last executing test programs: 57.436930174s ago: executing program 3 (id=4096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='tlb_flush\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x40842011, 0x0, 0x0, 0x0, 0x0, 0x0) 57.297153886s ago: executing program 3 (id=4101): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x000000007fffffff,version=9p2000']) 57.165969756s ago: executing program 3 (id=4105): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x441, 0x0) fallocate(r0, 0x0, 0x0, 0x1000005) 57.021942497s ago: executing program 3 (id=4109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 56.976179038s ago: executing program 3 (id=4113): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r0) 56.73251776s ago: executing program 3 (id=4118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 56.73218693s ago: executing program 32 (id=4118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 4.397869179s ago: executing program 0 (id=5490): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x20040400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 4.340910239s ago: executing program 0 (id=5491): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000480), 0x8, 0xe7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000a00)=ANY=[@ANYRES16=r0, @ANYBLOB, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000980), &(0x7f00000009c0)=0x4) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0xa00488, &(0x7f0000000e80)=ANY=[@ANYBLOB]) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x57c, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000580)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.492173235s ago: executing program 0 (id=5510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000089b00000800ffb3df81751b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000002a80)=ANY=[@ANYBLOB="1800d6165ebd9c0000000000000000000000000077d639aec33066be483f6bcf1959306631faaf93ae16711264ec81ed3797464b33c4605f23", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008070000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x5bbd, &(0x7f00000002c0), &(0x7f0000000180)=0x0, &(0x7f0000000440)) r4 = syz_io_uring_setup(0x3a12, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x3c44, &(0x7f00000007c0)={0x0, 0x1197, 0x2, 0x3, 0x0, 0x0, r4}, 0x0, 0x0) syz_io_uring_setup(0x6878, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r4}, &(0x7f0000000200), &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000340)=0x1, 0x0, 0x4) io_uring_enter(r2, 0x46, 0xfffffffc, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) tkill(r5, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.946985126s ago: executing program 4 (id=5552): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x7a11, 0x80}, 0x0, &(0x7f0000000780)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xe) close_range(r4, 0xffffffffffffffff, 0x0) 1.747407747s ago: executing program 5 (id=5560): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x80010, 0xffffffffffffffff, 0x180000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000019180)=ANY=[@ANYBLOB="4610c5c0284e5ad81f0467286f0fd9a08f6d0000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000190c0)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000009c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d1", @ANYRESHEX], 0x1, 0x2a8, &(0x7f0000000580)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000200)=""/58, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000000}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r0, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019100)=ANY=[@ANYBLOB="160000000000000004000000ff00000014d78aac67974e1e7ffd3b9cbe1235825e00611654", @ANYRES32=0x1, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.746478838s ago: executing program 2 (id=5561): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x100000000000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af81100000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYBLOB="0000002000000000000000000000000000000036db5957859c7ca991768abd8367a6efc4f5eed4f9d01b925471e137bc77e7a6eca572308f401fcb035ddf92dfaee2ad81b1d5e4291541fbea7299c17a69836107ee5c921d", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="ea1cff06000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) rt_sigaction(0x1d, &(0x7f00000003c0)={&(0x7f0000000040)="660f2b5ea5c421f92929420f643d000001008fe978019f05aca5163ed34000f3420fa7d8673ed9f3c4c27129c4c4c2f59394b60ef7ccc36526f2ae", 0xa0000004, &(0x7f00000002c0)="c4228d9cca41d3e866660fe9a7950000003623f42665f1f083420e08d325000000000f16dcf30f1edd66440f0f18bf", {[0xf77]}}, 0x0, 0x8, &(0x7f0000000400)) 1.079541322s ago: executing program 4 (id=5569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20000014) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000008c0)=0x1c, 0x800) 895.376954ms ago: executing program 2 (id=5574): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x20040400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 894.261743ms ago: executing program 5 (id=5575): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000480), 0x8, 0xe7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000a00)=ANY=[@ANYRES16=r0, @ANYBLOB, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000980), &(0x7f00000009c0)=0x4) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0xa00488, &(0x7f0000000e80)=ANY=[@ANYBLOB]) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000950d9849f53ed118a597fab14ef81574091039a75789dcc02c36c0180aa4d2cb5d43679f6efeabba4ea71096378f56b9d4a8828ca2a42753fea04ba2c22f0dc88ad979c9a3f9f277df475f04d73db56065185e42fe2a7801f8b7769f561f94a5af6651ded54c61637324e79353b959d852f6fdd75953323d686a2bdd1a545a243474f8e51c97b791d46ab66f872a837c3965ccf4462eac78ea7f8897e70786516b5d4ccb67bb2f4638d56a5f4360be907107b624ae00a21adad8a5d3e0de6eb9f3108864470bfb5f797222b318ace7472b90801ac47c745fb4cd92ca22220439e6c14083bf216a292344625039768c569ba54870eb9b6df9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x57c, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000580)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 813.670014ms ago: executing program 2 (id=5577): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) rt_sigqueueinfo(0x0, 0x1, &(0x7f0000000280)={0x30, 0xffffffff, 0x4304}) 781.030364ms ago: executing program 2 (id=5579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) 780.184734ms ago: executing program 2 (id=5581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000002050001000600000005000400000000000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000cd1c330e1a78575aae7f021d4301651f3e9cf200fc5ea071ed9e2b899ee8"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r9, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffff, r6, 0x0, 0x0, 0x0, 0x0, 0x3, r8}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) shutdown(r6, 0x0) 472.323787ms ago: executing program 1 (id=5583): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x3853, 0x0, 0x2, 0x0, 0x2f) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000140)={0x5, r4, 0x1c, {0x9, 0x1}, 0x6}, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, {0x8, 0x5}, 0x5}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/4097, 0x1001}, 0x10000}], 0x1, 0x120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22000600) socket$igmp(0x2, 0x3, 0x2) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@grpquota}, {@sysvgroups}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@dax_inode}, {@noauto_da_alloc}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, 0x0) 442.844847ms ago: executing program 2 (id=5584): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x100000000000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af81100000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYBLOB="0000002000000000000000000000000000000036db5957859c7ca991768abd8367a6efc4f5eed4f9d01b925471e137bc77e7a6eca572308f401fcb035ddf92dfaee2ad81b1d5e4291541fbea7299c17a69836107ee5c921d", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="ea1cff06000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) rt_sigaction(0x1d, &(0x7f00000003c0)={&(0x7f0000000040)="660f2b5ea5c421f92929420f643d000001008fe978019f05aca5163ed34000f3420fa7d8673ed9f3c4c27129c4c4c2f59394b60ef7ccc36526f2ae", 0xa0000004, &(0x7f00000002c0)="c4228d9cca41d3e866660fe9a7950000003623f42665f1f083420e08d325000000000f16dcf30f1edd66440f0f18bf", {[0xf77]}}, 0x0, 0x8, &(0x7f0000000400)) 372.517677ms ago: executing program 1 (id=5585): socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) socket$packet(0x11, 0x2, 0x300) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 371.369697ms ago: executing program 1 (id=5586): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 305.347797ms ago: executing program 1 (id=5587): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x20004804) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000100000000000000000c000000b0000380a40004000f814d5c0734a675dc8f72cc0f18d05dc1bea1d28778d3c3a66c675ac12373b853f92f67927323d73d31956f9f48f9c103b69e61beaffc391e7dfd94c67a48f81e1466f217e4590d7771bcb5b396174c716866d7ad35f86696db7460f413853bcf561af68280d5116ff902c0a3ff6fa513626cbe219e824ce8fafdcd9a48d6ed792944d933f16d46f0801c439594ebc59db118949a85b652e1983c43be9e332e08000200fd7f0000180008000000020076657468305f746f5f626f6e64000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x4803) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x7a00, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 291.766888ms ago: executing program 5 (id=5588): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x20040400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 227.369108ms ago: executing program 1 (id=5589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000002c0)={0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 226.232398ms ago: executing program 5 (id=5590): creat(0x0, 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1f) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000008480fdce6a437d6e0000000000000000"], 0x14}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) 215.178808ms ago: executing program 0 (id=5591): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000403000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB='B'], 0x144}}, 0x0) 214.381608ms ago: executing program 4 (id=5592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r0, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 188.255048ms ago: executing program 5 (id=5593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20, &(0x7f00000002c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x1000}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 185.759579ms ago: executing program 1 (id=5594): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_background_gc\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00', @ANYBLOB="01000000000000000000010000003c00018006000100020000"], 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, 0x0, 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) timer_create(0xfffffffffffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000001500)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES64], 0x1, 0x25f, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@barrier}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@nogrpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xed, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 151.268959ms ago: executing program 4 (id=5595): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 143.646389ms ago: executing program 0 (id=5596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 123.342999ms ago: executing program 4 (id=5597): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 92.182179ms ago: executing program 5 (id=5598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 11.091799ms ago: executing program 0 (id=5599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 0s ago: executing program 4 (id=5600): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x88, 0x2}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb1}}], 0x30}}], 0x3, 0x40088c4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x7, &(0x7f00000000c0)=@raw=[@map_fd, @func, @initr0, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0xffffffffffffffff) sync() sync() kernel console output (not intermixed with test programs): 4.051651][T13231] syz.1.3591: attempt to access beyond end of device [ 244.051651][T13231] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 244.052140][T13243] loop2: detected capacity change from 0 to 2048 [ 244.180730][T13250] loop2: detected capacity change from 0 to 1024 [ 244.207964][T13250] EXT4-fs: Ignoring removed nobh option [ 244.213600][T13250] EXT4-fs: Ignoring removed bh option [ 244.289533][T13250] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.3598: Allocating blocks 497-513 which overlap fs metadata [ 244.312269][T13250] EXT4-fs (loop2): pa ffff888106597850: logic 256, phys. 385, len 8 [ 244.320349][T13250] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 244.344450][T13259] loop1: detected capacity change from 0 to 2048 [ 244.522562][T13277] loop2: detected capacity change from 0 to 256 [ 244.530240][T13275] loop4: detected capacity change from 0 to 1024 [ 244.542225][T13277] FAT-fs (loop2): Directory bread(block 64) failed [ 244.547168][T13275] EXT4-fs: Ignoring removed nobh option [ 244.551186][T13277] FAT-fs (loop2): Directory bread(block 65) failed [ 244.554349][T13275] EXT4-fs: Ignoring removed bh option [ 244.570099][T13277] FAT-fs (loop2): Directory bread(block 66) failed [ 244.584880][T13277] FAT-fs (loop2): Directory bread(block 67) failed [ 244.600841][T13277] FAT-fs (loop2): Directory bread(block 68) failed [ 244.613176][T13277] FAT-fs (loop2): Directory bread(block 69) failed [ 244.619873][T13277] FAT-fs (loop2): Directory bread(block 70) failed [ 244.626471][T13277] FAT-fs (loop2): Directory bread(block 71) failed [ 244.633169][T13277] FAT-fs (loop2): Directory bread(block 72) failed [ 244.639785][T13277] FAT-fs (loop2): Directory bread(block 73) failed [ 244.767519][T13277] syz.2.3608: attempt to access beyond end of device [ 244.767519][T13277] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 244.797281][T13275] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.3607: Allocating blocks 497-513 which overlap fs metadata [ 244.803909][T13277] syz.2.3608: attempt to access beyond end of device [ 244.803909][T13277] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 244.822520][T13275] EXT4-fs (loop4): pa ffff888106597850: logic 256, phys. 385, len 8 [ 244.832501][T13275] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 244.903275][T13282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.918156][T13280] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 244.936257][T13282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.961375][T13282] loop2: detected capacity change from 0 to 1024 [ 244.992048][T13282] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.2.3609: corrupted in-inode xattr: bad magic number in in-inode xattr [ 245.037947][T13292] loop4: detected capacity change from 0 to 256 [ 245.051371][T13292] FAT-fs (loop4): Directory bread(block 64) failed [ 245.059259][T13292] FAT-fs (loop4): Directory bread(block 65) failed [ 245.065868][T13292] FAT-fs (loop4): Directory bread(block 66) failed [ 245.072478][T13292] FAT-fs (loop4): Directory bread(block 67) failed [ 245.080921][T13292] FAT-fs (loop4): Directory bread(block 68) failed [ 245.082182][T13293] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 245.087623][T13292] FAT-fs (loop4): Directory bread(block 69) failed [ 245.101765][T13292] FAT-fs (loop4): Directory bread(block 70) failed [ 245.108394][T13292] FAT-fs (loop4): Directory bread(block 71) failed [ 245.115020][T13292] FAT-fs (loop4): Directory bread(block 72) failed [ 245.121617][T13292] FAT-fs (loop4): Directory bread(block 73) failed [ 245.147486][T13292] syz.4.3613: attempt to access beyond end of device [ 245.147486][T13292] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 245.162396][T13292] syz.4.3613: attempt to access beyond end of device [ 245.162396][T13292] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 245.291591][T13303] loop4: detected capacity change from 0 to 1024 [ 245.394370][T13310] loop1: detected capacity change from 0 to 1024 [ 245.451633][T13313] loop1: detected capacity change from 0 to 1024 [ 245.458602][T13313] EXT4-fs: Ignoring removed nobh option [ 245.464197][T13313] EXT4-fs: Ignoring removed bh option [ 245.505670][T13313] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.3621: Allocating blocks 497-513 which overlap fs metadata [ 245.532789][T13313] EXT4-fs (loop1): pa ffff888106506c40: logic 256, phys. 385, len 8 [ 245.541055][T13313] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 245.568324][T13318] sctp: [Deprecated]: syz.2.3622 (pid 13318) Use of int in max_burst socket option deprecated. [ 245.568324][T13318] Use struct sctp_assoc_value instead [ 245.587741][T13316] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 245.885914][T13341] loop1: detected capacity change from 0 to 512 [ 245.915299][T13341] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.994152][T13348] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 246.015034][T13346] loop2: detected capacity change from 0 to 1024 [ 246.026818][T13346] EXT4-fs: Ignoring removed nobh option [ 246.032537][T13346] EXT4-fs: Ignoring removed bh option [ 246.183552][T13346] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.3634: Allocating blocks 497-513 which overlap fs metadata [ 246.214972][T13346] EXT4-fs (loop2): pa ffff888106506c40: logic 256, phys. 385, len 8 [ 246.223199][T13346] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 246.324945][T13346] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 247.383788][T13370] loop2: detected capacity change from 0 to 256 [ 247.396963][T13370] FAT-fs (loop2): Directory bread(block 64) failed [ 247.403657][T13370] FAT-fs (loop2): Directory bread(block 65) failed [ 247.866837][T13370] FAT-fs (loop2): Directory bread(block 66) failed [ 247.936039][T13370] FAT-fs (loop2): Directory bread(block 67) failed [ 247.998213][T13370] FAT-fs (loop2): Directory bread(block 68) failed [ 248.251470][T13370] FAT-fs (loop2): Directory bread(block 69) failed [ 248.269649][T13382] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 248.278776][T13370] FAT-fs (loop2): Directory bread(block 70) failed [ 248.285442][T13370] FAT-fs (loop2): Directory bread(block 71) failed [ 248.317278][T13383] 9pnet_fd: Insufficient options for proto=fd [ 248.330528][T13370] FAT-fs (loop2): Directory bread(block 72) failed [ 248.351246][T13370] FAT-fs (loop2): Directory bread(block 73) failed [ 248.384699][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 248.384717][ T30] audit: type=1326 audit(1741461453.325:14778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13384 comm="syz.3.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd27c2d169 code=0x7ffc0000 [ 248.384881][ T30] audit: type=1326 audit(1741461453.325:14779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13384 comm="syz.3.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd27c2d169 code=0x7ffc0000 [ 248.384907][ T30] audit: type=1326 audit(1741461453.325:14780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13384 comm="syz.3.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd27c2d169 code=0x7ffc0000 [ 248.384932][ T30] audit: type=1326 audit(1741461453.325:14781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13384 comm="syz.3.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd27c2d169 code=0x7ffc0000 [ 248.384963][ T30] audit: type=1326 audit(1741461453.325:14782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.4.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 248.385053][ T30] audit: type=1326 audit(1741461453.325:14783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.4.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 248.385129][ T30] audit: type=1326 audit(1741461453.325:14784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.4.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 248.385219][ T30] audit: type=1326 audit(1741461453.335:14785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.4.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 248.385248][ T30] audit: type=1326 audit(1741461453.335:14786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.4.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 248.385279][ T30] audit: type=1326 audit(1741461453.335:14787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.4.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 248.438021][T13370] syz.2.3639: attempt to access beyond end of device [ 248.438021][T13370] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 248.438058][T13370] syz.2.3639: attempt to access beyond end of device [ 248.438058][T13370] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 248.684578][T13403] loop3: detected capacity change from 0 to 1024 [ 248.685186][T13403] EXT4-fs: Ignoring removed nobh option [ 248.685214][T13403] EXT4-fs: Ignoring removed bh option [ 248.848232][T13403] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.3656: Allocating blocks 497-513 which overlap fs metadata [ 248.857903][T13403] EXT4-fs (loop3): pa ffff888106597850: logic 256, phys. 385, len 8 [ 248.857934][T13403] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 248.975829][T13416] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 249.085270][T13420] loop0: detected capacity change from 0 to 1024 [ 249.370611][T13437] 9pnet_fd: Insufficient options for proto=fd [ 249.389756][T13438] loop0: detected capacity change from 0 to 256 [ 249.449058][T13438] FAT-fs (loop0): Directory bread(block 64) failed [ 249.468793][T13438] FAT-fs (loop0): Directory bread(block 65) failed [ 249.478747][T13442] loop4: detected capacity change from 0 to 2048 [ 249.485200][T13438] FAT-fs (loop0): Directory bread(block 66) failed [ 249.491972][T13438] FAT-fs (loop0): Directory bread(block 67) failed [ 249.498760][T13438] FAT-fs (loop0): Directory bread(block 68) failed [ 249.514118][T13438] FAT-fs (loop0): Directory bread(block 69) failed [ 249.522340][T13438] FAT-fs (loop0): Directory bread(block 70) failed [ 249.529678][T13438] FAT-fs (loop0): Directory bread(block 71) failed [ 249.536502][T13438] FAT-fs (loop0): Directory bread(block 72) failed [ 249.543189][T13438] FAT-fs (loop0): Directory bread(block 73) failed [ 249.560995][T13438] bio_check_eod: 1 callbacks suppressed [ 249.561022][T13438] syz.0.3668: attempt to access beyond end of device [ 249.561022][T13438] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 249.563872][T13442] loop4: p2 p3 p7 [ 249.580507][T13438] syz.0.3668: attempt to access beyond end of device [ 249.580507][T13438] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 249.639445][T13450] loop0: detected capacity change from 0 to 2048 [ 249.659754][T13454] loop2: detected capacity change from 0 to 1024 [ 249.666581][T13454] EXT4-fs: Ignoring removed nobh option [ 249.672160][T13454] EXT4-fs: Ignoring removed bh option [ 249.785071][T13467] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 249.802085][T13469] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 249.899278][T13478] loop2: detected capacity change from 0 to 1024 [ 249.916007][T13478] EXT4-fs: Ignoring removed nobh option [ 249.921637][T13478] EXT4-fs: Ignoring removed bh option [ 249.957582][T13481] loop3: detected capacity change from 0 to 1024 [ 250.038601][T13478] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.3685: Allocating blocks 497-513 which overlap fs metadata [ 250.080157][T13491] loop3: detected capacity change from 0 to 1024 [ 250.091071][T13478] EXT4-fs (loop2): pa ffff888106597770: logic 256, phys. 385, len 8 [ 250.099233][T13478] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 250.111567][T13491] EXT4-fs: Ignoring removed nobh option [ 250.117261][T13491] EXT4-fs: Ignoring removed bh option [ 250.588113][T13514] loop2: detected capacity change from 0 to 2048 [ 250.596359][T13512] loop1: detected capacity change from 0 to 1024 [ 250.627255][T13512] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.1.3698: corrupted in-inode xattr: bad magic number in in-inode xattr [ 250.659714][T13521] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 250.812497][T13540] 9pnet_fd: Insufficient options for proto=fd [ 250.851949][T13545] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 251.078498][T13556] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 251.086080][T13558] FAULT_INJECTION: forcing a failure. [ 251.086080][T13558] name failslab, interval 1, probability 0, space 0, times 0 [ 251.086144][T13558] CPU: 1 UID: 0 PID: 13558 Comm: syz.2.3713 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 251.086183][T13558] Tainted: [W]=WARN [ 251.086192][T13558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.086208][T13558] Call Trace: [ 251.086217][T13558] [ 251.086225][T13558] dump_stack_lvl+0xf2/0x150 [ 251.086299][T13558] dump_stack+0x15/0x1a [ 251.086326][T13558] should_fail_ex+0x24a/0x260 [ 251.086366][T13558] should_failslab+0x8f/0xb0 [ 251.086404][T13558] kmem_cache_alloc_noprof+0x52/0x320 [ 251.086431][T13558] ? copy_fs_struct+0x31/0x110 [ 251.086501][T13558] copy_fs_struct+0x31/0x110 [ 251.086527][T13558] __se_sys_setns+0x34c/0xef0 [ 251.086556][T13558] ? fput+0x1c4/0x200 [ 251.086585][T13558] __x64_sys_setns+0x31/0x40 [ 251.086678][T13558] x64_sys_call+0x16ec/0x2dc0 [ 251.086712][T13558] do_syscall_64+0xc9/0x1c0 [ 251.086751][T13558] ? clear_bhb_loop+0x55/0xb0 [ 251.086785][T13558] ? clear_bhb_loop+0x55/0xb0 [ 251.086826][T13558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.086868][T13558] RIP: 0033:0x7fd36f67d169 [ 251.086886][T13558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.086909][T13558] RSP: 002b:00007fd36dca5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 251.086932][T13558] RAX: ffffffffffffffda RBX: 00007fd36f896160 RCX: 00007fd36f67d169 [ 251.086949][T13558] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000008 [ 251.086964][T13558] RBP: 00007fd36dca5090 R08: 0000000000000000 R09: 0000000000000000 [ 251.086993][T13558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.087041][T13558] R13: 0000000000000000 R14: 00007fd36f896160 R15: 00007fffcdc4d008 [ 251.087060][T13558] [ 251.389775][T13563] loop3: detected capacity change from 0 to 1024 [ 251.436010][T13563] EXT4-fs: Ignoring removed nobh option [ 251.441632][T13563] EXT4-fs: Ignoring removed bh option [ 251.470715][T13565] loop0: detected capacity change from 0 to 256 [ 251.525577][T13565] FAT-fs (loop0): Directory bread(block 64) failed [ 251.546187][T13567] loop4: detected capacity change from 0 to 2048 [ 251.560186][T13565] FAT-fs (loop0): Directory bread(block 65) failed [ 251.592048][T13565] FAT-fs (loop0): Directory bread(block 66) failed [ 251.598629][T13565] FAT-fs (loop0): Directory bread(block 67) failed [ 251.606184][T13565] FAT-fs (loop0): Directory bread(block 68) failed [ 251.619895][T13563] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.3718: Allocating blocks 497-513 which overlap fs metadata [ 251.633813][T13565] FAT-fs (loop0): Directory bread(block 69) failed [ 251.640483][T13565] FAT-fs (loop0): Directory bread(block 70) failed [ 251.647067][T13565] FAT-fs (loop0): Directory bread(block 71) failed [ 251.653735][T13565] FAT-fs (loop0): Directory bread(block 72) failed [ 251.660318][T13565] FAT-fs (loop0): Directory bread(block 73) failed [ 251.672460][T13563] EXT4-fs (loop3): pa ffff888106597850: logic 256, phys. 385, len 8 [ 251.680635][T13563] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 251.691696][T13565] syz.0.3719: attempt to access beyond end of device [ 251.691696][T13565] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 251.705864][T13565] syz.0.3719: attempt to access beyond end of device [ 251.705864][T13565] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 251.829326][T13580] loop3: detected capacity change from 0 to 1024 [ 251.843774][T13580] EXT4-fs: Ignoring removed nobh option [ 251.849502][T13580] EXT4-fs: Ignoring removed bh option [ 251.899327][T13580] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.3722: Allocating blocks 497-513 which overlap fs metadata [ 251.918537][T13589] 9pnet_fd: Insufficient options for proto=fd [ 251.936747][T13587] loop1: detected capacity change from 0 to 256 [ 251.945934][T13580] EXT4-fs (loop3): pa ffff888106506e00: logic 256, phys. 385, len 8 [ 251.954040][T13580] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 