356][ T1011] loop1: detected capacity change from 0 to 1024 [ 781.490219][ T1011] EXT4-fs: Ignoring removed bh option [ 781.512471][ T1011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.543478][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.109664][T30282] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 782.174241][T30282] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 782.357302][ T1020] 9pnet_fd: Insufficient options for proto=fd [ 782.556918][ T1034] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 782.563536][ T1034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 782.571111][ T1034] vhci_hcd vhci_hcd.0: Device attached [ 782.581930][ T1041] loop4: detected capacity change from 0 to 512 [ 782.605380][ T1038] vhci_hcd: connection closed [ 782.605649][ T3427] vhci_hcd: stop threads [ 782.612245][ T1046] loop3: detected capacity change from 0 to 512 [ 782.614834][ T3427] vhci_hcd: release socket [ 782.623296][ T1046] EXT4-fs: Ignoring removed mblk_io_submit option [ 782.625600][ T3427] vhci_hcd: disconnect device [ 782.633540][ T1046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 782.647730][ T1041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.662668][ T1046] EXT4-fs (loop3): 1 truncate cleaned up [ 782.672325][ T1046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.684551][ T1041] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.868331][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.908451][ T1060] loop1: detected capacity change from 0 to 512 [ 782.919102][ T1060] EXT4-fs: Ignoring removed nobh option [ 783.025789][ T1060] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10421'. [ 783.069680][ T3517] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 783.531603][ T3517] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 783.603078][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.630328][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 783.630371][ T29] audit: type=1326 audit(1759202677.130:68744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.660492][ T29] audit: type=1326 audit(1759202677.130:68745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.672425][ T1065] 9pnet_fd: Insufficient options for proto=fd [ 783.684164][ T29] audit: type=1326 audit(1759202677.130:68746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.713809][ T29] audit: type=1326 audit(1759202677.130:68747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.737416][ T29] audit: type=1326 audit(1759202677.130:68748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.761180][ T29] audit: type=1326 audit(1759202677.130:68749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.784775][ T29] audit: type=1326 audit(1759202677.130:68750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.808521][ T29] audit: type=1326 audit(1759202677.130:68751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.820269][ T1077] loop5: detected capacity change from 0 to 1024 [ 783.832268][ T29] audit: type=1326 audit(1759202677.130:68752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.832306][ T29] audit: type=1326 audit(1759202677.130:68753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1072 comm="syz.3.10426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 783.850061][ T1077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.934777][ T1077] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10427: Allocating blocks 449-513 which overlap fs metadata [ 783.952783][ T1076] EXT4-fs (loop5): pa ffff888106abc150: logic 48, phys. 177, len 21 [ 783.960852][ T1076] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 784.004300][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.008017][ T1081] bridge0: entered promiscuous mode [ 784.018960][ T1081] macsec1: entered promiscuous mode [ 784.025533][ T1081] bridge0: port 3(macsec1) entered blocking state [ 784.032210][ T1081] bridge0: port 3(macsec1) entered disabled state [ 784.040367][ T1081] macsec1: entered allmulticast mode [ 784.045688][ T1081] bridge0: entered allmulticast mode [ 784.052164][ T1081] macsec1: left allmulticast mode [ 784.057245][ T1081] bridge0: left allmulticast mode [ 784.064212][ T1081] bridge0: left promiscuous mode [ 784.157499][ T1100] loop5: detected capacity change from 0 to 1024 [ 784.170159][ T1100] EXT4-fs: Ignoring removed bh option [ 784.184538][ T1100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.211871][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.243399][ T1110] loop5: detected capacity change from 0 to 512 [ 784.250371][ T1110] EXT4-fs: Ignoring removed nobh option [ 784.261454][ T1110] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10441'. [ 784.318269][ T1115] loop5: detected capacity change from 0 to 512 [ 784.329899][ T1115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.342559][ T1115] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.434274][ T1125] bridge0: entered promiscuous mode [ 784.439786][ T1125] macsec1: entered promiscuous mode [ 784.446203][ T1125] bridge0: port 3(macsec1) entered blocking state [ 784.452779][ T1125] bridge0: port 3(macsec1) entered disabled state [ 784.459550][ T1125] macsec1: entered allmulticast mode [ 784.464884][ T1125] bridge0: entered allmulticast mode [ 784.471088][ T1125] macsec1: left allmulticast mode [ 784.472140][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.476173][ T1125] bridge0: left allmulticast mode [ 784.491545][ T1125] bridge0: left promiscuous mode [ 784.573851][ T1135] loop4: detected capacity change from 0 to 1024 [ 784.580817][ T1135] EXT4-fs: Ignoring removed bh option [ 784.601713][ T1135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.618640][ T1138] bridge0: entered promiscuous mode [ 784.624730][ T1138] macsec1: entered promiscuous mode [ 784.637024][ T1138] bridge0: port 3(macsec1) entered blocking state [ 784.643559][ T1138] bridge0: port 3(macsec1) entered disabled state [ 784.659376][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.670649][ T1138] macsec1: entered allmulticast mode [ 784.675997][ T1138] bridge0: entered allmulticast mode [ 784.684647][ T1138] macsec1: left allmulticast mode [ 784.689743][ T1138] bridge0: left allmulticast mode [ 784.700911][ T1138] bridge0: left promiscuous mode [ 784.765936][ T1141] loop4: detected capacity change from 0 to 512 [ 784.772822][ T1141] EXT4-fs: Ignoring removed nobh option [ 784.782442][ T1141] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10453'. [ 785.327462][ T1156] 9pnet_fd: Insufficient options for proto=fd [ 786.051320][ T1179] netlink: 'syz.4.10469': attribute type 4 has an invalid length. [ 786.063067][ T1179] netlink: 'syz.4.10469': attribute type 4 has an invalid length. [ 786.226624][ T1192] loop4: detected capacity change from 0 to 1024 [ 786.235199][ T1192] EXT4-fs: Ignoring removed bh option [ 786.261770][ T1192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.329515][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.455714][ T1200] loop2: detected capacity change from 0 to 1024 [ 786.469035][ T1200] EXT4-fs: Ignoring removed bh option [ 786.491925][ T1200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.606955][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.893218][ T1234] loop5: detected capacity change from 0 to 1024 [ 786.901653][ T1234] EXT4-fs: Ignoring removed bh option [ 787.156390][ T1241] loop1: detected capacity change from 0 to 512 [ 787.164894][ T1241] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.172078][ T1241] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 787.185927][ T1241] EXT4-fs (loop1): 1 truncate cleaned up [ 787.192614][ T1241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.104471][ T1282] loop1: detected capacity change from 0 to 1024 [ 788.111478][ T1282] EXT4-fs: Ignoring removed bh option [ 788.215287][ T1297] netlink: 'syz.4.10504': attribute type 4 has an invalid length. [ 788.236372][ T1297] netlink: 'syz.4.10504': attribute type 4 has an invalid length. [ 788.529471][ T1329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 788.536031][ T1329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 