251.981411][T13587] FAT-fs (loop1): Directory bread(block 64) failed [ 251.997215][T13587] FAT-fs (loop1): Directory bread(block 65) failed [ 252.022214][T13587] FAT-fs (loop1): Directory bread(block 66) failed [ 252.057936][T13587] FAT-fs (loop1): Directory bread(block 67) failed [ 252.087596][T13587] FAT-fs (loop1): Directory bread(block 68) failed [ 252.094153][T13587] FAT-fs (loop1): Directory bread(block 69) failed [ 252.112601][T13587] FAT-fs (loop1): Directory bread(block 70) failed [ 252.119674][T13587] FAT-fs (loop1): Directory bread(block 71) failed [ 252.138683][T13604] loop0: detected capacity change from 0 to 1024 [ 252.145320][T13587] FAT-fs (loop1): Directory bread(block 72) failed [ 252.155329][T13604] EXT4-fs: Ignoring removed nobh option [ 252.157897][T13587] FAT-fs (loop1): Directory bread(block 73) failed [ 252.161215][T13604] EXT4-fs: Ignoring removed bh option [ 252.247477][T13623] loop2: detected capacity change from 0 to 256 [ 252.256615][T13587] syz.1.3727: attempt to access beyond end of device [ 252.256615][T13587] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 252.287115][T13604] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.3733: Allocating blocks 497-513 which overlap fs metadata [ 252.301292][T13604] EXT4-fs (loop0): pa ffff888106597770: logic 256, phys. 385, len 8 [ 252.309427][T13604] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 252.317822][T13623] FAT-fs (loop2): Directory bread(block 64) failed [ 252.335117][T13587] syz.1.3727: attempt to access beyond end of device [ 252.335117][T13587] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 252.349543][T13623] FAT-fs (loop2): Directory bread(block 65) failed [ 252.356198][T13623] FAT-fs (loop2): Directory bread(block 66) failed [ 252.362805][T13623] FAT-fs (loop2): Directory bread(block 67) failed [ 252.369412][T13623] FAT-fs (loop2): Directory bread(block 68) failed [ 252.370080][T13629] 9pnet_fd: Insufficient options for proto=fd [ 252.376289][T13623] FAT-fs (loop2): Directory bread(block 69) failed [ 252.389039][T13623] FAT-fs (loop2): Directory bread(block 70) failed [ 252.395693][T13623] FAT-fs (loop2): Directory bread(block 71) failed [ 252.409992][T13623] FAT-fs (loop2): Directory bread(block 72) failed [ 252.417719][T13623] FAT-fs (loop2): Directory bread(block 73) failed [ 252.433333][T13632] sctp: [Deprecated]: syz.3.3744 (pid 13632) Use of int in max_burst socket option deprecated. [ 252.433333][T13632] Use struct sctp_assoc_value instead [ 252.490471][T13638] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 252.546030][T13642] loop4: detected capacity change from 0 to 256 [ 252.666318][T13647] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 252.743554][T13660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.762058][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.785217][T13662] loop4: detected capacity change from 0 to 256 [ 252.810812][T13662] FAT-fs (loop4): Directory bread(block 64) failed [ 252.822570][T13662] FAT-fs (loop4): Directory bread(block 65) failed [ 252.834490][T13665] syz.1.3758: attempt to access beyond end of device [ 252.834490][T13665] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 252.849049][T13662] FAT-fs (loop4): Directory bread(block 66) failed [ 252.855816][T13662] FAT-fs (loop4): Directory bread(block 67) failed [ 252.863523][T13662] FAT-fs (loop4): Directory bread(block 68) failed [ 252.880799][T13660] loop2: detected capacity change from 0 to 1024 [ 252.894654][T13662] FAT-fs (loop4): Directory bread(block 69) failed [ 252.906935][T13662] FAT-fs (loop4): Directory bread(block 70) failed [ 252.922843][T13662] FAT-fs (loop4): Directory bread(block 71) failed [ 252.939540][T13662] FAT-fs (loop4): Directory bread(block 72) failed [ 252.953223][T13662] FAT-fs (loop4): Directory bread(block 73) failed [ 253.004206][T13662] syz.4.3757: attempt to access beyond end of device [ 253.004206][T13662] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 253.020911][T13660] EXT4-fs mount: 94 callbacks suppressed [ 253.020943][T13660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.214862][T13662] syz.4.3757: attempt to access beyond end of device [ 253.214862][T13662] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 253.232548][T13660] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.2.3756: corrupted in-inode xattr: bad magic number in in-inode xattr [ 253.297947][T13674] loop4: detected capacity change from 0 to 1024 [ 253.318875][T13674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.383141][T11353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.444644][T13681] loop0: detected capacity change from 0 to 2048 [ 253.478218][T13681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.544843][T10763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.623795][T13693] loop0: detected capacity change from 0 to 1024 [ 253.642410][T13693] EXT4-fs: Ignoring removed nobh option [ 253.648167][T13693] EXT4-fs: Ignoring removed bh option [ 253.697171][T13693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.718598][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 253.718615][ T30] audit: type=1400 audit(1741461458.685:15057): avc: denied { watch watch_reads } for pid=13698 comm="syz.4.3770" path="/149/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.780902][T13699] SELinux: syz.4.3770 (13699) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 253.895259][T12082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.913463][T13693] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.3769: Allocating blocks 497-513 which overlap fs metadata [ 253.959557][T13693] EXT4-fs (loop0): pa ffff888106506e70: logic 256, phys. 385, len 8 [ 253.967638][T13693] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 253.985932][T13705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.994608][T13705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.016023][T13705] loop4: detected capacity change from 0 to 1024 [ 254.027092][T13702] loop2: detected capacity change from 0 to 256 [ 254.047335][T13702] FAT-fs (loop2): Directory bread(block 64) failed [ 254.058877][T13705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.064205][T13702] FAT-fs (loop2): Directory bread(block 65) failed [ 254.081371][T13705] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.4.3772: corrupted in-inode xattr: bad magic number in in-inode xattr [ 254.126658][T10763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.129774][T13702] FAT-fs (loop2): Directory bread(block 66) failed [ 254.142541][T13702] FAT-fs (loop2): Directory bread(block 67) failed [ 254.150184][T13702] FAT-fs (loop2): Directory bread(block 68) failed [ 254.156800][T13702] FAT-fs (loop2): Directory bread(block 69) failed [ 254.163437][T13702] FAT-fs (loop2): Directory bread(block 70) failed [ 254.170026][T13702] FAT-fs (loop2): Directory bread(block 71) failed [ 254.175057][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.176842][T13702] FAT-fs (loop2): Directory bread(block 72) failed [ 254.191941][T13702] FAT-fs (loop2): Directory bread(block 73) failed [ 254.205785][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.217555][T13711] loop1: detected capacity change from 0 to 1024 [ 254.229973][T13709] loop0: detected capacity change from 0 to 1024 [ 254.241864][T13711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.277111][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.277499][T13702] syz.2.3771: attempt to access beyond end of device [ 254.277499][T13702] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 254.287646][T13709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.353666][T13709] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.0.3773: corrupted in-inode xattr: bad magic number in in-inode xattr [ 254.377397][ T30] audit: type=1326 audit(1741461459.325:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.401702][ T30] audit: type=1326 audit(1741461459.325:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.425581][ T30] audit: type=1326 audit(1741461459.325:15060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.436190][T13719] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 254.449176][ T30] audit: type=1326 audit(1741461459.325:15061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.480882][ T30] audit: type=1326 audit(1741461459.325:15062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.504611][ T30] audit: type=1326 audit(1741461459.325:15063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.528273][ T30] audit: type=1326 audit(1741461459.325:15064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.551914][ T30] audit: type=1326 audit(1741461459.335:15065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.1.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 254.641776][ T30] audit: type=1326 audit(1741461459.575:15066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13720 comm="syz.2.3777" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd36f67d169 code=0x0 [ 254.668090][T13722] loop2: detected capacity change from 0 to 512 [ 254.676471][T13722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.724716][T13722] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.749895][T11353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.781044][T13727] loop3: detected capacity change from 0 to 256 [ 254.795153][T13727] FAT-fs (loop3): Directory bread(block 64) failed [ 254.801794][T13727] FAT-fs (loop3): Directory bread(block 65) failed [ 254.810353][T13727] FAT-fs (loop3): Directory bread(block 66) failed [ 254.818332][T13727] FAT-fs (loop3): Directory bread(block 67) failed [ 254.825771][T13727] FAT-fs (loop3): Directory bread(block 68) failed [ 254.832386][T13727] FAT-fs (loop3): Directory bread(block 69) failed [ 254.839233][T13727] FAT-fs (loop3): Directory bread(block 70) failed [ 254.846764][T13727] FAT-fs (loop3): Directory bread(block 71) failed [ 254.853436][T13727] FAT-fs (loop3): Directory bread(block 72) failed [ 254.860232][T13727] FAT-fs (loop3): Directory bread(block 73) failed [ 254.882172][T13727] bio_check_eod: 1 callbacks suppressed [ 254.882188][T13727] syz.3.3780: attempt to access beyond end of device [ 254.882188][T13727] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 254.902879][T13727] syz.3.3780: attempt to access beyond end of device [ 254.902879][T13727] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 254.992554][T10763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.038011][T13737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.046861][T13737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.062368][T13737] loop3: detected capacity change from 0 to 1024 [ 255.077979][T13737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.113354][T13737] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.3784: corrupted in-inode xattr: bad magic number in in-inode xattr [ 255.134337][T13741] loop4: detected capacity change from 0 to 2048 [ 255.188176][T13741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.235490][T11353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.290478][T13751] loop4: detected capacity change from 0 to 256 [ 255.316149][T13751] FAT-fs (loop4): Directory bread(block 64) failed [ 255.322931][T13751] FAT-fs (loop4): Directory bread(block 65) failed [ 255.329883][T13751] FAT-fs (loop4): Directory bread(block 66) failed [ 255.337629][T13751] FAT-fs (loop4): Directory bread(block 67) failed [ 255.344189][T13751] FAT-fs (loop4): Directory bread(block 68) failed [ 255.353767][T13751] FAT-fs (loop4): Directory bread(block 69) failed [ 255.361474][T13751] FAT-fs (loop4): Directory bread(block 70) failed [ 255.368750][T13751] FAT-fs (loop4): Directory bread(block 71) failed [ 255.375382][T13751] FAT-fs (loop4): Directory bread(block 72) failed [ 255.382100][T13751] FAT-fs (loop4): Directory bread(block 73) failed [ 255.413653][T12082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.430448][T13751] syz.4.3788: attempt to access beyond end of device [ 255.430448][T13751] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 255.444522][T13751] syz.4.3788: attempt to access beyond end of device [ 255.444522][T13751] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 255.520726][T13760] loop4: detected capacity change from 0 to 256 [ 255.545753][T13760] FAT-fs (loop4): Directory bread(block 64) failed [ 255.548751][T13764] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 255.552657][T13760] FAT-fs (loop4): Directory bread(block 65) failed [ 255.584697][T13760] FAT-fs (loop4): Directory bread(block 66) failed [ 255.591294][T13760] FAT-fs (loop4): Directory bread(block 67) failed [ 255.604788][T13760] FAT-fs (loop4): Directory bread(block 68) failed [ 255.611399][T13760] FAT-fs (loop4): Directory bread(block 69) failed [ 255.630385][T13770] sctp: [Deprecated]: syz.1.3797 (pid 13770) Use of int in max_burst socket option deprecated. [ 255.630385][T13770] Use struct sctp_assoc_value instead [ 255.634784][T13760] FAT-fs (loop4): Directory bread(block 70) failed [ 255.654813][T13760] FAT-fs (loop4): Directory bread(block 71) failed [ 255.661392][T13760] FAT-fs (loop4): Directory bread(block 72) failed [ 255.716160][T13760] FAT-fs (loop4): Directory bread(block 73) failed [ 255.738438][T11708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.781407][T13760] syz.4.3792: attempt to access beyond end of device [ 255.781407][T13760] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 255.782374][T13781] syz.3.3800: attempt to access beyond end of device [ 255.782374][T13781] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 255.820303][T13760] syz.4.3792: attempt to access beyond end of device [ 255.820303][T13760] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 256.598103][T13791] loop4: detected capacity change from 0 to 1024 [ 256.604883][T13791] EXT4-fs: Ignoring removed nobh option [ 256.610514][T13791] EXT4-fs: Ignoring removed bh option [ 256.652905][T13791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.710156][T13790] loop3: detected capacity change from 0 to 512 [ 256.716688][T13790] EXT4-fs: Ignoring removed bh option [ 256.853640][T13791] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.3804: Allocating blocks 497-513 which overlap fs metadata [ 256.896442][T13791] EXT4-fs (loop4): pa ffff888106597850: logic 256, phys. 385, len 8 [ 256.904509][T13791] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 256.926525][T13790] EXT4-fs error (device loop3): ext4_quota_enable:7101: comm syz.3.3802: inode #33554432: comm syz.3.3802: iget: illegal inode # [ 256.941213][T13790] EXT4-fs (loop3): Remounting filesystem read-only [ 256.947862][T13790] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 256.963338][T13790] EXT4-fs (loop3): mount failed [ 257.029382][T11353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.147626][T13804] loop1: detected capacity change from 0 to 1024 [ 257.161594][T13804] EXT4-fs: Ignoring removed nobh option [ 257.167332][T13804] EXT4-fs: Ignoring removed bh option [ 257.197943][T13804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.256870][T13804] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.3808: Allocating blocks 497-513 which overlap fs metadata [ 257.290990][T13804] EXT4-fs (loop1): pa ffff888106597770: logic 256, phys. 385, len 8 [ 257.299067][T13804] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 257.434544][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.458030][T13811] loop4: detected capacity change from 0 to 1024 [ 257.477268][T13811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.530599][T11353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.621505][T13819] loop1: detected capacity change from 0 to 512 [ 257.637270][T13819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.702026][T13809] loop2: detected capacity change from 0 to 32768 [ 257.708776][T13819] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.747713][T13809] loop2: p1 p3 < p5 p6 > [ 257.797447][T13826] loop3: detected capacity change from 0 to 1024 [ 257.845572][T13827] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.3812: corrupted inode contents [ 257.868177][T13827] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.3812: mark_inode_dirty error [ 257.881973][T13826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.899939][T13835] serio: Serial port ptm0 [ 257.906488][T13836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13836 comm=syz.0.3818 [ 257.920611][T13826] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.931294][T13827] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.3812: corrupted inode contents [ 258.097750][T11708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.106904][T13827] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.3812: mark_inode_dirty error [ 258.124876][T13827] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.3812: mark inode dirty (error -117) [ 258.145732][T13827] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 258.418320][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.528637][T13861] loop2: detected capacity change from 0 to 1024 [ 258.551278][T13861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.568171][T13861] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.604447][T13871] loop4: detected capacity change from 0 to 2048 [ 258.623640][T12082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.645048][T13871] loop4: p1 < > p3 [ 258.649693][T13871] loop4: p3 size 134217728 extends beyond EOD, truncated [ 258.734788][T13885] loop2: detected capacity change from 0 to 164 [ 258.742227][T13885] Unable to read rock-ridge attributes [ 258.748234][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 258.748250][ T30] audit: type=1400 audit(1741461463.715:15146): avc: denied { mount } for pid=13883 comm="syz.2.3839" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 258.817050][ T30] audit: type=1400 audit(1741461463.765:15147): avc: denied { unmount } for pid=12082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 258.966617][T13899] loop4: detected capacity change from 0 to 8192 [ 258.966799][ T30] audit: type=1400 audit(1741461463.935:15148): avc: denied { mounton } for pid=13902 comm="syz.3.3846" path="/168/file0" dev="tmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 259.041883][ T30] audit: type=1326 audit(1741461464.005:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.4.3847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f466127d169 code=0x0 [ 259.075698][ T30] audit: type=1400 audit(1741461464.045:15150): avc: denied { create } for pid=13884 comm="syz.1.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 259.103810][T13908] loop4: detected capacity change from 0 to 512 [ 259.115801][T13908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.136657][T13908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.150324][T13908] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.162573][T13908] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 259.179155][T13908] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 6 with max blocks 1 with error 28 [ 259.191383][T13908] EXT4-fs (loop4): This should not happen!! Data will be lost [ 259.191383][T13908] [ 259.201074][T13908] EXT4-fs (loop4): Total free blocks count 0 [ 259.207074][T13908] EXT4-fs (loop4): Free/Dirty block details [ 259.213053][T13908] EXT4-fs (loop4): free_blocks=39626 [ 259.218422][T13908] EXT4-fs (loop4): dirty_blocks=1 [ 259.223465][T13908] EXT4-fs (loop4): Block reservation details [ 259.229482][T13908] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 259.240920][T13915] loop1: detected capacity change from 0 to 128 [ 259.278444][ T30] audit: type=1326 audit(1741461464.245:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.1.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 259.306998][T13922] loop0: detected capacity change from 0 to 1024 [ 259.313707][T13922] journal_path: Lookup failure for './file2' [ 259.316588][ T30] audit: type=1326 audit(1741461464.245:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.1.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 259.319749][T13922] EXT4-fs: error: could not find journal device path [ 259.343376][ T30] audit: type=1326 audit(1741461464.245:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.1.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 259.373685][ T30] audit: type=1326 audit(1741461464.245:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.1.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 259.397492][ T30] audit: type=1326 audit(1741461464.275:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.1.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 259.400374][T13927] x_tables: duplicate underflow at hook 2 [ 259.501242][T13937] xt_bpf: check failed: parse error [ 259.626138][T13943] loop1: detected capacity change from 0 to 128 [ 259.790785][T13956] loop2: detected capacity change from 0 to 512 [ 259.818048][T13956] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.3869: Failed to acquire dquot type 1 [ 259.830642][T13956] EXT4-fs (loop2): 1 truncate cleaned up [ 259.836889][T13956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.849647][T13956] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.862367][T13956] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.3869: Failed to acquire dquot type 1 [ 259.888031][T12082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.888510][T11353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.924859][T13962] loop4: detected capacity change from 0 to 256 [ 259.979063][T13967] loop4: detected capacity change from 0 to 512 [ 259.988594][T13967] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 260.000319][T13967] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 260.010464][T13967] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3873: Corrupt directory, running e2fsck is recommended [ 260.026544][T13967] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 260.035069][T13967] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3873: corrupted in-inode xattr: invalid ea_ino [ 260.048926][T13967] EXT4-fs (loop4): Remounting filesystem read-only [ 260.056025][T13967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.068817][T13967] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 260.076174][T13967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.238042][T13981] loop4: detected capacity change from 0 to 128 [ 260.339606][T13987] loop3: detected capacity change from 0 to 512 [ 260.466931][T13987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 260.480553][T13987] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.492714][T13987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 260.536794][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3882'. [ 260.576279][T14004] loop1: detected capacity change from 0 to 1024 [ 260.590651][T14004] journal_path: Lookup failure for './file2' [ 260.596738][T14004] EXT4-fs: error: could not find journal device path [ 261.132741][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 261.188677][T14051] loop3: detected capacity change from 0 to 512 [ 261.218135][T14056] loop2: detected capacity change from 0 to 2048 [ 261.224617][T14051] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 261.241101][T14051] EXT4-fs (loop3): mount failed [ 261.258221][T14051] loop3: detected capacity change from 0 to 1024 [ 261.265203][T14051] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 261.276189][T14051] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 261.286189][T14056] loop2: p2 p3 < > p4 < p5 > [ 261.290933][T14056] loop2: partition table partially beyond EOD, truncated [ 261.300172][T14056] loop2: p3 start 4284289 is beyond EOD, truncated [ 261.301615][T14051] JBD2: no valid journal superblock found [ 261.312532][T14051] EXT4-fs (loop3): Could not load journal inode [ 261.459736][T14069] loop3: detected capacity change from 0 to 8192 [ 261.528690][ T3375] IPVS: starting estimator thread 0... [ 261.569049][T14083] loop2: detected capacity change from 0 to 512 [ 261.604364][T14083] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 261.634670][T14078] IPVS: using max 2304 ests per chain, 115200 per kthread [ 261.666413][T14088] x_tables: duplicate underflow at hook 2 [ 261.845249][T14105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3930'. [ 261.854348][T14105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3930'. [ 261.872261][T14105] geneve2: entered allmulticast mode [ 261.944097][T14121] loop3: detected capacity change from 0 to 764 [ 261.954740][T14121] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 262.137904][T14140] netlink: 'syz.0.3949': attribute type 16 has an invalid length. [ 262.145943][T14140] netlink: 'syz.0.3949': attribute type 17 has an invalid length. [ 262.177910][T14140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.193633][T14146] loop3: detected capacity change from 0 to 2048 [ 262.206426][T14146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.288842][T11708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.447055][T14181] loop1: detected capacity change from 0 to 512 [ 262.461525][T14181] EXT4-fs: inline encryption not supported [ 262.477466][T14181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.491507][T14181] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.554492][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.840661][T14236] x_tables: duplicate underflow at hook 2 [ 262.892635][T14243] loop3: detected capacity change from 0 to 512 [ 262.901479][T14243] EXT4-fs: inline encryption not supported [ 262.911714][T14243] EXT4-fs: test_dummy_encryption option not supported [ 262.951844][T14243] syzkaller0: entered promiscuous mode [ 262.957677][T14243] syzkaller0: entered allmulticast mode [ 262.960919][T14252] loop2: detected capacity change from 0 to 128 [ 262.972195][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 263.007299][T14259] loop2: detected capacity change from 0 to 256 [ 263.023234][T14261] x_tables: duplicate underflow at hook 2 [ 263.090331][T14272] loop3: detected capacity change from 0 to 1024 [ 263.098648][T14272] journal_path: Lookup failure for './file2' [ 263.104757][T14272] EXT4-fs: error: could not find journal device path [ 263.877335][T14302] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4020'. [ 263.953516][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 263.953531][ T30] audit: type=1400 audit(1741461468.915:15304): avc: denied { sqpoll } for pid=14307 comm="syz.1.