788.543606][ T1329] vhci_hcd vhci_hcd.0: Device attached [ 788.555829][ T1330] vhci_hcd: connection closed [ 788.556001][ T8735] vhci_hcd: stop threads [ 788.565158][ T8735] vhci_hcd: release socket [ 788.569622][ T8735] vhci_hcd: disconnect device [ 789.129840][ T1339] loop5: detected capacity change from 0 to 1024 [ 789.171888][ T1340] netlink: 'syz.3.10516': attribute type 4 has an invalid length. [ 789.174154][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 789.174174][ T29] audit: type=1326 audit(1759202682.670:69419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.4.10517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 789.209549][ T29] audit: type=1326 audit(1759202682.670:69420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.4.10517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 789.236835][ T29] audit: type=1326 audit(1759202682.680:69421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.4.10517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 789.261019][ T29] audit: type=1326 audit(1759202682.680:69422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.4.10517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 789.284713][ T29] audit: type=1326 audit(1759202682.680:69423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.4.10517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd801abeec9 code=0x7ffc0000 [ 789.308350][ T29] audit: type=1326 audit(1759202682.680:69424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.1.10518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cec6aeec9 code=0x7ffc0000 [ 789.331942][ T29] audit: type=1326 audit(1759202682.680:69425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.1.10518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cec6aeec9 code=0x7ffc0000 [ 789.355615][ T29] audit: type=1326 audit(1759202682.680:69426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.1.10518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cec6aeec9 code=0x7ffc0000 [ 789.379364][ T29] audit: type=1326 audit(1759202682.680:69427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.1.10518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cec6aeec9 code=0x7ffc0000 [ 789.403197][ T29] audit: type=1326 audit(1759202682.680:69428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.1.10518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cec6aeec9 code=0x7ffc0000 [ 789.595387][ T1339] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10515: Allocating blocks 449-513 which overlap fs metadata [ 789.609484][ T1340] netlink: 'syz.3.10516': attribute type 4 has an invalid length. [ 789.614603][ T1337] EXT4-fs (loop5): pa ffff8881069a2e00: logic 48, phys. 177, len 21 [ 789.625442][ T1337] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 789.692886][ T1354] bridge0: entered promiscuous mode [ 789.698664][ T1354] macsec1: entered promiscuous mode [ 789.713523][ T1354] bridge0: port 3(macsec1) entered blocking state [ 789.720069][ T1354] bridge0: port 3(macsec1) entered disabled state [ 789.734226][ T1354] macsec1: entered allmulticast mode [ 789.739687][ T1354] bridge0: entered allmulticast mode [ 789.746275][ T1354] macsec1: left allmulticast mode [ 789.751457][ T1354] bridge0: left allmulticast mode [ 789.756411][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 789.756847][ T1357] loop1: detected capacity change from 0 to 1024 [ 789.764780][ T10] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 789.771336][ T1357] EXT4-fs: Ignoring removed bh option [ 789.785739][ T1354] bridge0: left promiscuous mode [ 789.914018][ T1366] loop5: detected capacity change from 0 to 512 [ 789.920976][ T1366] EXT4-fs: Ignoring removed nobh option [ 789.937353][ T1366] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10523'. [ 790.017043][ T1371] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 790.023681][ T1371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 790.031238][ T1371] vhci_hcd vhci_hcd.0: Device attached [ 790.048296][ T1372] vhci_hcd: connection closed [ 790.048360][ T12] vhci_hcd: stop threads [ 790.057341][ T12] vhci_hcd: release socket [ 790.061831][ T12] vhci_hcd: disconnect device [ 791.146181][ T1393] loop2: detected capacity change from 0 to 1024 [ 791.162897][ T1393] EXT4-fs: Ignoring removed bh option [ 791.313454][ T1397] loop2: detected capacity change from 0 to 1024 [ 791.320723][ T1397] EXT4-fs: Ignoring removed bh option [ 791.371052][ T1403] loop4: detected capacity change from 0 to 512 [ 791.377807][ T1403] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.384727][ T1403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 791.398644][ T1403] EXT4-fs (loop4): 1 truncate cleaned up [ 791.417657][ T1036] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 791.433727][ T1036] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 791.622553][ T1413] loop5: detected capacity change from 0 to 512 [ 791.629894][ T1413] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.663103][ T1413] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 791.699844][ T1413] EXT4-fs (loop5): 1 truncate cleaned up [ 791.751716][ T1418] loop1: detected capacity change from 0 to 512 [ 791.768932][ T1418] EXT4-fs: Ignoring removed nobh option [ 791.782178][ T1418] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10540'. [ 792.437544][ T1427] loop4: detected capacity change from 0 to 512 [ 792.444425][ T1427] EXT4-fs: Ignoring removed mblk_io_submit option [ 792.456870][ T1427] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 792.474231][ T1427] EXT4-fs (loop4): 1 truncate cleaned up [ 792.506834][ T5039] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 792.531686][ T5039] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 792.634887][ T1434] loop1: detected capacity change from 0 to 1024 [ 792.655102][ T1436] netlink: 'syz.3.10546': attribute type 4 has an invalid length. [ 792.666364][ T1434] EXT4-fs: Ignoring removed bh option [ 792.677055][ T1436] netlink: 'syz.3.10546': attribute type 4 has an invalid length. [ 792.972823][ T1454] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 792.979389][ T1454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 792.986983][ T1454] vhci_hcd vhci_hcd.0: Device attached [ 793.020603][ T1455] vhci_hcd: connection closed [ 793.021138][ T12] vhci_hcd: stop threads [ 793.030197][ T12] vhci_hcd: release socket [ 793.034621][ T12] vhci_hcd: disconnect device [ 793.072379][ T1460] bridge0: entered promiscuous mode [ 793.077876][ T1460] macsec1: entered promiscuous mode [ 793.084637][ T1460] bridge0: port 3(macsec1) entered blocking state [ 793.091155][ T1460] bridge0: port 3(macsec1) entered disabled state [ 793.097791][ T1460] macsec1: entered allmulticast mode [ 793.103170][ T1460] bridge0: entered allmulticast mode [ 793.109076][ T1460] macsec1: left allmulticast mode [ 793.114160][ T1460] bridge0: left allmulticast mode [ 793.119776][ T1460] bridge0: left promiscuous mode [ 793.231866][ T1466] netlink: 'syz.5.10557': attribute type 4 has an invalid length. [ 793.245381][ T1466] netlink: 'syz.5.10557': attribute type 4 has an invalid length. [ 793.314208][ T1468] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.370136][ T1468] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.449906][ T1468] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.476972][ T1473] loop4: detected capacity change from 0 to 1024 [ 793.483721][ T1473] EXT4-fs: Ignoring removed bh option [ 793.499714][ T1468] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.537753][ T5039] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 793.546054][ T5039] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 793.579523][ T8735] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.587918][ T8735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.600895][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.635473][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.705059][ T1485] 9pnet: Could not find request transport: fd0x0000000000000003 [ 794.162079][ T1498] bridge0: entered promiscuous mode [ 794.203236][ T1498] macsec1: entered