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 264.097596][ T30] audit: type=1326 audit(1741461469.065:15305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.122067][ T30] audit: type=1326 audit(1741461469.065:15306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.145870][ T30] audit: type=1326 audit(1741461469.065:15307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.169672][ T30] audit: type=1326 audit(1741461469.065:15308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.193343][ T30] audit: type=1326 audit(1741461469.065:15309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.217005][ T30] audit: type=1326 audit(1741461469.065:15310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.240725][ T30] audit: type=1326 audit(1741461469.065:15311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.264680][ T30] audit: type=1326 audit(1741461469.065:15312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.288905][ T30] audit: type=1326 audit(1741461469.135:15313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14317 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 264.349644][T14328] x_tables: duplicate underflow at hook 2 [ 264.658267][T14308] Set syz1 is full, maxelem 65536 reached [ 264.676069][T14339] wg2: entered promiscuous mode [ 264.681027][T14339] wg2: entered allmulticast mode [ 264.740562][T14351] x_tables: duplicate underflow at hook 2 [ 264.746885][T14349] loop3: detected capacity change from 0 to 512 [ 264.771731][T14349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.784644][T14349] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.822279][T11708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.846352][T14365] loop2: detected capacity change from 0 to 128 [ 264.862313][T14365] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.883351][T14365] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.991931][T14374] loop2: detected capacity change from 0 to 128 [ 265.025143][T14374] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 265.033153][T14374] FAT-fs (loop2): Filesystem has been set read-only [ 265.042065][T14374] syz.2.4050: attempt to access beyond end of device [ 265.042065][T14374] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.431573][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'. [ 265.552065][T14408] loop2: detected capacity change from 0 to 512 [ 265.558666][T14408] EXT4-fs: inline encryption not supported [ 265.587442][T14408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.600140][T14408] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.615097][T14408] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4067: corrupted inode contents [ 265.628270][T14408] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.4067: mark_inode_dirty error [ 265.639940][T14408] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4067: corrupted inode contents [ 265.653350][T14408] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.4067: mark_inode_dirty error [ 265.684637][T12082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.793520][T14423] loop2: detected capacity change from 0 to 512 [ 265.820107][T14423] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 265.834787][T14425] loop4: detected capacity change from 0 to 512 [ 265.876733][T14425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 265.894993][T14425] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.943422][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 265.973398][T14437] mmap: syz.2.4079 (14437) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.416779][T14477] netem: change failed [ 266.479292][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4098'. [ 266.491257][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.502932][T14479] bridge_slave_1 (unregistering): left allmulticast mode [ 266.510127][T14479] bridge_slave_1 (unregistering): left promiscuous mode [ 266.517359][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.543150][T14489] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 266.566087][T14487] loop4: detected capacity change from 0 to 256 [ 266.631738][T14498] loop4: detected capacity change from 0 to 512 [ 266.656932][T14498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.679704][T14498] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.741704][T11353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.913915][T14516] loop2: detected capacity change from 0 to 256 [ 267.054128][ T386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.108030][ T386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.189699][ T386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.198690][T14538] netlink: 'syz.4.4124': attribute type 16 has an invalid length. [ 267.207854][T14538] netlink: 'syz.4.4124': attribute type 17 has an invalid length. [ 267.243822][T14538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.292123][ T386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.406000][ T386] bridge_slave_1: left allmulticast mode [ 267.411688][ T386] bridge_slave_1: left promiscuous mode [ 267.417425][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.531945][ T386] bridge_slave_0: left allmulticast mode [ 267.537942][ T386] bridge_slave_0: left promiscuous mode [ 267.543589][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.047555][T14583] x_tables: duplicate underflow at hook 2 [ 268.088589][ T386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.100050][ T386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.111158][ T386] bond0 (unregistering): Released all slaves [ 268.129595][T14590] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0 [ 268.156603][ T386] hsr_slave_0: left promiscuous mode [ 268.162371][ T386] hsr_slave_1: left promiscuous mode [ 268.168281][ T386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.175739][ T386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.183369][ T386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.190858][ T386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.200244][ T386] veth1_macvtap: left promiscuous mode [ 268.205773][ T386] veth0_macvtap: left promiscuous mode [ 268.211413][ T386] veth1_vlan: left promiscuous mode [ 268.216687][ T386] veth0_vlan: left promiscuous mode [ 268.285525][ T386] team0 (unregistering): Port device team_slave_1 removed [ 268.296334][ T386] team0 (unregistering): Port device team_slave_0 removed [ 268.351624][T14531] chnl_net:caif_netlink_parms(): no params data found [ 268.397594][T14601] geneve0: entered promiscuous mode [ 268.403022][T14601] macvlan2: entered promiscuous mode [ 268.408464][T14601] macvlan2: entered allmulticast mode [ 268.413881][T14601] geneve0: entered allmulticast mode [ 268.422079][T14601] geneve0: left allmulticast mode [ 268.427515][T14601] geneve0: left promiscuous mode [ 268.448775][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.456012][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.463284][T14531] bridge_slave_0: entered allmulticast mode [ 268.469984][T14531] bridge_slave_0: entered promiscuous mode [ 268.476775][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.483917][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.491551][T14531] bridge_slave_1: entered allmulticast mode [ 268.498294][T14531] bridge_slave_1: entered promiscuous mode [ 268.511475][T14609] futex_wake_op: syz.2.4149 tries to shift op by 32; fix this program [ 268.522065][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.532872][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.554062][T14531] team0: Port device team_slave_0 added [ 268.560966][T14531] team0: Port device team_slave_1 added [ 268.578142][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.585192][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.611241][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.622909][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.629956][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.656025][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.689431][T14531] hsr_slave_0: entered promiscuous mode [ 268.695761][T14531] hsr_slave_1: entered promiscuous mode [ 268.701699][T14531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.710505][T14531] Cannot create hsr debugfs directory [ 268.806711][T14531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.815545][T14531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.824542][T14531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.835025][T14531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.849043][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.856191][T14531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.863520][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.870612][T14531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.904501][T14531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.923205][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.931271][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.945327][T14531] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.955790][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.962891][ T9542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.973199][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.980289][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.037277][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.139929][T14531] veth0_vlan: entered promiscuous mode [ 269.151215][T14531] veth1_vlan: entered promiscuous mode [ 269.168692][T14531] veth0_macvtap: entered promiscuous mode [ 269.176412][T14531] veth1_macvtap: entered promiscuous mode [ 269.188689][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.199238][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.199258][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.219660][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.219682][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.219698][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.219712][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.219787][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.221305][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.277668][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 269.277684][ T30] audit: type=1326 audit(1741461474.235:15400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.307388][ T30] audit: type=1326 audit(1741461474.235:15401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.331189][ T30] audit: type=1326 audit(1741461474.235:15402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.342312][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.354810][ T30] audit: type=1326 audit(1741461474.235:15403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.354842][ T30] audit: type=1326 audit(1741461474.235:15404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.365269][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.365287][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.365310][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.388844][ T30] audit: type=1326 audit(1741461474.235:15405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.412458][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.422280][ T30] audit: type=1326 audit(1741461474.235:15406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.432667][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.442486][ T30] audit: type=1326 audit(1741461474.235:15407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.465985][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.476396][ T30] audit: type=1326 audit(1741461474.235:15408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.499928][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.509733][ T30] audit: type=1326 audit(1741461474.235:15409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.0.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 269.545427][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.610078][T14531] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.619107][T14531] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.627887][T14531] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.636703][T14531] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.668419][T14650] sock: sock_timestamping_bind_phc: sock not bind to device [ 269.669841][T14653] sch_tbf: peakrate 7 is lower than or equals to rate 62733 ! [ 269.687913][T14655] netlink: 'syz.2.4162': attribute type 16 has an invalid length. [ 269.695894][T14655] netlink: 'syz.2.4162': attribute type 17 has an invalid length. [ 269.739013][T14655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.308928][T14713] x_tables: duplicate underflow at hook 2 [ 271.161353][T14741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4200'. [ 271.357011][T14763] x_tables: duplicate underflow at hook 2 [ 271.371612][T14765] 9pnet_fd: Insufficient options for proto=fd [ 271.563289][T14730] 9pnet_fd: p9_fd_create_tcp (14730): problem connecting socket to 127.0.0.1 [ 271.739336][T14736] Set syz1 is full, maxelem 65536 reached [ 271.809875][T14790] loop5: detected capacity change from 0 to 512 [ 271.815783][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 271.829129][T14788] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4222'. [ 271.845506][T14790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 271.859402][T14790] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.877914][T14790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 271.895849][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4224'. [ 271.904980][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4224'. [ 272.037689][T14808] 9pnet_fd: Insufficient options for proto=fd [ 272.255319][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4247'. [ 272.315945][T14845] syzkaller0: entered promiscuous mode [ 272.321473][T14845] syzkaller0: entered allmulticast mode [ 272.726699][T14896] syz.2.4270: attempt to access beyond end of device [ 272.726699][T14896] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 272.740473][T14896] EXT4-fs (loop5): unable to read superblock [ 273.221642][T14916] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.234498][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4285'. [ 273.243601][T14929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4285'. [ 273.254793][T14929] geneve0: entered allmulticast mode [ 273.261843][ T36] IPVS: starting estimator thread 0... [ 273.355268][T14930] IPVS: using max 1872 ests per chain, 93600 per kthread [ 273.370125][T14934] xt_bpf: check failed: parse error [ 273.452919][ T386] IPVS: stop unused estimator thread 0... [ 273.470145][T14944] tmpfs: Unknown parameter 'n' [ 273.509619][T14948] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4293'. [ 273.543793][T14956] x_tables: duplicate underflow at hook 2 [ 275.040188][T15075] syz_tun: entered allmulticast mode [ 275.047304][T15074] syz_tun: left allmulticast mode [ 275.099854][T15079] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 275.102105][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 275.102123][ T30] audit: type=1400 audit(1741461479.067:15681): avc: denied { ioctl } for pid=15078 comm="+}[@" path="socket:[45190]" dev="sockfs" ino=45190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.587792][T15070] Set syz1 is full, maxelem 65536 reached [ 275.643547][T15092] loop5: detected capacity change from 0 to 256 [ 275.701037][T15102] loop5: detected capacity change from 0 to 512 [ 275.708754][T15102] EXT4-fs: inline encryption not supported [ 275.716490][T15102] EXT4-fs: test_dummy_encryption option not supported [ 275.842550][T15120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.887208][ T3378] IPVS: starting estimator thread 0... [ 275.893097][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4370'. [ 275.896245][T15133] syz.4.4369: attempt to access beyond end of device [ 275.896245][T15133] loop9: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 275.915479][T15133] EXT4-fs (loop9): unable to read superblock [ 275.984970][T15134] IPVS: using max 2304 ests per chain, 115200 per kthread [ 276.012697][T15143] 9pnet_fd: Insufficient options for proto=fd [ 276.054100][T15147] loop5: detected capacity change from 0 to 2048 [ 276.091758][T15147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.117154][T15165] IPv6: addrconf: prefix option has invalid lifetime [ 276.162181][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.194835][T15171] loop5: detected capacity change from 0 to 512 [ 276.201286][T15171] EXT4-fs: inline encryption not supported [ 276.212973][T15171] EXT4-fs: test_dummy_encryption option not supported [ 276.221292][ T30] audit: type=1326 audit(1741461480.187:15682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 276.244979][ T30] audit: type=1326 audit(1741461480.187:15683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 276.267587][T15171] syzkaller0: entered promiscuous mode [ 276.273868][ T30] audit: type=1326 audit(1741461480.187:15684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 276.274001][T15171] syzkaller0: entered allmulticast mode [ 276.303643][ T30] audit: type=1326 audit(1741461480.187:15685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 276.327548][ T30] audit: type=1326 audit(1741461480.187:15686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 276.496930][T15202] geneve0: entered promiscuous mode [ 276.503653][T15202] macvlan0: entered promiscuous mode [ 276.509151][T15202] macvlan0: entered allmulticast mode [ 276.514689][T15202] geneve0: entered allmulticast mode [ 276.523992][ T30] audit: type=1326 audit(1741461480.487:15687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15205 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 276.533317][T15202] geneve0: left allmulticast mode [ 276.547662][ T30] audit: type=1326 audit(1741461480.487:15688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15205 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 276.552912][T15202] geneve0: left promiscuous mode [ 276.582017][ T30] audit: type=1326 audit(1741461480.497:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15205 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 276.605740][ T30] audit: type=1326 audit(1741461480.497:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15205 comm="syz.5.