promiscuous mode [ 794.212245][ T1498] bridge0: port 3(macsec1) entered blocking state [ 794.218912][ T1498] bridge0: port 3(macsec1) entered disabled state [ 794.225727][ T1498] macsec1: entered allmulticast mode [ 794.231091][ T1498] bridge0: entered allmulticast mode [ 794.236980][ T1498] macsec1: left allmulticast mode [ 794.242135][ T1498] bridge0: left allmulticast mode [ 794.247757][ T1498] bridge0: left promiscuous mode [ 794.321326][ T1505] netlink: 'syz.5.10569': attribute type 4 has an invalid length. [ 794.332556][ T1505] netlink: 'syz.5.10569': attribute type 4 has an invalid length. [ 794.347133][ T1506] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.363183][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 794.363202][ T29] audit: type=1326 audit(1759202687.860:69860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 794.364273][ T1510] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 794.370547][ T29] audit: type=1326 audit(1759202687.860:69861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 794.393391][ T1510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 794.393555][ T1510] vhci_hcd vhci_hcd.0: Device attached [ 794.400094][ T29] audit: type=1326 audit(1759202687.860:69862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4e66c50e1a code=0x7ffc0000 [ 794.460295][ T29] audit: type=1326 audit(1759202687.860:69863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e66c4d710 code=0x7ffc0000 [ 794.484001][ T29] audit: type=1326 audit(1759202687.860:69864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e66c4d97f code=0x7ffc0000 [ 794.513832][ T29] audit: type=1326 audit(1759202687.930:69865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e66c4db2a code=0x7ffc0000 [ 794.537408][ T29] audit: type=1326 audit(1759202687.930:69866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 794.561086][ T29] audit: type=1326 audit(1759202687.930:69867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 794.584871][ T29] audit: type=1326 audit(1759202687.930:69868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 794.608802][ T29] audit: type=1326 audit(1759202687.930:69869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.5.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 794.648879][ T1511] vhci_hcd: connection closed [ 794.649216][ T126] vhci_hcd: stop threads [ 794.658349][ T126] vhci_hcd: release socket [ 794.662820][ T126] vhci_hcd: disconnect device [ 794.669044][ T1506] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.698158][ T5039] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 794.705722][ T5039] usb 11-1: enqueue for inactive port 0 [ 794.711434][ T5039] usb 11-1: enqueue for inactive port 0 [ 794.717051][ T5039] usb 11-1: enqueue for inactive port 0 [ 794.717085][ T1519] loop1: detected capacity change from 0 to 1024 [ 794.731347][ T1506] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.767258][ T1519] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.10574: Allocating blocks 449-513 which overlap fs metadata [ 794.787476][ T1518] EXT4-fs (loop1): pa ffff8881069a2700: logic 48, phys. 177, len 21 [ 794.795540][ T1518] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 794.798444][ T5039] vhci_hcd: vhci_device speed not set [ 794.812116][ T1506] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.840029][T20929] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 794.847792][T20929] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 794.891104][ T126] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.903268][ T126] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.920777][ T126] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.929210][ T126] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.981616][ T1530] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.987127][ T1528] 9pnet: Could not find request transport: fd0x0000000000000003 [ 795.031824][ T1530] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.091449][ T1530] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.139923][ T1530] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.193688][ T1562] bridge0: entered promiscuous mode [ 795.199575][ T1562] macsec1: entered promiscuous mode [ 795.205996][ T1562] bridge0: port 3(macsec1) entered blocking state [ 795.212621][ T1562] bridge0: port 3(macsec1) entered disabled state [ 795.219620][ T1562] macsec1: entered allmulticast mode [ 795.224930][ T1562] bridge0: entered allmulticast mode [ 795.230765][ T1562] macsec1: left allmulticast mode [ 795.235800][ T1562] bridge0: left allmulticast mode [ 795.241611][ T1562] bridge0: left promiscuous mode [ 795.267175][ T1566] netlink: 'syz.1.10587': attribute type 4 has an invalid length. [ 795.277086][ T1566] netlink: 'syz.1.10587': attribute type 4 has an invalid length. [ 795.312547][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 795.328398][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 795.441020][ T1579] 9pnet_fd: Insufficient options for proto=fd [ 795.528777][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 795.543773][ T36] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 795.657015][ T1598] netlink: 'syz.5.10600': attribute type 4 has an invalid length. [ 795.668877][ T1598] netlink: 'syz.5.10600': attribute type 4 has an invalid length. [ 796.073838][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 796.098427][ T36] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 796.174611][ T1618] 9pnet_fd: Insufficient options for proto=fd [ 796.374557][ T1626] loop2: detected capacity change from 0 to 512 [ 796.381263][ T1626] EXT4-fs: Ignoring removed mblk_io_submit option [ 796.388239][ T1626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 796.400610][ T1626] EXT4-fs (loop2): 1 truncate cleaned up [ 796.665111][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 796.673206][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 796.948774][ T2952] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 796.966798][ T2952] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 797.081461][ T1653] 9pnet_fd: Insufficient options for proto=fd [ 797.351278][ T1667] loop2: detected capacity change from 0 to 1024 [ 797.358501][ T1667] EXT4-fs: Ignoring removed bh option [ 797.700822][ T1679] loop5: detected capacity change from 0 to 512 [ 797.707515][ T1679] EXT4-fs: Ignoring removed nobh option [ 797.715802][ T1679] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10628'. [ 798.040481][ T1683] bridge0: entered promiscuous mode [ 798.045819][ T1683] macsec1: entered promiscuous mode [ 798.052939][ T1683] bridge0: port 3(macsec1) entered blocking state [ 798.059802][ T1683] bridge0: port 3(macsec1) entered disabled state [ 798.066769][ T1683] macsec1: entered allmulticast mode [ 798.072149][ T1683] bridge0: entered allmulticast mode [ 798.078677][ T1683] macsec1: left allmulticast mode [ 798.083759][ T1683] bridge0: left allmulticast mode [ 798.089717][ T1683] bridge0: left promiscuous mode [ 798.284472][ T2952] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 798.299299][ T2952] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 798.364807][ T1693] loop2: detected capacity change from 0 to 512 [ 798.371844][ T1693] EXT4-fs: Ignoring removed mblk_io_submit option [ 798.380048][ T1693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 798.391048][ T1693] EXT4-fs (loop2): 1 truncate cleaned up [ 798.408934][ T1689] 9pnet_fd: Insufficient options for proto=fd [ 798.705234][ T8732] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.720094][ T3324] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.731629][ T3324] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.744801][ T3324] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.781671][ T1710] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 798.788236][ T1710] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 798.795893][ T1710] vhci_hcd vhci_hcd.0: Device attached [ 798.810087][ T1711] vhci_hcd: connection closed [ 798.810303][ T8732] vhci_hcd: stop threads [ 798.819397][ T8732] vhci_hcd: release socket [ 798.823853][ T8732] vhci_hcd: disconnect device [ 799.353422][ T1727] bridge0: entered promiscuous mode [ 799.358843][ T1727] macsec1: entered promiscuous mode [ 799.365135][ T1727] bridge0: port 3(macsec1) entered blocking state [ 799.371725][ T1727] bridge0: port 3(macsec1) entered disabled state [ 799.378440][ T1727] macsec1: entered allmulticast mode [ 799.383821][ T1727] bridge0: entered allmulticast mode [ 799.389890][ T1727] macsec1: left allmulticast mode [ 799.394935][ T1727] bridge0: left allmulticast mode [ 799.400777][ T1727] bridge0: left promiscuous mode [ 799.456690][ T1730] bridge0: entered promiscuous mode [ 799.462061][ T1730] macsec1: entered promiscuous mode [ 799.468454][ T1730] bridge0: port 3(macsec1) entered blocking state [ 799.474981][ T1730] bridge0: port 3(macsec1) entered disabled state [ 799.481680][ T1730] macsec1: entered allmulticast mode [ 799.486998][ T1730] bridge0: entered allmulticast mode [ 799.492761][ T1730] macsec1: left allmulticast mode [ 799.497849][ T1730] bridge0: left allmulticast mode [ 799.508659][ T1730] bridge0: left promiscuous mode [ 799.526891][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 799.526908][ T29] audit: type=1326 audit(1759202693.020:70456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.556784][ T29] audit: type=1326 audit(1759202693.020:70457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.558994][ T1734] loop5: detected capacity change from 0 to 1024 [ 799.587089][ T29] audit: type=1326 audit(1759202693.040:70458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.590154][ T1734] EXT4-fs: Ignoring removed bh option [ 799.610837][ T29] audit: type=1326 audit(1759202693.040:70459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.639814][ T29] audit: type=1326 audit(1759202693.040:70460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.663569][ T29] audit: type=1326 audit(1759202693.040:70461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.687209][ T29] audit: type=1326 audit(1759202693.040:70462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.711021][ T29] audit: type=1326 audit(1759202693.040:70463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e66c4eec9 code=0x7ffc0000 [ 799.734689][ T29] audit: type=1326 audit(1759202693.040:70464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e66c4ef03 code=0x7ffc0000 [ 799.758246][ T29] audit: type=1326 audit(1759202693.040:70465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.5.10649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e66c4d97f code=0x7ffc0000 [ 799.888593][ T1750] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 799.895161][ T1750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 799.902875][ T1750] vhci_hcd vhci_hcd.0: Device attached [ 799.915013][ T1751] vhci_hcd: connection closed [ 799.915240][ T126] vhci_hcd: stop threads [ 799.924389][ T126] vhci_hcd: release socket [ 799.928882][ T126] vhci_hcd: disconnect device [ 799.952901][ T1754] bridge0: entered promiscuous mode [ 799.958291][ T1754] macsec1: entered promiscuous mode [ 799.964434][ T1754] bridge0: port 3(macsec1) entered blocking state [ 799.970951][ T1754] bridge0: port 3(macsec1) entered disabled state [ 799.977513][ T1754] macsec1: entered allmulticast mode [ 799.982917][ T1754] bridge0: entered allmulticast mode [ 799.989090][ T1754] macsec1: left allmulticast mode [ 799.994136][ T1754] bridge0: left allmulticast mode [ 800.000294][ T1754] bridge0: left promiscuous mode [ 800.690412][ T1770] bridge0: entered promiscuous mode [ 800.695779][ T1770] macsec1: entered promiscuous mode [ 800.702865][ T1770] bridge0: port 3(macsec1) entered blocking state [ 800.709517][ T1770] bridge0: port 3(macsec1) entered disabled state [ 800.716265][ T1770] macsec1: entered allmulticast mode [ 800.721666][ T1770] bridge0: entered allmulticast mode [ 800.727544][ T1770] macsec1: left allmulticast mode [ 800.732736][ T1770] bridge0: left allmulticast mode [ 800.738984][ T1770] bridge0: left promiscuous mode [ 800.750169][ T1772] bridge0: entered promiscuous mode [ 800.755667][ T1772] macsec1: entered promiscuous mode [ 800.761935][ T1772] bridge0: port 3(macsec1) entered blocking state [ 800.768491][ T1772] bridge0: port 3(macsec1) entered disabled state [ 800.775211][ T1772] macsec1: entered allmulticast mode [ 800.780579][ T1772] bridge0: entered allmulticast mode [ 800.788272][ T1772] macsec1: left allmulticast mode [ 800.793331][ T1772] bridge0: left allmulticast mode [ 800.800920][ T1772] bridge0: left promiscuous mode [ 800.886370][ T1777] loop5: detected capacity change from 0 to 1024 [ 800.893596][ T1777] EXT4-fs: Ignoring removed bh option [ 801.011017][ T1787] bridge0: entered promiscuous mode [ 801.016308][ T1787] macsec1: entered promiscuous mode [ 801.026076][ T1787] bridge0: port 3(macsec1) entered blocking state [ 801.032696][ T1787] bridge0: port 3(macsec1) entered disabled state [ 801.042121][ T1787] macsec1: entered allmulticast mode [ 801.047459][ T1787] bridge0: entered allmulticast mode [ 801.053848][ T1787] macsec1: left allmulticast mode [ 801.059044][ T1787] bridge0: left allmulticast mode [ 801.064993][ T1787] bridge0: left promiscuous mode [ 801.126185][ T1797] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 801.132776][ T1797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 801.140370][ T1797] vhci_hcd vhci_hcd.0: Device attached [ 801.153948][ T1798] vhci_hcd: connection closed [ 801.154084][ T8732] vhci_hcd: stop threads [ 801.163190][ T8732] vhci_hcd: release socket [ 801.167635][ T8732] vhci_hcd: disconnect device [ 801.671410][T20929] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 801.680388][T20929] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 801.825814][ T1808] loop4: detected capacity change from 0 to 512 [ 801.839831][ T1808] EXT4-fs mount: 35 callbacks suppressed [ 801.839850][ T1808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.871932][ T1808] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.892683][ T1812] bridge0: entered promiscuous mode [ 801.900785][ T1812] macsec1: entered promiscuous mode [ 801.909419][ T1812] bridge0: port 3(macsec1) entered blocking state [ 801.915891][ T1812] bridge0: port 3(macsec1) entered disabled state [ 801.952175][ T1812] macsec1: entered allmulticast mode [ 801.957639][ T1812] bridge0: entered allmulticast mode [ 801.965065][ T1817] validate_nla: 4 callbacks suppressed [ 801.965083][ T1817] netlink: 'syz.2.10676': attribute type 4 has an invalid length. [ 801.982679][ T1812] macsec1: left allmulticast mode [ 801.987775][ T1812] bridge0: left allmulticast mode [ 801.999256][ T1812] bridge0: left promiscuous mode [ 802.013728][ T1816] netlink: 'syz.2.10676': attribute type 4 has an invalid length. [ 802.154500][ T1830] loop1: detected capacity change from 0 to 1024 [ 802.183478][ T1830] EXT4-fs: Ignoring removed bh option [ 802.202521][ T1833] bridge0: entered promiscuous mode [ 802.219734][ T1833] macsec1: entered promiscuous mode [ 802.220269][ T1830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.229277][ T1833] bridge0: port 3(macsec1) entered blocking state [ 802.243636][ T1833] bridge0: port 3(macsec1) entered disabled state [ 802.264051][ T1833] macsec1: entered allmulticast mode [ 802.269547][ T1833] bridge0: entered allmulticast mode [ 802.276059][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.285424][ T1833] macsec1: left allmulticast mode [ 802.290657][ T1833] bridge0: left allmulticast mode [ 802.296803][ T1833] bridge0: left promiscuous mode [ 802.300839][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.316556][T20929] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 802.334968][T20929] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 802.425900][ T1842] bridge0: entered promiscuous mode [ 802.431984][ T1844] loop3: detected capacity change from 0 to 512 [ 802.432933][ T1842] macsec1: entered promiscuous mode [ 802.445187][ T1842] bridge0: port 3(macsec1) entered blocking state [ 802.448760][ T1844] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.451750][ T1842] bridge0: port 3(macsec1) entered disabled state [ 802.466446][ T1842] macsec1: entered allmulticast mode [ 802.471876][ T1842] bridge0: entered allmulticast mode [ 802.477488][ T1844] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 802.487660][ T1842] macsec1: left allmulticast mode [ 802.489340][ T1844] EXT4-fs (loop3): 1 truncate cleaned up [ 802.492789][ T1842] bridge0: left allmulticast mode [ 802.499403][ T1844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.516121][ T1842] bridge0: left promiscuous mode [ 802.642053][ T1855] loop4: detected capacity change from 0 to 512 [ 802.649732][ T1855] EXT4-fs: Ignoring removed nobh option [ 802.658720][ T1855] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10690'. [ 803.005727][ T1858] bridge0: entered promiscuous mode [ 803.011292][ T1858] macsec1: entered promiscuous mode [ 803.017817][ T1858] bridge0: port 3(macsec1) entered blocking state [ 803.024424][ T1858] bridge0: port 3(macsec1) entered disabled state [ 803.031421][ T1858] macsec1: entered allmulticast mode [ 803.036816][ T1858] bridge0: entered allmulticast mode [ 803.042861][ T1858] macsec1: left allmulticast mode [ 803.048005][ T1858] bridge0: left allmulticast mode [ 803.054037][ T1858] bridge0: left promiscuous mode [ 803.147197][ T1860] netlink: 'syz.5.10693': attribute type 4 has an invalid length. [ 803.159556][ T1860] netlink: 'syz.5.10693': attribute type 4 has an invalid length. [ 803.323231][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.332419][ T1869] loop2: detected capacity change from 0 to 1024 [ 803.352177][ T1869] EXT4-fs: Ignoring removed bh option [ 803.370274][ T1873] bridge0: entered promiscuous mode [ 803.375753][ T1873] macsec1: entered promiscuous mode [ 803.382905][ T1873] bridge0: port 3(macsec1) entered blocking state [ 803.389498][ T1873] bridge0: port 3(macsec1) entered disabled state [ 803.396225][ T1873] macsec1: entered allmulticast mode [ 803.398206][ T1869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.401599][ T1873] bridge0: entered allmulticast mode [ 803.447859][ T1036] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 803.449305][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.458504][ T1036] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 803.474246][ T1873] macsec1: left allmulticast mode [ 803.479376][ T1873] bridge0: left allmulticast mode [ 803.491096][ T1873] bridge0: left promiscuous mode [ 803.541256][ T1882] bridge0: entered promiscuous mode [ 803.554988][ T1882] macsec1: entered promiscuous mode [ 803.564202][ T1882] bridge0: port 3(macsec1) entered blocking state [ 803.570739][ T1882] bridge0: port 3(macsec1) entered disabled state [ 803.577619][ T1882] macsec1: entered allmulticast mode [ 803.583060][ T1882] bridge0: entered allmulticast mode [ 803.590519][ T1882] macsec1: left allmulticast mode [ 803.595580][ T1882] bridge0: left allmulticast mode [ 803.601957][ T1882] bridge0: left promiscuous mode [ 803.612885][ T1886] bridge0: entered promiscuous mode [ 803.618683][ T1886] macsec1: entered promiscuous mode [ 803.625228][ T1886] bridge0: port 3(macsec1) entered blocking state [ 803.631874][ T1886] bridge0: port 3(macsec1) entered disabled state [ 803.638621][ T1886] macsec1: entered allmulticast mode [ 803.643931][ T1886] bridge0: entered allmulticast mode [ 803.651265][ T1886] macsec1: left allmulticast mode [ 803.656348][ T1886] bridge0: left allmulticast mode [ 803.662291][ T1886] bridge0: left promiscuous mode [ 803.704197][ T1895] loop1: detected capacity change from 0 to 1024 [ 803.711367][ T1895] EXT4-fs: Ignoring removed bh option [ 803.722995][ T1895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.753988][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.872769][ T1910] loop1: detected capacity change from 0 to 1024 [ 803.880888][ T1910] EXT4-fs: Ignoring removed bh option [ 803.889765][ T1910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.920210][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.654133][ T1923] loop5: detected capacity change from 0 to 1024 [ 804.672561][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 804.681594][ T10] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 804.692004][ T1923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.719981][ T1923] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10717: Allocating blocks 449-513 which overlap fs metadata [ 804.739838][ T29] kauditd_printk_skb: 994 callbacks suppressed [ 804.739857][ T29] audit: type=1326 audit(1759202698.240:71460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.744421][ T1922] EXT4-fs (loop5): pa ffff8881069a2070: logic 48, phys. 177, len 21 [ 804.746276][ T29] audit: type=1326 audit(1759202698.240:71461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.769848][ T1922] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, [ 804.784482][ T29] audit: type=1326 audit(1759202698.240:71462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.801462][ T1922] free 0, pa_free 4 [ 804.809894][ T29] audit: type=1326 audit(1759202698.240:71463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.860984][ T29] audit: type=1326 audit(1759202698.240:71464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.861560][ T1931] loop2: detected capacity change from 0 to 1024 [ 804.884755][ T29] audit: type=1326 audit(1759202698.240:71465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.898840][ T1931] EXT4-fs: Ignoring removed bh option [ 804.914609][ T29] audit: type=1326 audit(1759202698.240:71466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.943745][ T29] audit: type=1326 audit(1759202698.240:71467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.967475][ T29] audit: type=1326 audit(1759202698.240:71468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 804.991108][ T29] audit: type=1326 audit(1759202698.240:71469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1930 comm="syz.2.10720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa57fe9ef03 code=0x7ffc0000 [ 805.017540][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.030604][ T1931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.102530][ T1938] bridge0: entered promiscuous mode [ 805.114378][ T1938] macsec1: entered promiscuous mode [ 805.121377][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.139622][ T1938] bridge0: port 3(macsec1) entered blocking state [ 805.146170][ T1938] bridge0: port 3(macsec1) entered disabled state [ 805.153509][ T1938] macsec1: entered allmulticast mode [ 805.158888][ T1938] bridge0: entered allmulticast mode [ 805.166732][ T1938] macsec1: left allmulticast mode [ 805.171916][ T1938] bridge0: left allmulticast mode [ 805.179934][ T1938] bridge0: left promiscuous mode [ 805.200978][ T1944] loop4: detected capacity change from 0 to 512 [ 805.222754][ T1944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.239895][ T1944] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.418846][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.074196][ T1970] loop2: detected capacity change from 0 to 512 [ 806.089871][ T1970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.102658][ T1970] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.148356][ T1975] loop1: detected capacity change from 0 to 1024 [ 806.163351][ T1975] EXT4-fs: Ignoring removed bh option [ 806.172700][ T1977] loop3: detected capacity change from 0 to 512 [ 806.179527][ T1977] EXT4-fs: Ignoring removed mblk_io_submit option [ 806.181022][ T1975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.186504][ T1977] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 806.211908][ T1977] EXT4-fs (loop3): 1 truncate cleaned up [ 806.220375][ T1977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.235041][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.294809][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.996274][ T2010] loop5: detected capacity change from 0 to 1024 [ 807.020702][ T2010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.050706][T29135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.058063][ T2010] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10747: Allocating blocks 449-513 which overlap fs metadata [ 807.075874][ T2009] EXT4-fs (loop5): pa ffff8881069a2700: logic 48, phys. 177, len 21 [ 807.084004][ T2009] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 807.107622][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.223360][ T2021] loop5: detected capacity change from 0 to 512 [ 807.229955][ T2021] EXT4-fs: Ignoring removed nobh option [ 807.240593][ T2021] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10750'. [ 807.394589][ T2024] loop2: detected capacity change from 0 to 1024 [ 807.402183][ T2024] EXT4-fs: Ignoring removed bh option [ 807.432640][ T2024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.501817][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.683520][ T2041] loop1: detected capacity change from 0 to 1024 [ 807.702105][ T2043] loop4: detected capacity change from 0 to 512 [ 807.702335][ T2041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.708922][ T2043] EXT4-fs: Ignoring removed mblk_io_submit option [ 807.727355][ T2043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 807.739517][ T2043] EXT4-fs (loop4): 1 truncate cleaned up [ 807.744671][ T2041] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.10758: Allocating blocks 449-513 which overlap fs metadata [ 807.745650][ T2043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.770365][ T2040] EXT4-fs (loop1): pa ffff888106abcc40: logic 48, phys. 177, len 21 [ 807.779193][ T2040] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 807.800454][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.822895][ T2048] loop1: detected capacity change from 0 to 1024 [ 807.839698][ T2048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.865082][ T2048] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.10760: Allocating blocks 449-513 which overlap fs metadata [ 807.881500][ T2047] EXT4-fs (loop1): pa ffff8881069a2930: logic 48, phys. 177, len 21 [ 807.889606][ T2047] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 807.918427][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.172576][ T2066] loop1: detected capacity change from 0 to 1024 [ 808.189113][ T2066] EXT4-fs: Ignoring removed bh option [ 808.210975][ T2066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.262804][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.391067][ T2079] loop1: detected capacity change from 0 to 1024 [ 808.430667][ T2079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.461521][ T2079] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.10770: Allocating blocks 449-513 which overlap fs metadata [ 808.485898][ T2078] EXT4-fs (loop1): pa ffff888106abcc40: logic 48, phys. 177, len 21 [ 808.494008][ T2078] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 808.517448][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.550151][ T2087] loop1: detected capacity change from 0 to 1024 [ 808.560676][ T2087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.591417][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.606746][ T2087] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.10772: Allocating blocks 449-513 which overlap fs metadata [ 808.615865][ T2091] bridge0: entered promiscuous mode [ 808.623944][ T2086] EXT4-fs (loop1): pa ffff888106abca80: logic 48, phys. 177, len 21 [ 808.634124][ T2086] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 808.638192][ T2091] macsec1: entered promiscuous mode [ 808.658217][ T2091] bridge0: port 3(macsec1) entered blocking state [ 808.664954][ T2091] bridge0: port 3(macsec1) entered disabled state [ 808.672208][ T2091] macsec1: entered allmulticast mode [ 808.673422][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.677625][ T2091] bridge0: entered allmulticast mode [ 808.694382][ T2091] macsec1: left allmulticast mode [ 808.699487][ T2091] bridge0: left allmulticast mode [ 808.710049][ T2091] bridge0: left promiscuous mode [ 808.721382][ T2097] netlink: 'syz.1.10776': attribute type 4 has an invalid length. [ 808.735169][ T2097] netlink: 'syz.1.10776': attribute type 4 has an invalid length. [ 808.785601][ T2100] loop4: detected capacity change from 0 to 1024 [ 808.794073][ T2100] EXT4-fs: Ignoring removed bh option [ 808.811333][ T2100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.851875][ T2108] loop1: detected capacity change from 0 to 1024 [ 808.864468][ T2108] EXT4-fs: Ignoring removed bh option [ 808.872589][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.894240][ T2108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.921528][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.976611][ T2122] loop5: detected capacity change from 0 to 1024 [ 808.992419][ T2122] EXT4-fs: Ignoring removed bh option [ 809.009810][ T2122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.022113][ T2126] loop4: detected capacity change from 0 to 1024 [ 809.042931][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.050271][ T2126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.081557][ T2126] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.10787: Allocating blocks 449-513 which overlap fs metadata [ 809.098561][ T2135] bridge0: entered promiscuous mode [ 809.099519][ T2125] EXT4-fs (loop4): pa ffff888106abccb0: logic 48, phys. 177, len 21 [ 809.103825][ T2135] macsec1: entered promiscuous mode [ 809.111887][ T2125] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 809.118515][ T2135] bridge0: port 3(macsec1) entered blocking state [ 809.133604][ T2135] bridge0: port 3(macsec1) entered disabled state [ 809.140335][ T2135] macsec1: entered allmulticast mode [ 809.145716][ T2135] bridge0: entered allmulticast mode [ 809.151835][ T2135] macsec1: left allmulticast mode [ 809.156918][ T2135] bridge0: left allmulticast mode [ 809.162740][ T2135] bridge0: left promiscuous mode [ 809.163506][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.783072][ T2151] netlink: 'syz.2.10796': attribute type 4 has an invalid length. [ 809.793462][ T2151] netlink: 'syz.2.10796': attribute type 4 has an invalid length. [ 809.819552][ T29] kauditd_printk_skb: 1183 callbacks suppressed [ 809.819572][ T29] audit: type=1326 audit(1759202703.320:72653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 809.849632][ T29] audit: type=1326 audit(1759202703.320:72654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 809.873466][ T29] audit: type=1326 audit(1759202703.320:72655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 809.897073][ T29] audit: type=1326 audit(1759202703.320:72656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 809.920707][ T29] audit: type=1326 audit(1759202703.320:72657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 809.944285][ T29] audit: type=1326 audit(1759202703.320:72658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 809.968192][ T29] audit: type=1326 audit(1759202703.320:72659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 809.992194][ T29] audit: type=1326 audit(1759202703.320:72660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 810.015789][ T29] audit: type=1326 audit(1759202703.320:72661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 810.039427][ T29] audit: type=1326 audit(1759202703.320:72662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.2.10797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa57fe9eec9 code=0x7ffc0000 [ 810.072745][ T2159] loop4: detected capacity change from 0 to 1024 [ 810.101376][ T2159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.142067][ T2159] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.10800: Allocating blocks 449-513 which overlap fs metadata [ 810.159232][ T2158] EXT4-fs (loop4): pa ffff888106abca80: logic 48, phys. 177, len 21 [ 810.167353][ T2158] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 810.183129][ T2167] bridge0: entered promiscuous mode [ 810.187743][ T2168] loop1: detected capacity change from 0 to 1024 [ 810.190152][ T2167] macsec1: entered promiscuous mode [ 810.200636][ T2168] EXT4-fs: Ignoring removed bh option [ 810.212661][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.222714][ T2167] bridge0: port 3(macsec1) entered blocking state [ 810.229240][ T2167] bridge0: port 3(macsec1) entered disabled state [ 810.235345][ T2168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.235989][ T2167] macsec1: entered allmulticast mode [ 810.253158][ T2167] bridge0: entered allmulticast mode [ 810.260039][ T2167] macsec1: left allmulticast mode [ 810.265120][ T2167] bridge0: left allmulticast mode [ 810.270833][ T2167] bridge0: left promiscuous mode [ 810.321550][ T2179] loop5: detected capacity change from 0 to 1024 [ 810.438064][ T2179] EXT4-fs: Ignoring removed bh option [ 810.451657][ T2184] bridge0: entered promiscuous mode [ 810.457050][ T2184] macsec1: entered promiscuous mode [ 810.465340][ T2184] bridge0: port 3(macsec1) entered blocking state [ 810.471964][ T2184] bridge0: port 3(macsec1) entered disabled state [ 810.537533][ T2184] macsec1: entered allmulticast mode [ 810.542904][ T2184] bridge0: entered allmulticast mode [ 810.551432][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.561266][ T2184] macsec1: left allmulticast mode [ 810.566409][ T2184] bridge0: left allmulticast mode [ 810.574347][ T2184] bridge0: left promiscuous mode [ 810.581183][ T2179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.489662][ T2198] loop4: detected capacity change from 0 to 1024 [ 811.496723][ T2198] EXT4-fs: Ignoring removed bh option [ 811.560917][T31605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.623534][ T2198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.718604][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.733662][ T2212] loop1: detected capacity change from 0 to 512 [ 811.743622][ T2212] EXT4-fs: Ignoring removed mblk_io_submit option [ 811.762527][ T2214] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 811.769144][ T2214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 811.772284][ T2212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 811.776762][ T2214] vhci_hcd vhci_hcd.0: Device attached [ 811.798160][ T2212] EXT4-fs (loop1): 1 truncate cleaned up [ 811.804380][ T2212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.829849][ T2216] vhci_hcd: connection closed [ 811.830915][ T12] vhci_hcd: stop threads [ 811.840047][ T12] vhci_hcd: release socket [ 811.844510][ T12] vhci_hcd: disconnect device [ 811.856317][ T2224] bridge0: entered promiscuous mode [ 811.861884][ T2224] macsec1: entered promiscuous mode [ 811.868409][ T2224] bridge0: port 3(macsec1) entered blocking state [ 811.874885][ T2224] bridge0: port 3(macsec1) entered disabled state [ 811.882639][ T2224] macsec1: entered allmulticast mode [ 811.887948][ T2224] bridge0: entered allmulticast mode [ 811.893923][ T2225] loop2: detected capacity change from 0 to 1024 [ 811.902092][ T2224] macsec1: left allmulticast mode [ 811.907151][ T2224] bridge0: left allmulticast mode [ 811.910091][ T2225] EXT4-fs: Ignoring removed bh option [ 811.917932][ T2224] bridge0: left promiscuous mode [ 811.929750][ T2225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.931047][ T2227] loop4: detected capacity change from 0 to 512 [ 811.960131][ T2227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.982160][ T2227] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.993920][T30129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.046832][ T2237] loop2: detected capacity change from 0 to 512 [ 812.057238][ T2237] EXT4-fs: Ignoring removed mblk_io_submit option [ 812.064245][ T2237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 812.075541][ T2237] EXT4-fs (loop2): 1 truncate cleaned up [ 812.082091][ T2237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.294722][T28874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.911788][ T2256] loop3: detected capacity change from 0 to 1024 [ 812.930442][ T2256] EXT4-fs: Ignoring removed bh option [ 812.960999][ T2256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.052027][T29336] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.115624][ T2268] bridge0: entered promiscuous mode [ 813.122311][ T2268] macsec1: entered promiscuous mode [ 813.132215][ T2270] loop2: detected capacity change from 0 to 1024 [ 813.133294][ T2268] bridge0: port 3(macsec1) entered blocking state [ 813.145244][ T2268] bridge0: port 3(macsec1) entered disabled state [ 813.153041][ T2268] macsec1: entered allmulticast mode [ 813.158465][ T2268] bridge0: entered allmulticast mode [ 813.165463][ T2268] macsec1: left allmulticast mode [ 813.170612][ T2268] bridge0: left allmulticast mode [ 813.176662][ T2268] bridge0: left promiscuous mode [ 813.193599][ T2270] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.10835: Allocating blocks 449-513 which overlap fs metadata [ 813.219451][ T2269] EXT4-fs (loop2): pa ffff888106abcd90: logic 48, phys. 177, len 21 [ 813.227508][ T2269] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 813.278213][ T2282] bridge0: entered promiscuous mode [ 813.283643][ T2282] macsec1: entered promiscuous mode [ 813.290268][ T2282] bridge0: port 3(macsec1) entered blocking state [ 813.296747][ T2282] bridge0: port 3(macsec1) entered disabled state [ 813.303968][ T2282] macsec1: entered allmulticast mode [ 813.309364][ T2282] bridge0: entered allmulticast mode [ 813.316096][ T2282] macsec1: left allmulticast mode [ 813.321215][ T2282] bridge0: left allmulticast mode [ 813.328139][ T2282] bridge0: left promiscuous mode [ 813.357504][ T2287] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.466903][ T2287] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.503334][ T2296] loop3: detected capacity change from 0 to 1024 [ 813.511164][ T2296] EXT4-fs: Ignoring removed bh option [ 813.658568][ T2287] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.910826][ T2287] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.994570][ T3427] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.019884][ T3427] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.046789][ T3427] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.055539][ T3427] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.130816][ T2305] loop3: detected capacity change from 0 to 1024 [ 814.144605][ T2305] EXT4-fs: Ignoring removed bh option [ 814.188574][ T2310] loop2: detected capacity change from 0 to 1024 [ 814.202676][ T2310] EXT4-fs: Ignoring removed bh option [ 814.527440][ T2317] loop1: detected capacity change from 0 to 1024 [ 814.627803][ T2317] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.10849: Allocating blocks 449-513 which overlap fs metadata [ 814.661415][ T2315] EXT4-fs (loop1): pa ffff888106abcd20: logic 48, phys. 177, len 21 [ 814.669546][ T2315] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 814.714113][ T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 814.729332][ T36] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 814.792755][ T2329] bridge0: entered promiscuous mode [ 814.806190][ T2329] macsec1: entered promiscuous mode [ 814.817251][ T2329] bridge0: port 3(macsec1) entered blocking state [ 814.823831][ T2329] bridge0: port 3(macsec1) entered disabled state [ 814.832445][ T2329] macsec1: entered allmulticast mode [ 814.837896][ T2329] bridge0: entered allmulticast mode [ 814.844067][ T2329] macsec1: left allmulticast mode [ 814.849166][ T2329] bridge0: left allmulticast mode [ 814.856407][ T2329] bridge0: left promiscuous mode [ 814.884300][ T2333] bridge0: entered promiscuous mode [ 814.889773][ T2333] macsec1: entered promiscuous mode [ 814.896113][ T2333] bridge0: port 3(macsec1) entered blocking state [ 814.902687][ T2333] bridge0: port 3(macsec1) entered disabled state [ 814.909503][ T2333] macsec1: entered allmulticast mode [ 814.914832][ T2333] bridge0: entered allmulticast mode [ 814.920947][ T2333] macsec1: left allmulticast mode [ 814.926064][ T2333] bridge0: left allmulticast mode [ 814.945809][ T2333] bridge0: left promiscuous mode [ 814.955406][ T2325] 9pnet: Could not find request transport: fd0x0000000000000003 [ 815.016787][ T29] kauditd_printk_skb: 899 callbacks suppressed [ 815.016806][ T29] audit: type=1326 audit(1759202708.510:73562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.046730][ T29] audit: type=1326 