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 276.690722][T15215] 9pnet_fd: Insufficient options for proto=fd [ 276.725911][T15217] loop5: detected capacity change from 0 to 512 [ 276.734829][T15217] EXT4-fs: inline encryption not supported [ 276.740882][T15217] EXT4-fs: test_dummy_encryption option not supported [ 276.789469][T15217] syzkaller0: entered promiscuous mode [ 276.795116][T15217] syzkaller0: entered allmulticast mode [ 277.177054][T15258] syzkaller0: entered promiscuous mode [ 277.182596][T15258] syzkaller0: entered allmulticast mode [ 277.768637][T15312] loop5: detected capacity change from 0 to 256 [ 278.078378][T15332] syzkaller0: entered promiscuous mode [ 278.083943][T15332] syzkaller0: entered allmulticast mode [ 278.516464][T15360] 9pnet_fd: Insufficient options for proto=fd [ 278.614488][T15372] x_tables: duplicate underflow at hook 2 [ 278.803583][T15380] loop5: detected capacity change from 0 to 512 [ 278.812218][T15380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.824856][T15380] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.927873][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.503845][T15431] syzkaller0: entered promiscuous mode [ 279.509567][T15431] syzkaller0: entered allmulticast mode [ 279.567619][T15448] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15448 comm=syz.0.4505 [ 279.580344][T15448] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15448 comm=syz.0.4505 [ 279.617794][T15453] loop5: detected capacity change from 0 to 128 [ 279.675603][T15461] x_tables: duplicate underflow at hook 2 [ 279.682193][T15464] __nla_validate_parse: 1 callbacks suppressed [ 279.682212][T15464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4513'. [ 279.691091][T15461] loop5: detected capacity change from 0 to 256 [ 279.723732][T15461] vfat: Bad value for 'dmask' [ 279.809193][T15487] tmpfs: Bad value for 'mpol' [ 280.184676][ T10] IPVS: starting estimator thread 0... [ 280.274625][T15521] IPVS: using max 1872 ests per chain, 93600 per kthread [ 280.324106][T15535] IPVS: You probably need to specify IP address on multicast interface. [ 280.332687][T15535] IPVS: Error connecting to the multicast addr [ 280.365704][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 280.365724][ T30] audit: type=1326 audit(1741461484.337:15868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.395807][ T30] audit: type=1326 audit(1741461484.337:15869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.419764][ T30] audit: type=1326 audit(1741461484.337:15870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.443454][ T30] audit: type=1326 audit(1741461484.337:15871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.467683][ T30] audit: type=1326 audit(1741461484.337:15872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.491401][ T30] audit: type=1326 audit(1741461484.337:15873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.516511][ T30] audit: type=1326 audit(1741461484.457:15874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.540258][ T30] audit: type=1326 audit(1741461484.457:15875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.1.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 280.590388][ T30] audit: type=1326 audit(1741461484.557:15876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.0.4547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x0 [ 280.693421][ T30] audit: type=1326 audit(1741461484.657:15877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15560 comm="syz.4.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 280.774057][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4557'. [ 280.785714][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4557'. [ 296.063180][T15600] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4572'. [ 296.080003][T15600] gretap0: entered promiscuous mode [ 296.091843][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4574'. [ 296.098709][T15600] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4572'. [ 296.110028][T15600] 0ªX¹¦D: renamed from gretap0 [ 296.116177][T15600] 0ªX¹¦D: left promiscuous mode [ 296.121393][T15600] 0ªX¹¦D: entered allmulticast mode [ 296.129635][T15600] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 296.145464][T15606] bridge_slave_1: left allmulticast mode [ 296.151160][T15606] bridge_slave_1: left promiscuous mode [ 296.156996][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.253446][T15606] bridge_slave_0: left allmulticast mode [ 296.259261][T15606] bridge_slave_0: left promiscuous mode [ 296.265038][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.353459][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 296.353477][ T30] audit: type=1326 audit(1741461500.317:15934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.395447][ T30] audit: type=1326 audit(1741461500.347:15935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.419275][ T30] audit: type=1326 audit(1741461500.347:15936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.443033][ T30] audit: type=1326 audit(1741461500.347:15937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.466851][ T30] audit: type=1326 audit(1741461500.347:15938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.490525][ T30] audit: type=1326 audit(1741461500.347:15939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.514218][ T30] audit: type=1326 audit(1741461500.347:15940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.537851][ T30] audit: type=1326 audit(1741461500.347:15941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.561510][ T30] audit: type=1326 audit(1741461500.347:15942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.585107][ T30] audit: type=1326 audit(1741461500.347:15943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.5.4579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 296.605610][ T10] IPVS: starting estimator thread 0... [ 296.641019][T15634] x_tables: duplicate underflow at hook 2 [ 296.695732][T15629] IPVS: using max 2304 ests per chain, 115200 per kthread [ 296.815200][T15657] geneve0: entered promiscuous mode [ 296.820533][T15657] macvlan2: entered promiscuous mode [ 296.826075][T15657] macvlan2: entered allmulticast mode [ 296.831543][T15657] geneve0: entered allmulticast mode [ 296.872029][T15661] x_tables: duplicate underflow at hook 2 [ 296.885232][T15660] loop5: detected capacity change from 0 to 4096 [ 296.901220][T15660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.926465][T15660] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 297.012333][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.100806][T15684] loop5: detected capacity change from 0 to 512 [ 297.115998][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4608'. [ 297.125080][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4608'. [ 297.149207][T15686] geneve2: entered allmulticast mode [ 297.177172][T15684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 297.193304][T15684] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.206230][T15684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 297.536203][T15722] veth0_to_bond: entered promiscuous mode [ 297.542804][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4623'. [ 297.606208][T15722] veth0_to_bond (unregistering): left promiscuous mode [ 297.625642][T15722] bond0: (slave bond_slave_0): Releasing backup interface [ 297.674247][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4628'. [ 297.734412][T15744] netlink: 'syz.0.4630': attribute type 15 has an invalid length. [ 298.005623][T15769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15769 comm=syz.1.4644 [ 298.166998][T15794] x_tables: duplicate underflow at hook 2 [ 298.178901][T15794] loop5: detected capacity change from 0 to 256 [ 298.187274][T15794] vfat: Bad value for 'dmask' [ 298.503517][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4674'. [ 298.555107][ T3485] Process accounting resumed [ 299.058412][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 299.260647][T15901] syzkaller0: entered promiscuous mode [ 299.266202][T15901] syzkaller0: entered allmulticast mode [ 299.320775][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4702'. [ 299.329869][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4702'. [ 299.808140][T15962] block device autoloading is deprecated and will be removed. [ 300.047599][T15970] sock: sock_timestamping_bind_phc: sock not bind to device [ 300.273210][T16000] loop5: detected capacity change from 0 to 2048 [ 300.279673][T15980] blktrace: Concurrent blktraces are not allowed on loop3 [ 300.342392][T16000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.508504][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.710262][T16033] syzkaller0: entered promiscuous mode [ 300.715883][T16033] syzkaller0: entered allmulticast mode [ 300.806032][T16040] xt_bpf: check failed: parse error [ 300.997295][T16057] loop5: detected capacity change from 0 to 1024 [ 301.034376][T16057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.070524][T16057] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.4771: Allocating blocks 385-513 which overlap fs metadata [ 301.139811][T16057] EXT4-fs (loop5): pa ffff888106597850: logic 16, phys. 129, len 24 [ 301.147993][T16057] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 301.190225][T16057] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 301.202719][T16057] EXT4-fs (loop5): This should not happen!! Data will be lost [ 301.202719][T16057] [ 301.212390][T16057] EXT4-fs (loop5): Total free blocks count 0 [ 301.218514][T16057] EXT4-fs (loop5): Free/Dirty block details [ 301.224447][T16057] EXT4-fs (loop5): free_blocks=128 [ 301.229721][T16057] EXT4-fs (loop5): dirty_blocks=0 [ 301.234854][T16057] EXT4-fs (loop5): Block reservation details [ 301.240849][T16057] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 301.258754][T16071] syzkaller0: entered promiscuous mode [ 301.264253][T16071] syzkaller0: entered allmulticast mode [ 301.870602][T16123] loop5: detected capacity change from 0 to 512 [ 301.879450][T16123] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 301.898766][T16123] EXT4-fs (loop5): 1 truncate cleaned up [ 301.905913][T16123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.955926][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.000780][ T30] kauditd_printk_skb: 463 callbacks suppressed [ 302.000864][ T30] audit: type=1400 audit(1741461505.967:16407): avc: denied { write } for pid=16140 comm="syz.5.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 302.058021][T16146] xt_bpf: check failed: parse error [ 302.064122][ T30] audit: type=1326 audit(1741461506.027:16408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.089458][ T30] audit: type=1326 audit(1741461506.057:16409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.113218][ T30] audit: type=1326 audit(1741461506.057:16410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.137010][ T30] audit: type=1326 audit(1741461506.057:16411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.160651][ T30] audit: type=1326 audit(1741461506.057:16412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.184342][ T30] audit: type=1326 audit(1741461506.057:16413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.232281][ T30] audit: type=1326 audit(1741461506.187:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.256083][ T30] audit: type=1326 audit(1741461506.187:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.279829][ T30] audit: type=1326 audit(1741461506.187:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16145 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd36f67d169 code=0x7ffc0000 [ 302.451302][T16173] loop5: detected capacity change from 0 to 1024 [ 302.459474][T16173] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 302.470644][T16173] JBD2: no valid journal superblock found [ 302.476507][T16173] EXT4-fs (loop5): Could not load journal inode [ 302.532089][T16180] loop5: detected capacity change from 0 to 2048 [ 302.598698][T16188] x_tables: duplicate underflow at hook 2 [ 302.607127][T16180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.924395][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.538107][T16261] Non-string source [ 303.555723][T16264] loop5: detected capacity change from 0 to 164 [ 303.564908][T16264] syz.5.4860: attempt to access beyond end of device [ 303.564908][T16264] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 303.579236][T16264] syz.5.4860: attempt to access beyond end of device [ 303.579236][T16264] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 303.829472][T16281] __nla_validate_parse: 3 callbacks suppressed [ 303.829492][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4868'. [ 303.848380][ T36] Process accounting resumed [ 303.991970][T16285] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4870'. [ 304.216347][T16325] xt_bpf: check failed: parse error [ 305.055645][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4897'. [ 305.196959][T16365] xt_bpf: check failed: parse error [ 305.398702][T16394] xt_bpf: check failed: parse error [ 305.648548][T16417] xt_bpf: check failed: parse error [ 305.766093][T16428] x_tables: duplicate underflow at hook 2 [ 305.858567][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4936'. [ 305.958902][T16447] syz.2.4941: attempt to access beyond end of device [ 305.958902][T16447] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 305.974051][T16447] EXT4-fs (loop5): unable to read superblock [ 306.083468][T16455] syzkaller0: entered promiscuous mode [ 306.089053][T16455] syzkaller0: entered allmulticast mode [ 307.040976][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 307.040993][ T30] audit: type=1400 audit(1741461511.007:16550): avc: denied { getopt } for pid=16519 comm="syz.4.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.068355][ T30] audit: type=1400 audit(1741461511.017:16551): avc: denied { bind } for pid=16507 comm="syz.5.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 307.433033][T16538] xt_hashlimit: size too large, truncated to 1048576 [ 307.439899][T16538] xt_hashlimit: max too large, truncated to 1048576 [ 307.454132][ T30] audit: type=1326 audit(1741461511.417:16552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16467 comm="syz.1.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 307.710137][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4996'. [ 307.742797][ T30] audit: type=1326 audit(1741461511.707:16553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 307.767411][ T30] audit: type=1326 audit(1741461511.717:16554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 307.791182][ T30] audit: type=1326 audit(1741461511.717:16555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 307.814946][ T30] audit: type=1326 audit(1741461511.717:16556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 307.838687][ T30] audit: type=1326 audit(1741461511.717:16557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 307.862281][ T30] audit: type=1326 audit(1741461511.737:16558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.1.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 307.886335][ T30] audit: type=1326 audit(1741461511.737:16559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.1.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 308.009318][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5007'. [ 308.820378][T16637] loop5: detected capacity change from 0 to 512 [ 308.876620][T16637] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 308.887563][T16637] System zones: 0-2, 18-18, 34-34 [ 308.903978][T16637] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5028: bg 0: block 248: padding at end of block bitmap is not set [ 308.928077][T16637] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.5028: Failed to acquire dquot type 1 [ 308.952192][T16637] EXT4-fs (loop5): 1 truncate cleaned up [ 308.992916][T16637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.013115][T16637] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.085157][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.297220][T16673] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5044'. [ 309.385917][T16685] loop5: detected capacity change from 0 to 128 [ 309.418745][T16685] FAT-fs (loop5): Directory bread(block 32) failed [ 309.432540][T16685] FAT-fs (loop5): Directory bread(block 33) failed [ 309.440407][T16685] FAT-fs (loop5): Directory bread(block 34) failed [ 309.447961][T16685] FAT-fs (loop5): Directory bread(block 35) failed [ 309.454734][T16685] FAT-fs (loop5): Directory bread(block 36) failed [ 309.493481][T16685] FAT-fs (loop5): Directory bread(block 37) failed [ 309.501220][T16685] FAT-fs (loop5): Directory bread(block 38) failed [ 309.507869][T16685] FAT-fs (loop5): Directory bread(block 39) failed [ 309.519311][T16685] FAT-fs (loop5): Directory bread(block 40) failed [ 309.527252][T16685] FAT-fs (loop5): Directory bread(block 41) failed [ 309.559948][T16704] tmpfs: Bad value for 'mpol' [ 309.656961][T16723] netem: change failed [ 309.736526][T16733] loop5: detected capacity change from 0 to 1024 [ 309.746345][T16733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.761236][T16733] EXT4-fs (loop5): shut down requested (0) [ 309.784942][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.846582][T16747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16747 comm=syz.2.5072 [ 309.859311][T16747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=16747 comm=syz.2.5072 [ 309.875484][T16748] loop5: detected capacity change from 0 to 512 [ 309.879106][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5077'. [ 309.882314][T16748] EXT4-fs: Ignoring removed oldalloc option [ 309.899246][T16748] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 309.908696][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.912914][T16748] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 309.933803][T16748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 309.942077][T16748] System zones: 0-2, 18-18, 34-34 [ 309.947623][T16748] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 309.948112][T16750] bridge_slave_0 (unregistering): left allmulticast mode [ 309.958531][T16748] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.5074: bad orphan inode 15 [ 309.963147][T16750] bridge_slave_0 (unregistering): left promiscuous mode [ 309.973307][T16748] ext4_test_bit(bit=14, block=18) = 1 [ 309.980001][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.985428][T16748] is_bad_inode(inode)=0 [ 309.996770][T16748] NEXT_ORPHAN(inode)=2264924160 [ 310.001650][T16748] max_ino=32 [ 310.004888][T16748] i_nlink=0 [ 310.008042][T16748] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 310.023992][T16748] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5074: bg 0: block 80: padding at end of block bitmap is not set [ 310.039302][T16748] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 310.048773][T16748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.099150][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.149511][T16761] loop5: detected capacity change from 0 to 512 [ 310.249138][T16761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 310.262006][T16761] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.274396][T16761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 310.428226][T16789] syzkaller0: entered promiscuous mode [ 310.433740][T16789] syzkaller0: entered allmulticast mode [ 310.475038][T16797] loop5: detected capacity change from 0 to 128 [ 310.559772][T16803] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5100'. [ 310.734982][T16829] futex_wake_op: syz.2.5112 tries to shift op by 32; fix this program [ 310.860004][T16853] netlink: 'syz.5.5123': attribute type 4 has an invalid length. [ 311.100917][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'. [ 311.130000][T16882] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.133253][T16884] x_tables: duplicate underflow at hook 2 [ 311.147260][T16882] bridge_slave_0 (unregistering): left allmulticast mode [ 311.154366][T16882] bridge_slave_0 (unregistering): left promiscuous mode [ 311.161689][T16882] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.406986][T16919] loop5: detected capacity change from 0 to 128 [ 312.182230][ T30] kauditd_printk_skb: 272 callbacks suppressed [ 312.182247][ T30] audit: type=1326 audit(1741461516.147:16830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.227946][ T30] audit: type=1326 audit(1741461516.177:16831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.251679][ T30] audit: type=1326 audit(1741461516.177:16832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.275568][ T30] audit: type=1326 audit(1741461516.177:16833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.299186][ T30] audit: type=1326 audit(1741461516.177:16834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.322815][ T30] audit: type=1326 audit(1741461516.177:16835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.346633][ T30] audit: type=1326 audit(1741461516.177:16836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.348475][T17008] block device autoloading is deprecated and will be removed. [ 312.370306][ T30] audit: type=1326 audit(1741461516.177:16837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.401821][ T30] audit: type=1326 audit(1741461516.177:16838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.425566][ T30] audit: type=1326 audit(1741461516.177:16839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.5.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f978d169 code=0x7ffc0000 [ 312.493078][T17019] syz_tun: entered allmulticast mode [ 312.500436][T17018] syz_tun: left allmulticast mode [ 312.810940][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5221'. [ 313.000578][T17098] loop1: detected capacity change from 0 to 128 [ 313.283122][T17124] loop1: detected capacity change from 0 to 2048 [ 313.320210][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5251'. [ 313.332176][T17124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.377505][T17132] syzkaller0: entered promiscuous mode [ 313.383087][T17132] syzkaller0: entered allmulticast mode [ 313.411194][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.558065][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5261'. [ 313.589899][T17161] loop5: detected capacity change from 0 to 512 [ 313.596778][T17161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 313.608818][T17161] EXT4-fs (loop5): 1 truncate cleaned up [ 313.615115][T17161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.687149][T17168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17168 comm=syz.4.5266 [ 313.694594][T17161] loop5: detected capacity change from 512 to 64 [ 313.722847][T14531] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 313.746837][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.863491][T17155] loop1: detected capacity change from 0 to 128 [ 314.039357][T17211] loop1: detected capacity change from 0 to 128 [ 314.122378][T17221] syzkaller0: entered promiscuous mode [ 314.127977][T17221] syzkaller0: entered allmulticast mode [ 314.307448][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5299'. [ 314.317767][T17240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5299'. [ 314.877506][T17306] pim6reg: entered allmulticast mode [ 315.512896][T17305] pim6reg: left allmulticast mode [ 315.802860][T17361] block device autoloading is deprecated and will be removed. [ 315.811925][T17361] syz.5.5354: attempt to access beyond end of device [ 315.811925][T17361] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 315.826970][T17363] loop0: detected capacity change from 0 to 2048 [ 315.846791][T17363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.892582][T10763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.942384][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5359'. [ 315.973402][T17380] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 316.002918][T17384] pim6reg: entered allmulticast mode [ 316.022399][ T36] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 316.030588][T17386] loop1: detected capacity change from 0 to 1024 [ 316.037910][T17386] EXT4-fs: dax option not supported [ 316.058001][ T36] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.120801][T17393] sctp: [Deprecated]: syz.1.5366 (pid 17393) Use of int in max_burst socket option deprecated. [ 316.120801][T17393] Use struct sctp_assoc_value instead [ 316.289993][ T2965] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 316.309453][T17411] loop1: detected capacity change from 0 to 1024 [ 316.324110][ T2965] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.338170][T17411] EXT4-fs: dax option not supported [ 316.394332][T17417] sctp: [Deprecated]: syz.5.5378 (pid 17417) Use of int in max_burst socket option deprecated. [ 316.394332][T17417] Use struct sctp_assoc_value instead [ 316.566661][T17408] loop0: detected capacity change from 0 to 128 [ 316.596807][T17383] pim6reg: left allmulticast mode [ 316.718265][T17448] loop1: detected capacity change from 0 to 1024 [ 316.729211][T17448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.759726][T17451] 9pnet_fd: Insufficient options for proto=fd [ 316.760191][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.793833][T17453] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 316.922914][T17466] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5397'. [ 317.029490][T17486] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 317.098287][ T3378] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 317.106275][ T3378] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.120857][T17495] loop0: detected capacity change from 0 to 1024 [ 317.129306][T17495] EXT4-fs: dax option not supported [ 317.559014][T17528] 9pnet_fd: Insufficient options for proto=fd [ 317.661633][ T3374] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 317.670900][ T3374] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.690088][T17531] loop5: detected capacity change from 0 to 1024 [ 317.705149][T17531] EXT4-fs: dax option not supported [ 317.872527][ T30] kauditd_printk_skb: 351 callbacks suppressed [ 317.872546][ T30] audit: type=1326 audit(1741461521.837:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 317.902418][ T30] audit: type=1326 audit(1741461521.837:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 317.950165][ T30] audit: type=1326 audit(1741461521.907:17193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 317.973817][ T30] audit: type=1326 audit(1741461521.907:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.4.