audit(1759202708.510:73563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.086647][ T29] audit: type=1326 audit(1759202708.510:73564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb701a4d710 code=0x7ffc0000 [ 815.110398][ T29] audit: type=1326 audit(1759202708.580:73565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.110867][ T2343] loop2: detected capacity change from 0 to 512 [ 815.134087][ T29] audit: type=1326 audit(1759202708.580:73566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.164702][ T2343] EXT4-fs: Ignoring removed nobh option [ 815.178486][ T29] audit: type=1326 audit(1759202708.640:73567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.202173][ T29] audit: type=1326 audit(1759202708.640:73568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.225788][ T29] audit: type=1326 audit(1759202708.640:73569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.249480][ T29] audit: type=1326 audit(1759202708.640:73570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.273177][ T29] audit: type=1326 audit(1759202708.640:73571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2341 comm="syz.3.10857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701a4eec9 code=0x7ffc0000 [ 815.309910][ T2343] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10856'. [ 815.345324][ T2346] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.363472][ T2354] loop4: detected capacity change from 0 to 1024 [ 815.370360][ T2354] EXT4-fs: Ignoring removed bh option [ 815.411064][ T2346] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.493437][ T2346] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.550706][ T2346] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.626112][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.647857][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.656476][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.666268][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.683228][ T2375] loop4: detected capacity change from 0 to 512 [ 815.720331][ T2375] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.755309][ T2384] loop1: detected capacity change from 0 to 1024 [ 815.778985][ T2384] EXT4-fs: Ignoring removed bh option [ 815.840118][ T2392] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 815.846751][ T2392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 815.854396][ T2392] vhci_hcd vhci_hcd.0: Device attached [ 815.873137][ T2393] vhci_hcd: connection closed [ 815.873847][ T3427] vhci_hcd: stop threads [ 815.883014][ T3427] vhci_hcd: release socket [ 815.887526][ T3427] vhci_hcd: disconnect device [ 815.901191][ T2395] loop5: detected capacity change from 0 to 512 [ 815.921475][ T2395] EXT4-fs: Ignoring removed nobh option [ 815.941760][ T2395] netlink: 176 bytes leftover after parsing attributes in process `syz.5.10870'. [ 816.068290][ T2409] loop4: detected capacity change from 0 to 1024 [ 816.093126][ T2409] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.10878: Allocating blocks 449-513 which overlap fs metadata [ 816.114064][ T2408] EXT4-fs (loop4): pa ffff8881069a2a10: logic 48, phys. 177, len 21 [ 816.122147][ T2408] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 816.178622][ T2415] bridge0: entered promiscuous mode [ 816.183905][ T2415] macsec1: entered promiscuous mode [ 816.190206][ T2415] bridge0: port 3(macsec1) entered blocking state [ 816.196689][ T2415] bridge0: port 3(macsec1) entered disabled state [ 816.203589][ T2415] macsec1: entered allmulticast mode [ 816.208997][ T2415] bridge0: entered allmulticast mode [ 816.215006][ T2415] macsec1: left allmulticast mode [ 816.220116][ T2415] bridge0: left allmulticast mode [ 816.225699][ T2415] bridge0: left promiscuous mode [ 816.346380][ T2418] loop4: detected capacity change from 0 to 512 [ 816.352929][ T2418] EXT4-fs: Ignoring removed nobh option [ 816.361726][ T2418] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10881'. [ 816.410779][ T2422] netlink: 'syz.2.10883': attribute type 4 has an invalid length. [ 816.422267][ T2422] netlink: 'syz.2.10883': attribute type 4 has an invalid length. [ 816.671576][ T2428] bridge0: entered promiscuous mode [ 816.676985][ T2428] macsec1: entered promiscuous mode [ 816.683349][ T2428] bridge0: port 3(macsec1) entered blocking state [ 816.690033][ T2428] bridge0: port 3(macsec1) entered disabled state [ 816.698029][ T2428] macsec1: entered allmulticast mode [ 816.703424][ T2428] bridge0: entered allmulticast mode [ 816.709353][ T2428] macsec1: left allmulticast mode [ 816.714413][ T2428] bridge0: left allmulticast mode [ 816.720176][ T2428] bridge0: left promiscuous mode [ 816.863704][ T2436] loop5: detected capacity change from 0 to 1024 [ 816.899644][ T2436] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10889: Allocating blocks 449-513 which overlap fs metadata [ 816.917010][ T2435] EXT4-fs (loop5): pa ffff8881069a2bd0: logic 48, phys. 177, len 21 [ 816.925135][ T2435] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 816.958787][ T2444] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 816.965381][ T2444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 816.973014][ T2444] vhci_hcd vhci_hcd.0: Device attached [ 816.985546][ T2446] vhci_hcd: connection closed [ 816.985802][ T8735] vhci_hcd: stop threads [ 816.995013][ T8735] vhci_hcd: release socket [ 816.999526][ T8735] vhci_hcd: disconnect device [ 817.008752][ T2450] loop5: detected capacity change from 0 to 512 [ 817.015309][ T2450] EXT4-fs: Ignoring removed mblk_io_submit option [ 817.022150][ T2450] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 817.033164][ T2450] EXT4-fs (loop5): 1 truncate cleaned up [ 817.192681][ T2459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10897'. [ 817.201737][ T2459] netlink: 'syz.4.10897': attribute type 2 has an invalid length. [ 817.418604][ T2472] loop2: detected capacity change from 0 to 1024 [ 817.426744][ T2472] EXT4-fs: Ignoring removed bh option [ 817.458396][ T2461] ================================================================== [ 817.466546][ T2461] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 817.475444][ T2461] [ 817.477785][ T2461] read-write to 0xffff888119d0ae48 of 8 bytes by task 2455 on cpu 0: [ 817.485939][ T2461] __filemap_add_folio+0x5b9/0x7d0 [ 817.491081][ T2461] filemap_add_folio+0x98/0x1b0 [ 817.495956][ T2461] page_cache_ra_unbounded+0x1f3/0x380 [ 817.501436][ T2461] page_cache_sync_ra+0x6ad/0x6c0 [ 817.506482][ T2461] filemap_get_pages+0x2d0/0x1150 [ 817.511527][ T2461] filemap_splice_read+0x3a9/0x740 [ 817.516652][ T2461] ext4_file_splice_read+0x8f/0xb0 [ 817.521793][ T2461] splice_direct_to_actor+0x26f/0x680 [ 817.527186][ T2461] do_splice_direct+0xda/0x150 [ 817.531954][ T2461] do_sendfile+0x380/0x650 [ 817.536403][ T2461] __x64_sys_sendfile64+0x105/0x150 [ 817.541708][ T2461] x64_sys_call+0x2bb0/0x2ff0 [ 817.546410][ T2461] do_syscall_64+0xd2/0x200 [ 817.550925][ T2461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.556830][ T2461] [ 817.559160][ T2461] read to 0xffff888119d0ae48 of 8 bytes by task 2461 on cpu 1: [ 817.566706][ T2461] filemap_write_and_wait_range+0x59/0x340 [ 817.572542][ T2461] ext4_file_write_iter+0xe04/0xf00 [ 817.577765][ T2461] iter_file_splice_write+0x663/0xa60 [ 817.583147][ T2461] direct_splice_actor+0x153/0x2a0 [ 817.588266][ T2461] splice_direct_to_actor+0x30f/0x680 [ 817.593644][ T2461] do_splice_direct+0xda/0x150 [ 817.598424][ T2461] do_sendfile+0x380/0x650 [ 817.602857][ T2461] __x64_sys_sendfile64+0x105/0x150 [ 817.608077][ T2461] x64_sys_call+0x2bb0/0x2ff0 [ 817.612774][ T2461] do_syscall_64+0xd2/0x200 [ 817.617299][ T2461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.623200][ T2461] [ 817.625525][ T2461] value changed: 0x0000000000000009 -> 0x000000000000000a [ 817.632638][ T2461] [ 817.634969][ T2461] Reported by Kernel Concurrency Sanitizer on: [ 817.641131][ T2461] CPU: 1 UID: 0 PID: 2461 Comm: syz.5.10894 Not tainted syzkaller #0 PREEMPT(voluntary) [ 817.650944][ T2461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 817.661005][ T2461] ==================================================================