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466127d169 code=0x7ffc0000 [ 318.010100][T17554] x_tables: duplicate underflow at hook 2 [ 318.221956][T17558] 9pnet_fd: Insufficient options for proto=fd [ 318.240651][ T30] audit: type=1326 audit(1741461522.207:17195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 318.264384][ T30] audit: type=1326 audit(1741461522.207:17196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 318.288136][ T30] audit: type=1326 audit(1741461522.207:17197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 318.311953][ T30] audit: type=1326 audit(1741461522.207:17198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 318.335741][ T30] audit: type=1326 audit(1741461522.207:17199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 318.359393][ T30] audit: type=1326 audit(1741461522.207:17200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 318.566771][T17583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5446'. [ 318.739905][T17601] 9pnet_fd: Insufficient options for proto=fd [ 318.766684][T17605] loop0: detected capacity change from 0 to 128 [ 318.773370][T17605] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.788133][T17605] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 318.804932][T17607] sctp: [Deprecated]: syz.4.5457 (pid 17607) Use of int in max_burst socket option deprecated. [ 318.804932][T17607] Use struct sctp_assoc_value instead [ 318.907392][T17626] loop0: detected capacity change from 0 to 256 [ 318.920470][T17626] FAT-fs (loop0): Directory bread(block 64) failed [ 318.930640][T17626] FAT-fs (loop0): Directory bread(block 65) failed [ 318.937690][T17626] FAT-fs (loop0): Directory bread(block 66) failed [ 318.944584][T17626] FAT-fs (loop0): Directory bread(block 67) failed [ 318.951169][T17626] FAT-fs (loop0): Directory bread(block 68) failed [ 318.957894][T17626] FAT-fs (loop0): Directory bread(block 69) failed [ 318.964471][T17626] FAT-fs (loop0): Directory bread(block 70) failed [ 318.971165][T17626] FAT-fs (loop0): Directory bread(block 71) failed [ 318.977775][T17626] FAT-fs (loop0): Directory bread(block 72) failed [ 318.984424][T17626] FAT-fs (loop0): Directory bread(block 73) failed [ 319.005812][T17633] 9pnet_fd: Insufficient options for proto=fd [ 319.013757][ T3374] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 319.019204][T17626] syz.0.5466: attempt to access beyond end of device [ 319.019204][T17626] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 319.028074][T17635] loop1: detected capacity change from 0 to 1024 [ 319.042939][ T3374] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.052695][T17626] syz.0.5466: attempt to access beyond end of device [ 319.052695][T17626] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 319.065163][T17635] EXT4-fs: dax option not supported [ 319.311664][ T3374] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 319.323965][T17667] loop0: detected capacity change from 0 to 1024 [ 319.332366][ T3374] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.350028][T17667] EXT4-fs: dax option not supported [ 319.488555][T17679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.513788][T17679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.573813][T17679] loop0: detected capacity change from 0 to 1024 [ 319.600636][T17679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.637711][T17691] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 319.658097][T17679] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.0.5491: corrupted in-inode xattr: bad magic number in in-inode xattr [ 319.924572][T17708] syzkaller0: entered promiscuous mode [ 319.930082][T17708] syzkaller0: entered allmulticast mode [ 320.301187][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5509'. [ 320.326261][T10763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.776904][T17758] sctp: [Deprecated]: syz.5.5524 (pid 17758) Use of int in max_burst socket option deprecated. [ 320.776904][T17758] Use struct sctp_assoc_value instead [ 320.810273][T17761] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 320.845072][T17766] loop5: detected capacity change from 0 to 1024 [ 320.854384][T17766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.911721][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.049038][ T3374] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 321.057070][ T3374] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.078560][T17783] loop5: detected capacity change from 0 to 1024 [ 321.089003][T17783] EXT4-fs: dax option not supported [ 321.141153][T17789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.151243][T17789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.166342][T17787] sctp: [Deprecated]: syz.5.5536 (pid 17787) Use of int in max_burst socket option deprecated. [ 321.166342][T17787] Use struct sctp_assoc_value instead [ 321.186071][T17789] loop1: detected capacity change from 0 to 1024 [ 321.224836][T17789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.244197][T17789] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.1.5537: corrupted in-inode xattr: bad magic number in in-inode xattr [ 321.466300][T17792] loop5: detected capacity change from 0 to 128 [ 321.528766][T17797] loop5: detected capacity change from 0 to 1024 [ 321.535839][T17797] EXT4-fs: Ignoring removed nobh option [ 321.541515][T17797] EXT4-fs: Ignoring removed bh option [ 321.556138][T17797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.587739][T17797] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.5539: Allocating blocks 497-513 which overlap fs metadata [ 321.602815][T17797] EXT4-fs (loop5): pa ffff888106597850: logic 256, phys. 385, len 8 [ 321.610968][T17797] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 321.654308][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.778107][T17818] sctp: [Deprecated]: syz.4.5548 (pid 17818) Use of int in max_burst socket option deprecated. [ 321.778107][T17818] Use struct sctp_assoc_value instead [ 321.799012][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.831638][T17825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.847275][T17825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.862853][T17825] loop1: detected capacity change from 0 to 1024 [ 321.911133][T17825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.934146][T17825] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.1.5549: corrupted in-inode xattr: bad magic number in in-inode xattr [ 322.004604][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.022662][ T36] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 322.042613][T17841] loop5: detected capacity change from 0 to 1024 [ 322.049472][T17841] EXT4-fs: dax option not supported [ 322.081007][T17848] loop5: detected capacity change from 0 to 256 [ 322.087791][T17848] vfat: Bad value for 'dmask' [ 322.479852][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.819500][ T3374] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 322.827356][T17875] loop1: detected capacity change from 0 to 1024 [ 322.827459][ T3374] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 322.834095][T17875] EXT4-fs: dax option not supported [ 322.929517][T17881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.938077][T17881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.955711][T17881] loop5: detected capacity change from 0 to 1024 [ 322.967511][T17881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.980607][T17886] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 322.981172][T17881] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.5.5575: corrupted in-inode xattr: bad magic number in in-inode xattr [ 323.110525][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 323.110541][ T30] audit: type=1326 audit(1741461527.077:17289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.1.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 323.140535][ T30] audit: type=1326 audit(1741461527.077:17290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.1.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 323.164170][ T30] audit: type=1326 audit(1741461527.077:17291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.1.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 323.187881][ T30] audit: type=1326 audit(1741461527.077:17292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.1.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 323.211698][ T30] audit: type=1326 audit(1741461527.127:17293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.1.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 323.235424][ T30] audit: type=1326 audit(1741461527.127:17294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.1.5582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cb0dd169 code=0x7ffc0000 [ 323.355469][ T3374] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 323.368558][T17904] loop1: detected capacity change from 0 to 1024 [ 323.376715][ T3374] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.386734][T17904] EXT4-fs: dax option not supported [ 323.526705][T14531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.528129][T17914] loop1: detected capacity change from 0 to 2048 [ 323.546157][T17914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.572873][T11916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.634808][T17923] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 323.652173][T17931] loop1: detected capacity change from 0 to 128 [ 323.698398][ T30] audit: type=1326 audit(1741461527.667:17295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.0.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 323.728060][ T30] audit: type=1326 audit(1741461527.667:17296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.0.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 323.752265][ T30] audit: type=1326 audit(1741461527.697:17297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.0.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 323.775999][ T30] audit: type=1326 audit(1741461527.697:17298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.0.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258387d169 code=0x7ffc0000 [ 323.836500][T17945] syzkaller0: entered promiscuous mode [ 323.842087][T17945] syzkaller0: entered allmulticast mode [ 323.907705][T17931] ================================================================== [ 323.915837][T17931] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 323.923790][T17931] [ 323.926117][T17931] write to 0xffff888105b12b28 of 4 bytes by task 17941 on cpu 1: [ 323.933840][T17931] __mark_inode_dirty+0x24e/0x7e0 [ 323.938897][T17931] fat_update_time+0x1e8/0x200 [ 323.943691][T17931] touch_atime+0x14f/0x350 [ 323.948133][T17931] filemap_splice_read+0x8a5/0x910 [ 323.953275][T17931] splice_direct_to_actor+0x269/0x670 [ 323.958684][T17931] do_splice_direct+0xd7/0x150 [ 323.963481][T17931] do_sendfile+0x398/0x660 [ 323.967921][T17931] __x64_sys_sendfile64+0x110/0x150 [ 323.973166][T17931] x64_sys_call+0xfbd/0x2dc0 [ 323.977815][T17931] do_syscall_64+0xc9/0x1c0 [ 323.982364][T17931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.988293][T17931] [ 323.990632][T17931] read to 0xffff888105b12b28 of 4 bytes by task 17931 on cpu 0: [ 323.998283][T17931] __mark_inode_dirty+0x58/0x7e0 [ 324.003267][T17931] fat_update_time+0x1e8/0x200 [ 324.008071][T17931] touch_atime+0x14f/0x350 [ 324.012513][T17931] filemap_splice_read+0x8a5/0x910 [ 324.017695][T17931] splice_direct_to_actor+0x269/0x670 [ 324.023108][T17931] do_splice_direct+0xd7/0x150 [ 324.027904][T17931] do_sendfile+0x398/0x660 [ 324.032341][T17931] __x64_sys_sendfile64+0x110/0x150 [ 324.037586][T17931] x64_sys_call+0xfbd/0x2dc0 [ 324.042214][T17931] do_syscall_64+0xc9/0x1c0 [ 324.046775][T17931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.052701][T17931] [ 324.055035][T17931] value changed: 0x00000000 -> 0x00000038 [ 324.060760][T17931] [ 324.063101][T17931] Reported by Kernel Concurrency Sanitizer on: [ 324.069270][T17931] CPU: 0 UID: 0 PID: 17931 Comm: syz.1.5594 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 324.081546][T17931] Tainted: [W]=WARN [ 324.085369][T17931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.095445][T17931] ================================================================== [ 324.276966][T17931] ================================================================== [ 324.285101][T17931] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 324.293133][T17931] [ 324.295470][T17931] write to 0xffff888105b12b28 of 4 bytes by task 17941 on cpu 0: [ 324.303200][T17931] __mark_inode_dirty+0x24e/0x7e0 [ 324.308260][T17931] fat_update_time+0x1e8/0x200 [ 324.313041][T17931] touch_atime+0x14f/0x350 [ 324.317517][T17931] filemap_splice_read+0x8a5/0x910 [ 324.322666][T17931] splice_direct_to_actor+0x269/0x670 [ 324.328069][T17931] do_splice_direct+0xd7/0x150 [ 324.332851][T17931] do_sendfile+0x398/0x660 [ 324.337278][T17931] __x64_sys_sendfile64+0x110/0x150 [ 324.342533][T17931] x64_sys_call+0xfbd/0x2dc0 [ 324.347161][T17931] do_syscall_64+0xc9/0x1c0 [ 324.351704][T17931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.357621][T17931] [ 324.359959][T17931] read to 0xffff888105b12b28 of 4 bytes by task 17931 on cpu 1: [ 324.367596][T17931] __mark_inode_dirty+0x198/0x7e0 [ 324.372672][T17931] fat_update_time+0x1e8/0x200 [ 324.377457][T17931] touch_atime+0x14f/0x350 [ 324.381893][T17931] filemap_splice_read+0x8a5/0x910 [ 324.387035][T17931] splice_direct_to_actor+0x269/0x670 [ 324.392438][T17931] do_splice_direct+0xd7/0x150 [ 324.397244][T17931] do_sendfile+0x398/0x660 [ 324.401679][T17931] __x64_sys_sendfile64+0x110/0x150 [ 324.407002][T17931] x64_sys_call+0xfbd/0x2dc0 [ 324.411624][T17931] do_syscall_64+0xc9/0x1c0 [ 324.416156][T17931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.422076][T17931] [ 324.424413][T17931] value changed: 0x00000000 -> 0x00000038 [ 324.430140][T17931] [ 324.432468][T17931] Reported by Kernel Concurrency Sanitizer on: [ 324.438636][T17931] CPU: 1 UID: 0 PID: 17931 Comm: syz.1.5594 Tainted: G W 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 324.450903][T17931] Tainted: [W]=WARN [ 324.454723][T17931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.464803][T17931] ==================================================================